Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/16865de9-a84b-348c-852b-0db253147b69.roa
File: 16865de9-a84b-348c-852b-0db253147b69.roa (raw, json)
Hash identifier: YEN3/vcX2aFsRakmcsklfD0cmrq25QXNIGPCFf2wmPw=
Subject key identifier: 4A:B7:4A:0F:C7:44:08:35:87:74:96:2D:94:A0:AE:18:02:81:92:3E
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D33278D799F157668F9DA2600
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/16865de9-a84b-348c-852b-0db253147b69.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 108.128.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:33:27:8d:79:9f:15:76:68:f9:da:26:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=52c9cf47-e600-455f-a7bc-8c68ad88e526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:60:06:1d:01:55:34:4d:91:fd:b5:03:33:b2:
60:02:93:39:b9:50:76:1a:52:cb:7f:0c:a6:f1:1f:
8e:71:f4:4d:b9:d6:8d:d9:44:fe:09:f8:ca:4e:a2:
a9:a0:b7:d4:16:8f:ac:85:b4:ac:f4:28:11:4b:35:
61:22:d5:5e:2a:58:87:76:61:e7:ec:46:78:75:73:
21:23:4c:21:24:e3:3e:90:ec:3a:a8:88:30:49:c8:
75:ea:33:8a:f3:50:82:12:91:3b:99:77:38:65:f4:
f3:8a:00:d6:0c:ef:90:3c:a5:83:08:b6:c9:a6:b2:
72:8f:53:e8:c2:49:ee:68:0a:39:17:90:d8:5a:7d:
09:e0:ac:2a:03:b2:27:c3:24:aa:c3:f9:98:d9:37:
0d:c7:00:4d:11:5d:bd:b3:81:ee:0d:68:a9:22:cd:
f6:27:37:c4:63:43:26:e3:b4:ac:e3:86:8d:ca:f4:
3e:35:07:fc:b1:79:40:22:34:84:12:8e:06:e8:5f:
8d:d0:33:f2:41:59:21:ec:a0:54:b5:e9:66:68:c1:
91:7d:42:a4:1c:a2:2f:3b:b0:4c:4c:ad:9f:1c:43:
ad:d0:b3:40:53:a4:18:33:61:b4:fa:27:3e:43:d9:
95:20:c7:5c:85:73:c5:f7:11:48:43:09:0c:97:2a:
db:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B7:4A:0F:C7:44:08:35:87:74:96:2D:94:A0:AE:18:02:81:92:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/16865de9-a84b-348c-852b-0db253147b69.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
108.128.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:eb:ea:46:77:cd:6d:3d:ed:7e:43:bb:79:39:32:58:f7:5d:
33:c5:d4:e7:32:a0:ec:22:8f:e2:08:9e:72:14:e0:bb:d2:42:
89:d2:8d:fa:52:6a:4f:2f:f7:58:31:c6:ac:27:7b:6c:00:05:
e1:f7:0c:cc:a0:68:a7:8a:ae:3d:25:61:15:47:e6:31:a0:e9:
2d:50:73:7c:eb:84:53:09:e0:6d:bd:5a:91:3e:55:f5:7c:41:
a9:f2:f5:45:ec:8b:5a:9c:bd:5e:76:ea:18:30:36:74:d3:8d:
3c:2d:d3:94:1d:e8:94:d0:d4:c2:39:fe:56:69:e0:77:e8:dc:
4b:58:77:26:04:e0:b1:75:ea:e6:02:47:c6:5e:63:7e:e2:08:
72:4a:5d:62:ab:ca:e6:d6:7c:38:cc:76:f2:63:a0:16:5c:c3:
c4:63:1a:10:27:88:66:31:07:c2:2e:2c:8f:46:f4:0b:bd:93:
a8:3d:0e:84:58:45:e8:a1:bc:a9:5a:13:46:25:9a:23:1b:35:
cb:0c:7d:34:90:8c:bb:c6:fa:42:cd:8c:3d:fe:0b:30:25:18:
26:c5:28:4d:d4:cc:21:e5:a8:4e:75:6b:ab:db:81:61:47:bd:
d3:b4:67:8f:9a:68:a6:9a:91:ff:9f:af:84:60:05:dd:8f:75:
ac:be:36:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:52:35 2025 by rpki-client