Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/408806b5-d8c7-3dcd-b49e-7c3d6e55dbfe.roa
File: 408806b5-d8c7-3dcd-b49e-7c3d6e55dbfe.roa (raw, json)
Hash identifier: ymGbe/AUv3Nv2LZWKIDSHhG6lewBwDmyCJ6IVlVDDN8=
Subject key identifier: A3:74:12:74:F2:F8:FA:BF:96:50:4D:2A:71:1F:3C:56:31:85:94:CD
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D5A177D8BF020A2941F470D80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/408806b5-d8c7-3dcd-b49e-7c3d6e55dbfe.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Fri 29 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 108.156.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:5a:17:7d:8b:f0:20:a2:94:1f:47:0d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Apr 29 04:00:00 2022 GMT
Subject: CN=d0bbc8c5-fce4-449c-b58e-db3e988cac1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f0:cf:48:c6:06:71:12:ba:e7:bc:15:23:e7:
17:dc:d0:70:bc:44:47:05:4f:2b:81:e3:e4:86:27:
b3:a8:1f:7d:c2:13:0f:a3:51:b1:1c:2b:a5:ef:e0:
c1:89:b7:f1:81:11:eb:ad:3b:a4:f1:6a:78:1e:19:
4f:c5:15:5b:b0:ad:92:0b:e3:bb:40:93:8e:ac:09:
31:b6:27:7b:ed:5b:66:53:64:40:08:f6:a4:33:bd:
f2:11:07:b1:b0:2b:37:7d:75:85:f7:56:c6:25:c5:
b0:ed:57:a8:db:4f:82:0e:55:38:54:36:9b:ae:b7:
33:e3:aa:32:75:cf:21:37:80:5d:70:0f:c5:4b:63:
ee:92:b7:f1:95:b5:5e:44:8f:ae:1f:67:20:fc:5e:
d1:94:4b:a0:b2:99:4b:56:e1:f0:72:73:12:a3:4f:
7d:95:34:4e:64:b4:e1:29:5a:c2:7a:26:e4:3b:7c:
66:a1:e7:a7:56:6f:6a:15:10:ff:00:ff:e1:89:64:
f1:c4:75:98:bb:31:d9:ab:87:a7:6c:39:50:30:7e:
24:d8:81:ca:fe:8b:20:be:26:f0:83:5f:6d:56:8e:
f1:e2:93:91:5e:ae:df:d0:f7:c6:1c:a1:ca:ff:60:
b0:b9:4d:77:b8:75:4d:19:19:fa:9c:14:02:eb:d0:
7e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:74:12:74:F2:F8:FA:BF:96:50:4D:2A:71:1F:3C:56:31:85:94:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/408806b5-d8c7-3dcd-b49e-7c3d6e55dbfe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
108.156.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:3d:a7:7e:36:25:64:91:85:cf:57:64:3a:93:ff:ad:46:73:
25:c2:a5:3c:db:26:5c:20:7f:e0:7f:ca:0c:99:a4:1d:b1:0e:
b2:70:be:2e:2b:3b:d2:7d:7e:74:bb:fc:3d:f8:28:d9:fd:0e:
eb:aa:19:9b:62:6d:3d:01:3b:5d:2a:7c:52:cd:dc:25:e9:91:
af:35:fa:28:cf:94:86:92:99:ba:f0:c1:a4:15:3f:af:19:4e:
61:85:00:25:14:c7:af:03:3f:89:b0:60:38:b0:f2:f8:cd:95:
7e:34:78:25:26:30:b7:d9:05:12:f6:31:0c:b5:72:09:b8:69:
51:8d:f4:9e:2a:c6:f6:98:2b:ad:21:cc:b2:35:5e:05:0d:e8:
37:5f:70:99:72:eb:f5:8f:d8:a8:17:b7:d0:bb:47:92:3a:50:
8f:1a:8d:e6:7b:01:c3:f4:3e:f3:86:2b:06:4c:5b:68:ee:e2:
8c:09:54:07:6d:98:d5:75:11:0b:92:a4:bc:29:2d:df:81:43:
d0:d7:75:a9:f8:18:7b:53:86:ca:d7:5e:85:ce:0c:04:8c:70:
38:44:74:57:5d:39:09:22:7c:74:b3:a0:63:a0:66:ca:05:a7:
e8:e7:6f:56:1b:b9:e2:cd:dd:ba:fc:90:30:b0:e9:37:97:6a:
af:2d:68:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:40:30 2025 by rpki-client