Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/356af2ae-c7b1-36f4-8001-824cb64f9fca.roa
File: 356af2ae-c7b1-36f4-8001-824cb64f9fca.roa (raw, json)
Hash identifier: MdFLKPI7EB+s9yUAsI26dlQtWfpaLO+koXrI9nMYm1Q=
Subject key identifier: F7:90:7D:AC:D2:5D:62:33:3A:D4:B9:0C:4C:4F:C8:1D:5C:43:1B:75
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D81618EFC772ABD339CD44520
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/356af2ae-c7b1-36f4-8001-824cb64f9fca.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 14618
IP address blocks: 108.128.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:81:61:8e:fc:77:2a:bd:33:9c:d4:45:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=0059028b-b045-4061-9d47-98832e3deb83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b3:36:0f:3f:98:61:d1:93:36:4a:df:10:9e:
de:20:8e:57:11:b9:ab:9c:e1:03:42:71:e4:60:bf:
56:e1:7b:9a:2e:c5:20:03:88:df:70:c3:6b:28:b2:
5f:e4:46:be:08:ae:e9:4c:d7:c9:a5:cc:70:74:27:
d6:0d:99:b3:64:47:5d:76:46:6c:65:43:c6:c3:85:
9a:5b:2a:a2:56:4a:2b:d1:de:7b:d2:34:3b:f7:0e:
5b:ae:44:04:dd:05:30:2a:da:3a:26:ff:dc:af:ba:
c3:fd:0f:5c:4f:a7:64:3a:73:66:58:f1:62:f3:50:
55:36:54:ac:24:d8:71:ba:56:e0:fb:29:f6:5f:7f:
c4:72:97:b7:60:80:49:f6:6d:f0:96:c1:0b:ef:76:
da:a2:cf:21:18:40:18:ef:eb:a4:6e:f3:39:7a:c2:
ad:00:fe:12:c9:bd:43:a1:15:8c:b6:bc:40:d0:6e:
36:68:67:49:2b:45:e3:23:db:cd:9b:72:25:bf:0f:
fd:84:8d:33:5e:eb:42:d8:cc:cd:79:30:42:d0:ca:
c2:5a:ea:8f:29:5b:ad:f2:ac:95:e2:bc:9a:cd:dc:
96:c8:06:ee:da:c0:8a:6a:ce:b9:d3:7b:ee:66:a8:
30:fc:62:86:8b:0c:54:b3:5d:7f:69:16:b6:c0:ee:
e1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:90:7D:AC:D2:5D:62:33:3A:D4:B9:0C:4C:4F:C8:1D:5C:43:1B:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/356af2ae-c7b1-36f4-8001-824cb64f9fca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
108.128.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:f5:1b:4f:a7:5f:50:97:e6:60:9d:49:9b:9c:71:3b:73:ba:
3f:ac:fe:8b:bf:3c:81:4a:6b:a9:ee:20:94:e2:40:6c:1c:b1:
ce:15:7b:49:43:94:7e:d4:d3:65:52:39:b9:ab:a7:b5:9c:b0:
89:c0:54:ab:18:ed:90:73:1c:79:b8:18:94:e7:6a:91:eb:df:
2d:5b:de:a2:6f:36:21:2d:d2:ed:a2:aa:e9:c2:0d:0f:a8:1f:
37:5a:70:7a:86:ab:c2:e8:93:be:6e:40:54:04:9a:35:7b:25:
b1:16:43:ab:df:15:cd:d1:26:37:97:6d:f5:11:2c:1e:89:f9:
a7:bc:a6:61:73:00:11:e1:33:a0:67:70:9d:43:88:7b:2b:e3:
4a:29:bb:70:fe:84:55:0c:e3:7f:3d:f6:ff:32:c0:52:fc:8e:
43:a8:ae:a2:bd:bc:f7:d1:a7:b8:9a:ce:20:f9:f3:32:d1:17:
b6:25:da:bd:35:ee:65:b0:3c:7d:3e:e4:23:b7:da:a6:65:82:
a6:e8:2c:81:3c:ba:9b:72:fc:81:b1:46:a7:e2:89:60:1e:09:
7c:0e:12:b5:2d:65:e9:9e:cd:3b:01:9a:55:ae:09:6a:8f:a0:
a5:ea:6d:f7:13:4a:15:63:71:ee:ab:63:8e:13:bb:b0:6c:85:
1c:2a:3e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:14:46 2025 by rpki-client