Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/23bf842d-3c76-335a-9d66-5ea79d194885.roa
File: 23bf842d-3c76-335a-9d66-5ea79d194885.roa (raw, json)
Hash identifier: zjBoo752Rz4I7JhnhBMOJA6MG21RMNxE8kk89q8Oxe8=
Subject key identifier: 4C:3D:14:AC:7F:A5:F8:52:A7:01:99:17:A7:72:FA:F7:E7:7D:B5:AB
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F58BED23B9C30235E26786580
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/23bf842d-3c76-335a-9d66-5ea79d194885.roa
Signing time: Fri 23 Sep 2022 12:00:00 +0000
ROA not before: Fri 23 Sep 2022 12:00:00 +0000
ROA not after: Sat 29 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 108.156.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:58:be:d2:3b:9c:30:23:5e:26:78:65:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 23 12:00:00 2022 GMT
Not After : Oct 29 04:00:00 2022 GMT
Subject: CN=145c659b-e46f-4166-a868-29651733102a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b8:92:f5:cd:47:33:c9:0e:b0:5f:70:88:05:
19:9b:2d:b2:a6:2a:aa:7e:61:63:ca:b0:a2:36:4e:
d3:3e:2f:f6:a9:c1:16:2f:6d:92:b5:f4:23:81:dc:
3b:59:b1:a2:59:a5:cf:44:eb:ed:f0:0d:c0:83:6b:
3d:1b:8b:4f:a3:22:42:5c:c8:11:e0:ac:60:b2:ec:
c7:43:03:95:b4:e9:df:55:cb:24:11:c0:c2:70:27:
3e:c9:ae:37:ab:4b:40:fc:d9:e0:75:4a:3c:16:4f:
52:88:cc:16:a9:1c:15:ee:42:ed:5a:be:8c:04:a5:
13:85:51:9f:6e:b5:02:47:b0:ed:89:59:69:33:51:
9b:ea:a9:df:0d:45:db:ce:fa:2e:f0:63:5c:8b:36:
a7:39:91:7a:43:a4:83:77:de:78:8d:ca:db:fa:d0:
82:0c:a8:a4:f8:46:fe:ed:4a:73:01:0e:6b:4d:b7:
8f:da:6f:b0:0a:49:9c:8c:08:c5:f5:89:f2:cf:b0:
22:80:34:d7:41:0f:0b:d3:7a:8c:df:5c:03:26:48:
f1:44:e3:0b:55:3d:c7:90:71:39:f9:74:9d:1e:df:
1b:ed:d8:ec:b9:70:82:a6:1f:1a:98:3d:09:b6:2d:
28:64:1e:61:ff:b2:77:54:c9:23:4c:4e:9e:08:e2:
a6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:3D:14:AC:7F:A5:F8:52:A7:01:99:17:A7:72:FA:F7:E7:7D:B5:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/23bf842d-3c76-335a-9d66-5ea79d194885.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
108.156.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:a3:c9:21:4f:fa:a4:ab:87:ce:56:0f:f8:2c:0a:57:32:db:
5c:d8:f1:8b:81:43:c9:7b:6f:7f:09:0a:d3:fd:50:24:4d:aa:
b1:d0:fb:2c:e4:f5:f6:86:95:d8:4b:01:b4:00:96:38:52:5c:
72:8f:03:1b:81:af:f8:6d:de:be:ae:da:82:b7:cd:1b:f8:ec:
30:d9:a2:3a:9f:5d:f1:0e:c2:29:ec:9c:4e:08:68:2d:71:65:
3e:95:d1:ff:4c:28:c8:87:49:f9:3c:86:a5:f1:43:b7:22:2d:
13:93:8f:5e:a3:2f:7c:c9:28:e3:fd:aa:18:8e:30:9e:b4:0b:
0e:cc:f1:a4:7c:36:2e:3e:43:c2:81:48:a6:4c:0f:d1:93:7b:
53:ad:6e:e6:f8:96:04:41:7c:2f:da:f9:90:0b:2e:52:65:9d:
ea:4e:fd:d5:3e:40:44:8a:af:1a:4c:13:75:70:bc:f6:cf:3f:
79:b1:37:00:ae:f9:4c:b8:18:b6:ec:b5:aa:22:f8:70:63:67:
98:5c:55:6e:55:7f:26:e3:d3:fe:56:b7:6c:7e:65:c4:48:b0:
77:ba:78:65:75:1a:41:78:d1:9d:08:a6:f4:fc:0c:c8:b4:ea:
57:a3:b0:3c:87:9c:41:4d:be:58:6d:3e:af:95:05:db:42:75:
fe:75:2a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:32:44 2025 by rpki-client