Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4b061e3f-8db5-32f9-9bda-2b9a78839a5b.roa
File: 4b061e3f-8db5-32f9-9bda-2b9a78839a5b.roa (raw, json)
Hash identifier: OBRVOqCm+zM8fAi2KS9D22aKFjOLuTsjtmz0jJdTKng=
Subject key identifier: 8A:01:16:68:98:9B:33:47:C9:37:C2:A0:27:4F:FB:34:62:C7:5C:F7
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DD19519027FAB6C13F74729C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4b061e3f-8db5-32f9-9bda-2b9a78839a5b.roa
Signing time: Fri 06 May 2022 12:00:00 +0000
ROA not before: Fri 06 May 2022 12:00:00 +0000
ROA not after: Sat 11 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 108.136.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:d1:95:19:02:7f:ab:6c:13:f7:47:29:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 6 12:00:00 2022 GMT
Not After : Jun 11 04:00:00 2022 GMT
Subject: CN=b209daef-9d2f-483c-bfd6-de2fb6a65e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e1:a6:f3:5c:39:81:bd:20:79:39:1c:46:71:
c5:6b:d4:2a:cf:c3:99:1a:0d:35:b8:7f:d1:fa:17:
1c:59:7d:34:29:4b:92:5c:76:24:b4:d7:86:83:a7:
20:3c:f5:cd:07:40:8f:f0:66:64:5f:42:c0:8e:b7:
0b:8f:a6:61:fc:5b:36:03:98:ce:a5:69:29:ae:08:
c3:5a:d2:f6:75:94:36:74:4a:d0:46:71:86:92:b9:
cc:92:88:22:e2:59:62:66:da:30:4a:b6:d5:c3:41:
5c:b2:07:52:4e:0c:e6:e2:7a:98:00:69:f0:fe:53:
29:3b:33:fe:b5:58:79:aa:c1:a1:74:ab:b2:eb:11:
c8:9e:52:a3:da:f1:73:52:3e:5a:b1:5b:37:22:d3:
5b:e0:c8:2a:20:a4:4c:a0:79:73:a5:6d:7a:72:12:
68:90:ae:67:b4:26:8b:11:fc:9f:05:8a:01:a6:28:
ab:ed:3e:f7:0b:87:f8:67:08:51:c7:56:f1:fd:77:
3e:7d:15:a7:04:41:ee:12:b8:3c:01:2a:37:71:35:
a4:69:40:2b:ea:1d:55:84:0e:68:d4:bd:54:80:54:
2b:af:00:23:af:70:95:e8:a9:fe:4d:fd:52:ed:b5:
64:9d:4c:17:75:08:0a:06:37:cb:21:95:d7:e8:fc:
34:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:01:16:68:98:9B:33:47:C9:37:C2:A0:27:4F:FB:34:62:C7:5C:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4b061e3f-8db5-32f9-9bda-2b9a78839a5b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
108.136.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:70:32:48:35:c0:95:dd:d9:20:18:60:c1:62:da:f8:e3:66:
62:18:74:c5:e2:29:2f:5e:02:f0:f7:4a:70:3c:2b:5d:a7:91:
8f:ae:8b:42:ac:f8:4b:3c:11:a0:9f:ef:d1:b0:6c:38:20:3d:
6e:a8:28:60:3a:ba:b4:49:c8:46:2e:fb:65:9a:6e:a6:f8:42:
45:9f:45:f9:14:63:f5:d3:c3:12:07:dc:1e:78:49:de:ca:88:
61:7f:fa:29:31:6d:a3:df:b7:49:67:36:3f:4d:aa:ec:08:3d:
ad:23:6f:20:43:e2:9c:f7:cb:23:7a:e8:c1:bb:28:7e:b7:b4:
c7:c1:16:2f:7d:4c:30:a9:47:2f:e7:b7:29:ec:6c:ca:d2:c9:
84:ec:43:92:71:2d:94:16:08:ac:62:31:90:f3:3b:0c:3d:41:
e4:0b:9d:82:12:e3:38:0d:cb:79:be:9a:b1:32:56:2a:5d:8a:
8f:64:5e:fe:6d:52:c4:4c:77:6b:97:fb:d5:9b:94:a0:40:7e:
f1:1d:8b:3f:96:d0:86:ba:a0:00:e3:10:47:89:3b:bc:cc:e0:
98:b8:f1:13:5e:0d:fc:a4:a7:3c:32:be:5c:b9:54:29:45:1c:
8b:5e:04:0c:2a:3a:96:f7:00:34:58:49:cd:68:aa:e1:7e:dd:
24:60:27:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:57:50 2025 by rpki-client