Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4f337cb0-99df-3f4b-9523-f5ec73297b5c.roa
File: 4f337cb0-99df-3f4b-9523-f5ec73297b5c.roa (raw, json)
Hash identifier: qNPxakP2gXdTr+hdwAqhyv5Qfjx9MhAPsiOkJJqN7tw=
Subject key identifier: 81:77:06:A8:06:E2:26:E7:1A:DD:73:B6:63:58:A8:AE:2C:74:07:42
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D0BDD681B5F9D9D4BAECBC300
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4f337cb0-99df-3f4b-9523-f5ec73297b5c.roa
Signing time: Fri 25 Feb 2022 05:00:00 +0000
ROA not before: Fri 25 Feb 2022 05:00:00 +0000
ROA not after: Fri 01 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 108.156.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:0b:dd:68:1b:5f:9d:9d:4b:ae:cb:c3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 25 05:00:00 2022 GMT
Not After : Apr 1 04:00:00 2022 GMT
Subject: CN=f45426de-69a7-40b7-875d-a97afd58716c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ac:0c:83:3d:f4:ca:4f:cb:ed:e9:63:a1:de:
1c:58:d1:3f:81:e2:8c:0f:6b:1d:f9:c5:b1:96:0c:
59:40:b7:f5:af:61:a4:c3:92:f7:e3:82:8d:7f:a4:
b2:64:dc:af:8c:d2:5a:4e:54:7f:36:bb:f1:e7:2e:
74:ca:ee:25:74:a6:56:d1:85:7f:eb:6c:60:d7:05:
09:cb:cf:7d:f7:9e:38:61:3c:97:97:87:00:5b:b3:
4d:eb:b0:7a:f8:3c:d2:74:73:cc:db:a0:04:49:b5:
35:ce:79:92:00:c3:12:44:05:50:3d:1e:d0:f0:89:
21:5c:d0:6e:e0:74:51:65:e7:4a:95:2f:6c:d1:6e:
97:41:c6:99:c1:20:bd:23:c1:d9:bc:da:b6:6b:59:
06:dc:71:bf:69:5d:a5:d0:92:6d:41:3c:d6:46:95:
50:ab:f9:b8:e0:81:28:07:06:8a:68:85:81:da:ed:
b2:8a:d5:fb:aa:60:39:5c:9a:5d:4a:1f:a5:3b:57:
b0:14:c0:e4:fd:d1:a1:11:7d:37:0e:d4:a9:af:20:
54:13:09:62:82:97:0f:a2:ed:0e:d3:72:92:27:8c:
98:11:21:54:a0:94:43:34:ce:7a:6d:fa:81:a3:28:
77:9c:49:5e:59:d8:96:7c:85:9f:0b:38:7b:ad:6f:
3e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:77:06:A8:06:E2:26:E7:1A:DD:73:B6:63:58:A8:AE:2C:74:07:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4f337cb0-99df-3f4b-9523-f5ec73297b5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
108.156.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:be:2a:6f:37:44:93:e0:f1:92:11:3d:4e:ab:f1:ee:03:30:
c0:01:49:08:4e:3e:90:81:af:16:17:8a:5f:ac:af:fd:e5:6b:
62:bc:8c:6a:b0:2b:cd:46:ed:1d:b4:9f:da:41:0e:39:79:b5:
b3:9a:78:c8:63:37:01:d8:89:38:41:c9:02:b2:e1:73:f9:43:
7d:0b:8c:60:d7:e3:50:cf:2e:76:47:e0:70:4a:39:20:4b:5f:
72:a9:66:ac:54:f6:41:76:ff:bb:3c:32:dd:9c:59:8c:a1:ee:
64:41:d6:07:a7:8d:58:e5:d4:41:08:e1:9c:93:cf:fe:c0:66:
28:27:53:03:7b:3c:32:0d:65:61:c7:37:b0:f9:2b:9d:e0:f0:
7a:e5:8f:3c:67:13:71:8c:5d:00:f8:94:b9:a4:3d:72:d2:78:
3c:62:2f:37:83:db:24:6d:a5:49:41:85:81:98:39:ac:c3:79:
10:24:8a:35:82:9b:6a:48:2f:06:08:c9:8e:6b:38:78:b7:9b:
58:ae:00:53:1f:7e:a9:50:b9:69:a3:8d:d2:a7:14:24:36:aa:
c6:10:68:34:84:31:cc:31:36:ff:20:1a:52:2f:3e:96:ff:29:
e0:4b:0a:fa:43:b8:63:64:6f:bd:16:a1:31:71:2c:43:cc:1e:
56:7d:94:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 00:38:42 2025 by rpki-client