Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/267c450a-415f-3829-aff9-7a482c377703.roa
File: 267c450a-415f-3829-aff9-7a482c377703.roa (raw, json)
Hash identifier: tVuts1c8lPPD3i0slZOSfLHa3+QTWAyaFhEv2p1t5Wo=
Subject key identifier: 42:07:0E:52:74:01:93:0B:C9:A6:0A:A1:B1:BD:B2:92:C3:2A:46:76
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DD204CD75E159E7A387219900
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/267c450a-415f-3829-aff9-7a482c377703.roa
Signing time: Fri 06 May 2022 12:00:00 +0000
ROA not before: Fri 06 May 2022 12:00:00 +0000
ROA not after: Sat 11 Jun 2022 04:00:00 +0000
asID: 14618
IP address blocks: 108.156.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:d2:04:cd:75:e1:59:e7:a3:87:21:99:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 6 12:00:00 2022 GMT
Not After : Jun 11 04:00:00 2022 GMT
Subject: CN=5ab09e0b-bf41-48c7-a90f-d17a8fc33fc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0e:30:af:f5:07:27:1b:a4:b1:23:90:d8:73:
03:10:8c:45:cf:53:0d:4a:27:44:1a:be:63:28:e8:
ff:12:66:b8:50:7a:1e:b5:19:be:b8:53:11:82:8d:
60:a7:38:75:58:6d:20:65:0a:9e:10:de:29:f7:d0:
8f:32:2f:fa:db:9f:ed:dd:99:5f:ab:fb:bb:0e:23:
70:0a:0f:24:97:19:56:94:99:c5:12:75:dc:e9:d9:
f1:47:98:9b:2c:32:ce:a5:8b:ba:36:86:c9:3d:07:
ec:52:0b:5e:53:90:1c:f3:2c:95:27:bc:d6:00:b6:
97:5d:d4:2e:c4:6d:b4:98:22:69:5f:5b:c5:ba:7f:
a8:ae:d8:8d:35:85:f8:e3:17:cc:a2:21:5d:85:ba:
75:32:b4:d5:9b:3c:18:e9:3b:80:9f:8c:22:96:e2:
9e:61:c7:86:a8:ca:0b:2e:9b:60:75:40:a6:89:92:
3d:27:0b:ba:24:dd:cc:c5:58:6c:1b:25:40:71:5b:
3d:2a:ef:ab:e1:3e:4b:19:37:78:f0:ea:f6:ce:a9:
af:2b:74:5a:5f:25:6c:6f:d3:22:99:3d:25:23:82:
40:d0:6e:b8:24:1a:2c:af:5c:6a:17:32:61:94:55:
c3:76:29:b0:25:86:55:47:97:fd:97:69:15:36:04:
2e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:07:0E:52:74:01:93:0B:C9:A6:0A:A1:B1:BD:B2:92:C3:2A:46:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/267c450a-415f-3829-aff9-7a482c377703.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
108.156.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:d2:ed:fc:e9:41:20:a7:0c:d0:c6:3c:ef:41:bd:4b:cf:44:
7a:44:7b:e8:b0:2f:11:52:71:a9:58:27:f8:52:cd:5d:9a:58:
69:8a:8c:27:df:a3:8f:d0:9c:8f:b9:d8:6d:ea:fd:7c:35:94:
41:df:db:fb:b6:21:71:e4:1b:0e:d1:b4:3f:1f:62:02:5e:1a:
9a:6f:3d:94:6c:69:14:39:38:b0:3a:bc:fe:4c:d4:90:a8:be:
a0:dd:f6:4c:0d:9f:0e:18:b5:3b:60:2f:11:19:2a:a1:0d:fd:
dd:22:a2:93:5b:ae:b8:15:79:ea:58:9c:e4:0d:3c:33:75:f2:
82:4c:e4:c2:99:22:47:6a:3a:aa:48:0b:9d:77:79:34:2d:ba:
ae:9c:11:09:0e:b8:7a:09:41:40:c7:a4:5e:dd:67:dc:19:0e:
72:19:51:9e:92:42:ef:b5:37:4d:46:f9:75:d8:4c:a4:6e:76:
49:c8:43:eb:46:b6:6f:4f:94:ba:da:4f:00:4b:ac:9a:35:5d:
94:e3:e8:5b:65:0e:e8:9f:48:8f:45:ee:6b:d0:5c:64:52:15:
45:2e:25:76:a1:cf:81:cd:6c:01:51:b4:18:ad:82:fc:3c:a4:
2d:be:11:c9:4f:fb:25:6f:a6:04:f1:d2:cc:7c:66:b1:0a:34:
05:3e:eb:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:32:05 2025 by rpki-client