Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/25f95495-78e9-37ac-a563-911182558791.roa
File: 25f95495-78e9-37ac-a563-911182558791.roa (raw, json)
Hash identifier: B2Q7Kz6+NXAVTT7ljz6mZwDAJJXoqT3IH0rxUajXW+Y=
Subject key identifier: 8D:95:3E:E3:9C:24:C8:AD:3D:E6:2A:F9:52:02:37:F6:30:45:C2:47
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F5A2B9FF44824F283DC8BD980
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/25f95495-78e9-37ac-a563-911182558791.roa
Signing time: Fri 23 Sep 2022 12:00:00 +0000
ROA not before: Fri 23 Sep 2022 12:00:00 +0000
ROA not after: Sat 29 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 108.136.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:5a:2b:9f:f4:48:24:f2:83:dc:8b:d9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 23 12:00:00 2022 GMT
Not After : Oct 29 04:00:00 2022 GMT
Subject: CN=a95d7c0c-c1a0-412f-99d6-a09a09eb166f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:1b:aa:aa:3a:8a:e0:ed:32:bc:9c:a6:ab:5a:
07:17:fe:9e:ee:62:6e:28:6c:0a:9b:e9:f7:24:11:
80:88:af:34:5b:09:e7:1b:36:0d:05:31:3e:6d:4f:
09:f3:c4:60:1a:ea:9f:0c:31:56:fd:51:1c:0e:99:
f3:53:06:4d:b4:51:0d:3a:bc:6b:70:d1:0d:91:67:
1c:46:65:c4:e2:44:50:da:76:ac:c3:25:ae:a6:55:
62:75:80:bb:a5:98:2e:82:93:ba:05:01:e9:22:ee:
00:bf:81:e0:c4:81:c1:41:a9:59:e8:b6:a4:2c:cd:
f2:5f:2f:e2:aa:0e:90:f5:3a:7f:9c:46:0d:13:97:
1a:0c:51:04:77:f6:3b:b5:93:f6:49:33:7e:da:64:
62:47:26:45:52:f3:f0:0c:d7:18:26:25:2f:aa:bc:
a3:5e:77:2f:80:70:eb:4b:14:d3:36:cb:0a:06:e7:
db:e9:dc:91:d1:53:58:75:c3:32:11:af:41:26:7a:
69:4f:89:ba:db:c3:88:10:a4:bc:ae:5f:42:f5:60:
7c:69:c3:ea:35:03:ff:7f:5b:b4:76:cc:18:c2:73:
57:ad:f5:c6:9d:f1:e5:c8:5e:fb:af:0e:2d:96:75:
8b:da:5a:2b:40:9e:6b:4c:42:7c:54:f5:7e:b0:8f:
dd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:95:3E:E3:9C:24:C8:AD:3D:E6:2A:F9:52:02:37:F6:30:45:C2:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/25f95495-78e9-37ac-a563-911182558791.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
108.136.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:88:99:7e:07:5e:68:d1:48:72:21:57:7c:7b:a7:54:df:e1:
55:c5:d6:74:0e:44:99:68:f1:68:05:2e:2b:9b:49:ca:fa:85:
99:ff:29:ae:7e:98:db:44:8f:4d:1a:e6:b3:3f:a2:39:a7:98:
e5:2d:58:f7:28:2f:43:60:30:c4:cd:54:13:e8:5c:b7:71:97:
f1:6c:6a:33:9a:dc:d7:b4:01:c6:61:fe:e9:03:15:f5:11:70:
a2:99:80:d9:42:49:a6:47:1e:cf:0f:c0:26:7a:d7:4f:76:c0:
44:a3:0a:68:dd:63:7b:00:67:14:03:d8:89:d6:c1:96:13:d2:
6d:af:20:87:0c:18:7f:05:55:e0:a3:a3:23:c9:20:45:49:60:
d8:70:c4:af:a2:e6:7d:ba:c0:bf:d7:6b:68:b9:18:7c:57:7b:
18:31:43:b3:c0:de:e1:d9:3a:56:a7:b4:dc:23:d9:c2:12:fc:
a6:a1:a8:f9:d8:7d:1a:06:9f:4a:18:d5:46:16:21:2c:9a:04:
b4:44:a1:26:fc:11:04:20:c0:14:a4:26:0a:ef:f7:28:2d:8f:
af:8c:c8:c4:8f:87:d3:32:eb:64:3f:12:c2:0c:a5:39:45:10:
77:82:56:80:17:b9:ed:57:2b:5f:0d:06:4e:a0:b0:9e:b1:66:
f3:e5:c7:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:32:16 2025 by rpki-client