Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/47752b88-c188-35a4-a36f-d7f0ffcfbd4c.roa
File: 47752b88-c188-35a4-a36f-d7f0ffcfbd4c.roa (raw, json)
Hash identifier: UUGgJYL/gs5GbAiuQMYNVbbvsmJKSvAEmqJtAevzvh8=
Subject key identifier: 12:CF:B9:03:27:8D:CD:89:04:0D:41:5A:38:83:21:7E:5C:30:04:B2
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583EBCB3126D879CA4B278FD0E80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/47752b88-c188-35a4-a36f-d7f0ffcfbd4c.roa
Signing time: Fri 29 Jul 2022 12:00:00 +0000
ROA not before: Fri 29 Jul 2022 12:00:00 +0000
ROA not after: Sat 03 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 108.156.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:bc:b3:12:6d:87:9c:a4:b2:78:fd:0e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 29 12:00:00 2022 GMT
Not After : Sep 3 04:00:00 2022 GMT
Subject: CN=7e90f31d-7f95-461d-8af9-df7870d52ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2a:71:1f:26:21:1d:a9:42:af:2a:a5:dc:31:
81:42:81:ed:10:77:e3:01:cc:bd:bd:73:81:ed:e8:
ba:13:db:51:7a:a8:fd:53:2c:0d:f9:45:6d:c9:ae:
1c:04:61:94:f4:bb:51:3b:e1:f8:84:c8:9a:cd:d9:
ec:93:aa:11:74:61:77:44:26:86:04:5b:c7:0f:3a:
d7:e8:a4:73:b5:11:f0:da:0b:09:25:d6:91:45:99:
17:74:c3:13:fc:d2:f2:6e:34:18:7d:49:66:e5:05:
35:99:0b:03:5d:f5:ca:0b:34:37:77:86:f6:21:4a:
ce:8b:29:85:9d:b7:eb:d6:36:69:de:7b:f3:21:1f:
70:a3:c9:46:60:c2:80:31:f2:15:67:4d:54:9e:21:
3f:28:cc:4f:9f:6e:ce:31:ca:ac:2f:3f:85:4e:61:
a1:43:ca:aa:4f:db:4f:df:9e:a8:b8:c2:71:7b:7f:
3d:4c:5c:c6:2d:28:7f:6a:32:55:1a:98:fc:6d:ed:
cd:46:4d:5e:ae:8f:aa:ab:f3:83:11:e0:fa:00:a8:
ac:54:44:1c:2e:45:aa:18:e6:c2:85:41:d1:6a:7a:
73:b2:be:fe:d0:6c:f9:56:66:a6:3d:a2:6b:fd:3c:
db:fb:8d:47:87:b1:bf:e2:ab:a6:8d:db:e9:7a:3a:
35:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:CF:B9:03:27:8D:CD:89:04:0D:41:5A:38:83:21:7E:5C:30:04:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/47752b88-c188-35a4-a36f-d7f0ffcfbd4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
108.156.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:85:a6:c3:f3:f4:41:a3:ba:01:60:d8:b5:f2:d1:06:6c:ef:
4b:55:7c:b2:e8:ae:6f:85:45:f8:06:09:a7:71:31:d1:f3:26:
ff:55:6e:66:c5:4a:19:a0:cc:b1:e4:14:11:1a:ff:d1:92:71:
5f:4c:8f:52:9c:85:ce:8d:0d:b3:8d:4f:ed:1c:9f:c0:04:aa:
12:e4:08:16:0d:fc:d1:57:5b:d3:15:65:bb:7f:85:32:53:c4:
0d:99:31:7f:8e:ad:2e:d3:00:be:f0:7f:fd:1c:af:01:53:bb:
3d:66:02:bf:f7:56:08:94:9b:77:da:5d:a3:1e:ed:18:1a:7f:
c7:42:af:ca:10:f4:44:9b:b8:f1:15:5e:82:e2:b0:5f:d4:34:
5a:3e:a5:76:37:80:aa:61:2c:98:e3:01:1f:4f:1d:6c:12:23:
68:94:f4:b0:f3:c2:3d:f6:d6:31:7e:8d:c2:10:a5:54:bd:72:
cf:d8:1a:2e:a6:ac:47:9c:ff:c1:09:24:f5:68:7f:50:af:a6:
35:ea:d3:3c:b0:63:51:d3:c1:77:e3:ae:22:84:12:f4:9a:a5:
25:7e:ec:cd:dc:62:98:a4:75:3d:c4:15:1f:12:16:86:37:35:
26:10:6c:f7:a2:3d:51:c9:67:49:2c:59:ae:58:dd:86:93:05:
de:46:22:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:00:18 2025 by rpki-client