Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4bac5d50-de88-3a62-a9e3-9140e5e0a8f3.roa
File: 4bac5d50-de88-3a62-a9e3-9140e5e0a8f3.roa (raw, json)
Hash identifier: 4KbW7aCkn+M3pOLU5Z+1PwAw3aEZrEzc/eSV+KTUob4=
Subject key identifier: 04:3A:D2:F9:E6:D6:69:15:7C:3E:CE:39:95:13:03:C4:56:99:FA:0B
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F7FD435CB4A2CE5C931D83E80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4bac5d50-de88-3a62-a9e3-9140e5e0a8f3.roa
Signing time: Fri 07 Oct 2022 14:24:07 +0000
ROA not before: Fri 07 Oct 2022 14:24:07 +0000
ROA not after: Sat 12 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 108.156.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:7f:d4:35:cb:4a:2c:e5:c9:31:d8:3e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 7 14:24:07 2022 GMT
Not After : Nov 12 05:00:00 2022 GMT
Subject: CN=d9ae383c-8e29-4b33-a75a-0d58e2b31d01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:26:49:eb:7e:33:3a:cc:ba:24:54:8e:24:f5:
7d:ea:3a:4b:51:72:68:fc:b8:c3:4f:91:5e:39:6d:
68:ef:af:3b:8a:99:48:9f:ba:cc:8b:27:8e:02:61:
93:6b:2f:3c:a1:cb:f6:24:d8:2e:a7:d0:be:88:ba:
6f:81:b5:28:39:3a:95:4a:c5:d2:84:aa:7f:20:e8:
86:57:93:7e:ae:a5:0f:20:11:34:b1:96:08:65:fa:
9d:ff:4d:75:bb:d3:d0:42:fc:d0:73:c2:56:36:39:
be:72:f8:c9:2d:11:80:02:8d:fc:aa:72:63:c9:ee:
a4:c1:d5:a6:2a:80:5e:d7:6c:50:5b:05:10:47:63:
20:ac:87:ec:cc:cf:24:70:e6:50:63:bd:8e:81:5c:
b1:c6:8e:c0:87:de:5f:05:7b:be:59:25:b7:27:6d:
0e:a5:61:93:7e:bf:0c:cf:57:f4:c6:3d:6f:34:b8:
d1:c6:bd:60:2c:87:bd:9a:ac:22:a7:3e:b2:47:7d:
36:30:1e:2f:76:75:70:51:e0:19:ae:7d:60:cd:df:
66:16:52:b8:c9:49:07:d4:82:a0:99:7d:44:45:6e:
0b:a6:63:06:52:28:b2:5a:4c:c6:cc:64:84:59:20:
fe:3d:dc:9a:8f:cd:a9:07:cf:1f:d7:a8:cf:fd:f6:
c6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:3A:D2:F9:E6:D6:69:15:7C:3E:CE:39:95:13:03:C4:56:99:FA:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4bac5d50-de88-3a62-a9e3-9140e5e0a8f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
108.156.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:f7:9f:c1:90:96:da:78:72:46:a3:79:03:c2:ad:ac:c2:bf:
7b:55:2a:25:5b:9f:b8:da:99:ed:d2:b2:dc:75:dc:a9:aa:3a:
5d:78:db:a3:11:39:b0:18:be:51:4f:25:b3:88:0b:a7:22:d8:
27:af:7c:f8:85:d7:4d:bc:9b:e1:e2:d2:79:fb:83:39:b5:3b:
e5:3f:c2:b2:43:f2:be:22:9c:c0:5e:5e:c9:0b:1c:50:2a:26:
b1:69:f5:f1:c5:18:53:66:08:ea:a8:e5:73:69:f4:98:64:b0:
ae:7d:00:0e:a9:17:b9:4d:d3:aa:02:3f:b2:0f:39:42:ac:a8:
cc:a2:52:7e:c6:54:56:7f:a9:53:07:80:2a:96:09:b0:93:4c:
b0:5e:ce:48:64:d8:e3:24:61:59:41:fb:2c:21:6f:cf:87:cb:
26:da:18:24:d9:5b:47:54:57:c1:9d:3e:ee:64:23:1a:fd:50:
45:59:1a:b5:f9:c2:47:a5:44:a1:e9:e3:ee:01:59:93:0b:e2:
4b:29:4b:f4:bf:71:a2:b2:c1:1b:0e:52:4e:8e:0d:6e:e3:45:
ad:11:db:61:cc:aa:59:a9:b3:82:7c:8f:25:49:47:fa:e2:d5:
c7:62:b9:c6:28:30:9d:56:b8:af:f1:21:c9:f6:15:0d:a8:77:
d6:0e:1a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:26 2025 by rpki-client