Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1c9ea233-7a4f-318c-9c18-685b919f37c6.roa
File: 1c9ea233-7a4f-318c-9c18-685b919f37c6.roa (raw, json)
Hash identifier: Nkl3j3I4+IdnlXPhvhxQ+tRfx7CmyG++mAl/jeZZpjo=
Subject key identifier: AD:F8:7E:EB:C2:7F:9F:81:58:6B:B0:1D:AA:75:64:4C:EE:CB:4A:A9
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DF921EDE8EB640243ADA24C80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1c9ea233-7a4f-318c-9c18-685b919f37c6.roa
Signing time: Fri 20 May 2022 12:00:00 +0000
ROA not before: Fri 20 May 2022 12:00:00 +0000
ROA not after: Sat 25 Jun 2022 04:00:00 +0000
asID: 8987
IP address blocks: 108.156.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:f9:21:ed:e8:eb:64:02:43:ad:a2:4c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 20 12:00:00 2022 GMT
Not After : Jun 25 04:00:00 2022 GMT
Subject: CN=0b1efdf9-0997-4d87-9ec2-13b417d016dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:fc:ea:0b:2f:b8:98:8e:4f:3c:72:ba:d6:d5:
c8:e2:d5:9e:db:09:af:33:ee:a8:6f:e8:a6:da:f3:
7f:9b:ea:d8:ff:66:84:6d:01:bf:f9:9b:af:c2:93:
14:5d:70:90:20:ee:43:06:c5:e0:25:ce:25:e9:5d:
2c:03:ee:f3:fe:d5:23:d0:fe:f7:48:f6:92:cd:ce:
c0:32:d8:39:59:62:0d:73:42:df:40:52:be:e6:f5:
a9:7b:63:da:d2:74:a8:5d:a5:d6:1a:f7:d1:8f:b7:
cd:c4:6f:22:a8:b5:68:57:1a:45:be:f7:4f:6c:63:
f1:ec:ea:99:f5:62:fe:87:5e:5c:e8:e6:c8:fc:7c:
a6:6e:0c:9d:53:11:4d:b4:3a:fc:13:7e:8e:bb:90:
ca:14:ae:8b:a4:d7:ec:d2:71:1a:fe:54:52:64:61:
8e:d8:ce:25:55:a3:ee:99:24:e0:fa:52:e2:dd:a8:
dc:dc:4b:07:94:40:61:c2:e2:3b:26:ca:db:57:3b:
e6:5c:87:e3:14:f3:b2:52:96:95:4e:98:33:72:73:
8e:b8:ee:fd:9b:92:29:c5:b5:ce:f8:34:11:19:7e:
39:d2:de:74:b9:c7:60:d5:5e:0b:73:dd:8a:8c:cc:
a3:1f:8f:44:8c:1a:51:e3:69:5c:b0:f7:f9:48:33:
e8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F8:7E:EB:C2:7F:9F:81:58:6B:B0:1D:AA:75:64:4C:EE:CB:4A:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1c9ea233-7a4f-318c-9c18-685b919f37c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
108.156.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:ea:e8:ad:4a:9b:c9:ff:84:ae:58:80:5d:eb:4a:d1:85:40:
56:95:48:bd:24:07:2e:db:be:e0:ef:c1:4e:ce:81:9c:5b:1b:
ce:87:6a:c9:70:e9:22:dd:ed:22:fe:ff:8d:2e:e5:9f:23:e1:
33:b3:b2:75:e5:b4:52:57:a7:77:7a:3e:9a:95:5b:b8:1f:5d:
98:9d:50:2a:63:cf:37:37:d9:3b:96:1c:89:18:33:1b:55:fa:
b2:8d:5a:f9:81:c0:8c:3d:cd:5d:d2:a0:f2:e2:ad:31:87:4a:
fc:c5:fa:26:88:ed:e4:27:b5:14:49:33:83:58:ff:14:78:f0:
f3:1c:ec:0d:f5:32:01:5e:f9:dd:9d:4e:c5:9f:0a:11:7f:43:
ab:ec:bd:7e:b6:05:34:4f:26:1c:70:d7:56:b0:72:36:da:c0:
3a:c1:f9:a2:ab:9b:44:27:a0:c1:46:c6:ed:d1:bc:a0:d1:37:
78:a4:ff:4a:06:b2:20:89:73:50:ef:83:94:55:22:e5:10:52:
eb:e4:66:33:47:b4:6c:19:5a:39:e2:76:fd:55:7f:06:eb:d6:
ea:5e:61:06:cd:c3:8c:86:c6:2a:dc:5a:25:ea:a5:6e:a1:7f:
dc:c3:5e:53:ec:b5:b1:07:c3:78:e9:13:ea:3e:80:12:af:f9:
86:3c:2f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:14:14 2025 by rpki-client