Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/39d5be0a-78a0-3ae5-8a5f-a791fa0e71c7.roa
File: 39d5be0a-78a0-3ae5-8a5f-a791fa0e71c7.roa (raw, json)
Hash identifier: cSqfdgCIntKVX3TfXwjJxudCqQU99KP5im0UTJtMM1o=
Subject key identifier: B3:FA:B0:E9:F7:AA:1F:87:E4:29:9C:AB:7E:C7:01:70:E2:A8:A7:71
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F7FD429F465C999BD21410440
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/39d5be0a-78a0-3ae5-8a5f-a791fa0e71c7.roa
Signing time: Fri 07 Oct 2022 14:24:07 +0000
ROA not before: Fri 07 Oct 2022 14:24:07 +0000
ROA not after: Sat 12 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 108.156.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:7f:d4:29:f4:65:c9:99:bd:21:41:04:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 7 14:24:07 2022 GMT
Not After : Nov 12 05:00:00 2022 GMT
Subject: CN=a832f85e-4959-4410-9f56-e72159c077d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:50:45:32:c0:c2:43:e6:2b:1c:84:b9:99:5d:
dd:84:0d:09:0c:59:89:b7:25:bb:73:ec:7f:d8:c5:
da:83:9b:c2:39:83:88:0b:ab:8c:a0:95:12:de:27:
b9:38:2c:48:df:dd:c1:05:1e:d4:1b:9e:c4:3f:69:
04:fc:7a:7a:46:12:d3:38:b6:df:7f:89:09:de:44:
46:1e:06:c9:05:66:ca:51:f1:be:17:87:53:75:08:
93:24:d4:6d:a9:2d:7c:6e:8f:6c:74:21:e0:01:c5:
07:ee:49:eb:1a:25:85:14:8f:6e:b3:a6:f5:5c:b7:
83:db:0d:07:63:6f:61:0a:4f:c1:73:df:b9:58:76:
fd:85:bf:d4:6d:9e:fb:15:61:03:04:ee:22:c5:d6:
6d:d6:9b:c2:62:a7:1e:28:75:83:a7:a8:af:92:16:
ac:ad:cd:39:54:cf:9c:b0:0d:96:5e:d2:8b:5f:48:
d0:dc:aa:59:2b:d5:08:77:33:7b:0c:3e:1a:ed:b1:
a8:29:7a:d4:24:ec:f1:01:19:2d:67:ee:cb:70:31:
5e:73:63:c0:5e:b2:b5:af:eb:6f:a9:40:6a:0b:cc:
db:22:07:24:07:7e:dc:1a:08:20:18:02:48:d1:ec:
85:d2:43:1b:44:96:da:fb:ce:ab:6f:3d:84:87:a3:
55:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:FA:B0:E9:F7:AA:1F:87:E4:29:9C:AB:7E:C7:01:70:E2:A8:A7:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/39d5be0a-78a0-3ae5-8a5f-a791fa0e71c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
108.156.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:c6:a9:e0:78:64:4c:b5:34:56:b0:fe:e4:42:04:80:1f:11:
75:9b:2d:9a:46:ef:30:e6:7f:75:d0:4e:a2:7d:62:4d:5e:12:
07:18:79:e7:ea:1a:e5:a9:85:d5:ec:a6:c4:3f:b9:b1:fd:e4:
fa:f3:3f:83:96:3a:0b:ea:1b:74:97:b2:6c:a3:17:4c:f1:36:
cb:37:7e:eb:6c:4e:c1:d4:67:73:cf:e2:62:c3:bd:15:26:01:
9a:de:07:67:0c:e0:7b:a7:15:2f:cb:cb:82:9b:56:40:1c:a6:
50:8b:74:f5:31:74:83:d8:43:3e:41:3b:71:a3:2e:12:4f:9b:
03:78:1e:ac:1a:49:02:84:61:56:f4:e7:c9:02:65:30:06:23:
9a:a5:f5:b7:a4:30:a1:a3:cc:c3:67:c2:b9:2c:5c:52:a6:45:
50:f6:f5:4c:08:4d:32:36:c4:3a:b3:a4:58:25:4d:38:d6:6d:
0a:9a:11:58:87:42:65:9a:9a:44:f5:5d:cf:00:85:96:ad:8a:
2f:f5:c4:0e:fb:dd:48:f4:64:55:94:62:96:ec:fe:aa:cd:9e:
38:32:27:ba:85:89:69:4c:8d:44:26:e5:3b:a5:e3:6d:dc:28:
4f:77:0f:c0:21:41:7b:c9:75:e4:f3:02:d0:5f:75:36:a2:17:
4a:32:d9:34
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD9/1Cn0ZcmZvSFBBEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTAwNzE0MjQwN1oXDTIyMTExMjA1MDAwMFowLzEtMCsGA1UEAxMk
YTgzMmY4NWUtNDk1OS00NDEwLTlmNTYtZTcyMTU5YzA3N2Q2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFBFMsDCQ+YrHIS5mV3dhA0JDFmJtyW7c+x/
2MXag5vCOYOIC6uMoJUS3ie5OCxI393BBR7UG57EP2kE/Hp6RhLTOLbff4kJ3kRG
HgbJBWbKUfG+F4dTdQiTJNRtqS18bo9sdCHgAcUH7knrGiWFFI9us6b1XLeD2w0H
Y29hCk/Bc9+5WHb9hb/UbZ77FWEDBO4ixdZt1pvCYqceKHWDp6ivkhasrc05VM+c
sA2WXtKLX0jQ3KpZK9UIdzN7DD4a7bGoKXrUJOzxARktZ+7LcDFec2PAXrK1r+tv
qUBqC8zbIgckB37cGgggGAJI0eyF0kMbRJba+86rbz2Eh6NVJwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLP6sOn3qh+H5Cmcq37HAXDiqKdxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMzlkNWJlMGEtNzhhMC0z
YWU1LThhNWYtYTc5MWZhMGU3MWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCbJwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAH8ap4HhkTLU0VrD+5EIEgB8RdZstmkbvMOZ/ddBOon1iTV4SBxh55+oa
5amF1eymxD+5sf3k+vM/g5Y6C+obdJeybKMXTPE2yzd+62xOwdRnc8/iYsO9FSYB
mt4HZwzge6cVL8vLgptWQBymUIt09TF0g9hDPkE7caMuEk+bA3gerBpJAoRhVvTn
yQJlMAYjmqX1t6QwoaPMw2fCuSxcUqZFUPb1TAhNMjbEOrOkWCVNONZtCpoRWIdC
ZZqaRPVdzwCFlq2KL/XEDvvdSPRkVZRiluz+qs2eODInuoWJaUyNRCblO6Xjbdwo
T3cPwCFBe8l15PMC0F91NqIXSjLZNA==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:08:33 2025 by rpki-client