Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4c1d2bce-ec65-393c-acb5-dad20323acd0.roa
File: 4c1d2bce-ec65-393c-acb5-dad20323acd0.roa (raw, json)
Hash identifier: qDbORKHSxM4wspQmHsQUU9o3fFmF89DiRQzWVbNs5og=
Subject key identifier: 00:25:D0:58:71:A5:A5:BD:47:AF:8C:88:8F:B9:9F:F3:C6:53:02:7D
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FCF6C698DDAF5C35A363D8380
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4c1d2bce-ec65-393c-acb5-dad20323acd0.roa
Signing time: Fri 04 Nov 2022 12:00:00 +0000
ROA not before: Fri 04 Nov 2022 12:00:00 +0000
ROA not after: Sat 10 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 108.136.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:cf:6c:69:8d:da:f5:c3:5a:36:3d:83:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 4 12:00:00 2022 GMT
Not After : Dec 10 05:00:00 2022 GMT
Subject: CN=637b68df-aaa0-4ae8-91d2-c40933fcf0df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ec:2c:be:1d:cd:7a:5b:e9:6c:bc:23:0e:c1:
bf:70:86:7c:4c:f1:e8:61:f9:12:81:88:62:d2:73:
2c:5c:f1:33:32:d7:3b:8a:ac:13:e9:02:aa:30:e2:
5d:93:32:6a:53:30:38:68:58:03:e8:06:d7:b2:f9:
c4:fd:e5:9a:d3:59:18:e2:c4:1b:1f:04:78:b3:de:
f8:e4:b4:f0:6e:73:93:dc:a1:52:cc:44:29:77:73:
88:08:99:75:4b:10:2e:82:e7:d4:0a:f4:d5:9e:1e:
52:61:68:0b:43:42:4c:63:f1:e4:0d:f8:e6:05:68:
23:cd:05:54:27:3f:ce:da:39:06:c6:70:50:f7:7f:
78:37:04:86:53:e6:e6:62:11:e7:80:9d:5d:0c:c4:
99:35:56:61:74:fb:44:77:82:32:1f:b5:e4:96:75:
e4:31:11:25:6d:e9:bc:27:95:cf:e2:a6:be:16:5b:
d5:ec:52:8a:46:78:8e:0d:f7:84:35:de:09:d9:12:
a8:db:db:bc:5a:1b:3f:62:07:95:c6:e8:2b:67:8f:
96:92:33:79:f0:c0:aa:6e:3d:23:e7:e3:7d:ea:c1:
de:c5:8b:84:88:dd:fd:7b:3d:5a:89:8f:c2:05:c2:
f8:1d:c2:17:a5:9f:89:e2:46:aa:08:06:3e:b9:05:
fb:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:25:D0:58:71:A5:A5:BD:47:AF:8C:88:8F:B9:9F:F3:C6:53:02:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4c1d2bce-ec65-393c-acb5-dad20323acd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
108.136.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:27:a6:13:69:6a:e6:23:47:bd:f4:4b:b1:7e:4f:4b:41:b1:
d9:45:f3:a6:c8:89:1e:69:e7:a8:a7:6e:5d:cc:2e:3b:47:2c:
83:33:09:46:58:a6:10:2f:93:fc:e0:d8:73:51:54:37:60:e8:
25:92:a7:ce:36:07:1c:b4:0e:5d:fa:4b:b6:af:62:b7:32:35:
93:f7:52:7e:32:31:be:27:60:b5:f4:11:1c:d5:d5:98:44:b2:
ad:2d:bd:5e:89:41:99:a8:5a:39:cd:a4:18:f0:40:87:ac:7c:
5e:9f:a7:c7:73:55:96:99:a9:6e:dc:a1:4c:14:2c:f6:5e:c0:
ae:2b:55:f8:3e:18:5c:11:8f:4b:af:3d:1f:f4:d1:ad:91:a3:
0a:75:50:27:77:7e:f3:14:d9:15:95:80:55:6b:a3:b7:8b:02:
c0:fe:f9:49:c1:19:ca:e0:aa:da:30:f1:c1:ce:bb:dd:d2:fc:
69:fa:44:19:df:0f:77:28:3c:10:ad:64:31:58:5e:57:be:f2:
7b:c0:50:cd:a8:ad:67:75:c7:b3:6f:f4:6a:a1:a9:5b:95:ec:
5b:b1:64:8b:68:5e:f3:a0:11:57:6e:dd:f5:77:ae:d8:80:22:
41:e7:95:42:a4:e5:22:be:17:10:67:4d:c5:90:7f:4f:44:0d:
d2:ab:26:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:14:49 2025 by rpki-client