Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3bfdf202-ade8-31d1-9292-6a668916de07.roa
File: 3bfdf202-ade8-31d1-9292-6a668916de07.roa (raw, json)
Hash identifier: nwMAv5YjYMyeR2WGasZzW9RozcENtfljSwXtVaWNgbo=
Subject key identifier: B3:10:DB:1E:A7:8B:5C:8D:34:43:08:96:6C:53:C7:0F:A6:57:F0:B2
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858401C488EB27E5982B52D16B900
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3bfdf202-ade8-31d1-9292-6a668916de07.roa
Signing time: Fri 02 Dec 2022 12:00:00 +0000
ROA not before: Fri 02 Dec 2022 12:00:00 +0000
ROA not after: Sat 07 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 108.156.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1c:48:8e:b2:7e:59:82:b5:2d:16:b9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 2 12:00:00 2022 GMT
Not After : Jan 7 05:00:00 2023 GMT
Subject: CN=9cb9d093-902f-4791-a66c-e4b8d2cd44f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:22:ae:4c:54:3a:f3:be:d9:2c:fa:e7:ef:7f:
a3:b8:c6:46:bc:4d:5e:c6:ea:85:9c:f4:e9:e2:aa:
b0:60:31:27:c7:46:82:29:01:91:a5:2b:a8:6c:57:
20:10:18:5d:ed:4a:fa:97:b4:29:37:85:e6:8e:a6:
51:46:73:c2:8d:5a:74:b7:7b:de:b0:dc:15:be:96:
f2:7a:a0:2e:b1:0b:51:da:d2:92:75:eb:ca:5b:41:
27:ca:40:75:6c:fc:80:3a:62:94:a9:74:e7:e5:fd:
98:23:80:55:fa:15:4a:91:78:1c:8b:f6:7d:d2:b8:
34:97:69:14:dc:ab:bc:27:5a:1f:d5:95:cf:b6:91:
f2:6c:7f:c1:6b:b9:68:75:85:61:47:bb:b0:ad:ed:
a8:6c:c2:e5:d0:24:dc:6a:d5:c7:69:b6:f6:a1:d1:
3b:f3:5f:6e:7f:79:4f:0a:79:2b:78:c8:67:84:6d:
90:a6:2b:8c:ce:c7:5c:61:54:08:53:4e:82:02:5a:
88:fc:03:35:1c:ad:b5:41:2e:85:94:73:93:a2:e4:
93:3d:f2:1b:4d:49:58:7e:c9:5b:50:85:a4:d4:8a:
78:21:97:c5:6f:29:71:47:fb:db:ee:52:84:a9:dc:
80:ff:5f:a2:ee:6e:1a:da:70:00:7d:03:bc:12:ad:
d0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:10:DB:1E:A7:8B:5C:8D:34:43:08:96:6C:53:C7:0F:A6:57:F0:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3bfdf202-ade8-31d1-9292-6a668916de07.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
108.156.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:98:5d:33:0b:12:dd:9b:2b:64:fb:17:d3:5f:03:1e:51:e3:
cc:d4:6f:2d:59:e8:ab:88:7d:1f:9e:1a:94:2b:3a:4b:94:da:
be:3f:31:be:a9:cc:c9:3a:3d:a9:7e:6a:23:49:d4:8e:44:b0:
2c:41:8f:84:63:fd:00:27:63:94:24:d0:50:09:47:f1:6d:5a:
55:b2:1b:e7:33:a9:f1:a8:24:73:cc:67:e9:ba:51:f7:ea:96:
e5:68:9b:18:9f:22:77:02:a2:90:7d:d5:44:df:b9:2c:bb:e7:
fe:fb:1b:3d:dc:8b:58:c0:f3:a6:64:86:6f:63:c6:35:36:ed:
d4:6a:51:f8:6d:52:29:c8:f1:26:62:94:a3:62:3a:ae:cf:cb:
b8:4b:61:3b:d7:ea:81:62:21:2e:fa:c4:60:65:e8:cd:a9:15:
e0:f7:f4:d5:df:e1:0c:b9:0b:86:44:12:b6:bf:cd:19:22:31:
04:f7:54:6d:fb:f9:0e:13:17:a3:9e:d7:08:e8:f1:e7:51:89:
09:d2:32:ff:78:30:4e:8e:63:11:73:9f:31:e8:28:f5:46:38:
87:da:b5:2d:e4:48:5f:93:3a:08:47:a2:e9:be:3f:ef:9a:9e:
bf:d7:38:f6:fc:63:f5:67:df:49:d1:b2:40:83:df:e4:c6:ae:
8d:34:5f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:05:12 2025 by rpki-client