Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2a823e55-08e8-3fec-8f46-7803e23061ed.roa
File: 2a823e55-08e8-3fec-8f46-7803e23061ed.roa (raw, json)
Hash identifier: RnRYblsJJyjJNKdDNQJr/oGfPyb6koOdROaDJYkz83Y=
Subject key identifier: 7A:2A:DA:AD:F8:81:FB:11:B6:49:F0:BC:08:AE:3B:06:16:00:34:49
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DA8B97D5B3929F00E06DD2A00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2a823e55-08e8-3fec-8f46-7803e23061ed.roa
Signing time: Thu 21 Apr 2022 12:00:00 +0000
ROA not before: Thu 21 Apr 2022 12:00:00 +0000
ROA not after: Fri 27 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 108.166.224.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:a8:b9:7d:5b:39:29:f0:0e:06:dd:2a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 21 12:00:00 2022 GMT
Not After : May 27 04:00:00 2022 GMT
Subject: CN=cf67abde-4bfb-4342-84c0-8a367e73dd10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4a:88:dc:f4:8c:b8:8d:8b:80:ad:8e:65:9b:
52:6b:46:1d:cf:e0:8f:e0:41:5d:5a:78:b9:b2:12:
c9:00:81:93:83:99:c7:06:24:a5:cb:e6:91:f1:eb:
4e:d0:50:fa:42:af:d8:11:9f:5b:28:99:6a:c7:0e:
3a:b9:37:29:01:cd:db:d4:73:1d:18:98:79:ad:ec:
f8:8d:d1:0a:68:19:4f:d9:2b:c9:1b:12:70:7a:74:
8b:71:9e:07:68:72:95:5b:af:79:80:b1:c4:d2:90:
b7:ee:58:9f:10:ac:87:16:0f:51:92:53:db:a1:f7:
82:01:20:00:be:74:6b:66:da:e9:53:23:f0:15:41:
10:c0:59:85:3f:4a:c2:5f:64:60:97:6c:09:0c:1c:
50:a4:10:a8:6e:d7:95:7a:48:32:83:09:37:7f:31:
49:9f:63:a7:ab:68:0b:b4:5e:2c:10:8f:3e:27:15:
de:ac:77:38:68:56:d4:86:e7:db:c9:36:1b:a0:7e:
54:47:a2:db:d2:89:cf:05:b2:27:3f:bf:71:9e:e6:
34:be:e6:81:22:64:b9:07:aa:33:cf:21:47:a9:37:
81:ab:a3:73:a2:dd:95:80:f5:14:b5:51:e0:18:9f:
67:de:67:18:e7:a8:8c:63:ef:ef:b2:c6:38:dd:eb:
5f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:2A:DA:AD:F8:81:FB:11:B6:49:F0:BC:08:AE:3B:06:16:00:34:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2a823e55-08e8-3fec-8f46-7803e23061ed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
108.166.224.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:8c:10:d8:5f:a3:ce:7d:03:ec:61:37:c1:1b:5f:57:11:57:
20:cf:88:2e:73:bd:a5:01:a9:04:00:73:93:8f:1f:9f:40:14:
f3:e6:9b:74:8e:4a:b3:26:6b:cb:1e:49:b0:b5:ad:c1:19:d1:
b3:44:54:df:06:0e:35:4c:e3:d0:ed:dd:13:1a:6c:b7:13:84:
bc:bd:0e:d4:96:e9:22:8f:e2:46:24:3b:d5:93:a9:f9:25:1b:
ea:80:90:72:49:b1:47:66:30:b1:c8:8c:f4:5f:e7:ae:99:a8:
19:2b:1a:64:b2:14:9c:f0:23:63:9d:d0:f2:39:43:b7:29:f6:
8c:23:f6:87:85:e1:34:83:53:6d:1e:77:71:9a:f1:06:7d:e2:
db:60:bb:fc:12:9b:03:53:bf:27:d9:4c:e3:ca:f8:1c:a2:00:
b7:64:1b:8c:fd:09:38:3d:9d:84:f3:c7:2b:11:8e:2c:3c:fe:
bf:9f:6a:8c:80:08:d1:a8:cb:7f:f3:62:c2:07:d6:fb:66:26:
ac:1e:9e:04:bf:93:f7:c1:d9:36:41:0c:95:e3:62:0b:25:cd:
72:b6:d6:30:a3:6e:cb:b2:13:88:e5:c3:1e:78:4e:cf:4e:18:
94:94:5b:ac:8a:4f:a8:2e:74:50:3a:9b:a9:bd:d0:eb:b9:4a:
89:a2:6f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:30:21 2025 by rpki-client