Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5c275eb3-2120-3596-b162-89741d03d205.roa
File: 5c275eb3-2120-3596-b162-89741d03d205.roa (raw, json)
Hash identifier: JznvMbVomL6Ysv+Kh6zxrfyMjprRzrBgfDvvt3GEeEM=
Subject key identifier: 22:10:04:B3:2B:CD:0D:1B:0D:F2:14:97:D8:7B:6C:4C:5F:3E:04:83
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583EBCB3189791CC0650BFA80080
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5c275eb3-2120-3596-b162-89741d03d205.roa
Signing time: Fri 29 Jul 2022 12:00:00 +0000
ROA not before: Fri 29 Jul 2022 12:00:00 +0000
ROA not after: Sat 03 Sep 2022 04:00:00 +0000
asID: 8987
IP address blocks: 108.156.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:bc:b3:18:97:91:cc:06:50:bf:a8:00:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 29 12:00:00 2022 GMT
Not After : Sep 3 04:00:00 2022 GMT
Subject: CN=20a02382-e78c-412a-88e4-628f3c06d569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:53:e2:24:97:cf:2a:ad:65:9f:86:e6:58:0a:
33:2b:1e:f2:6f:13:60:71:49:29:29:47:96:67:9e:
f7:92:52:0b:dd:21:e6:73:78:77:14:33:29:5c:17:
2f:3b:5c:4e:81:cf:89:fa:05:12:5b:41:b9:3e:06:
d7:ed:8e:22:fe:9e:b2:cb:a6:83:31:69:92:c7:e5:
a4:52:94:8a:4b:45:70:4d:51:39:6b:d6:86:b0:a7:
df:41:f2:d0:41:25:d1:f3:f6:7e:7d:c9:5b:71:51:
1d:78:a4:9e:43:a8:3f:a4:d5:8d:9e:e7:c8:36:d7:
41:79:5d:48:78:d9:89:01:ee:1d:a4:2d:d0:36:77:
3b:d4:28:b5:b8:cd:b0:f1:60:48:9d:d3:2c:eb:a5:
37:cd:6b:ff:01:66:07:ad:e4:07:6d:e7:8a:9e:c2:
f4:cb:c3:2b:81:de:32:02:7a:eb:65:ad:09:36:f2:
43:7c:ae:9f:a8:4b:d0:05:53:4d:bd:82:08:d9:8c:
3a:dd:62:05:a6:40:70:11:ce:86:a7:6b:05:21:cf:
91:57:be:81:57:53:8d:13:84:53:3c:3e:81:c7:a3:
bb:0a:1a:f2:14:38:5a:5c:61:6f:2a:66:0d:fa:2f:
bf:4f:5a:e7:09:71:53:28:14:aa:c2:9a:38:96:cb:
80:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:10:04:B3:2B:CD:0D:1B:0D:F2:14:97:D8:7B:6C:4C:5F:3E:04:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5c275eb3-2120-3596-b162-89741d03d205.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
108.156.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:4b:9b:ef:df:d0:37:2e:ab:22:ff:f3:fb:bb:b4:c1:7e:f8:
62:2e:6c:9c:f1:49:94:7c:39:0f:68:0f:80:f4:05:f7:22:a3:
05:14:9b:ad:19:d5:cc:b0:a9:fd:3e:99:63:3d:78:55:11:74:
87:db:1c:11:ea:b6:a4:42:d2:4c:15:40:f9:76:4e:a2:f3:77:
68:17:5f:fc:d9:51:9e:83:41:7f:2b:a5:75:fc:12:82:36:4e:
15:d0:39:f9:f2:a5:06:1f:fa:40:98:28:8a:64:f1:3b:4f:a9:
02:37:09:b4:c0:87:9e:43:65:e2:ac:9e:52:7d:b5:3a:e2:62:
ea:0b:54:2c:e6:67:a9:66:5b:c4:aa:ef:31:54:14:ae:b7:41:
4f:48:6f:52:70:ba:df:ff:e3:c2:90:39:10:19:2b:9f:4d:18:
68:29:76:15:5a:83:c4:20:42:7c:8c:0d:14:b6:f6:dc:a4:97:
66:1b:f6:e2:12:41:f3:82:e4:b3:3f:8d:db:ac:b3:a3:31:03:
db:32:84:3e:b0:d6:18:c0:35:71:eb:24:b2:fc:89:de:6b:2b:
f3:49:46:7d:32:aa:67:15:6d:55:d8:90:54:7e:8b:5c:54:2a:
5e:eb:10:10:07:0b:6f:8b:a2:48:09:9c:92:8e:da:a9:f8:38:
12:a0:a8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:30:01 2025 by rpki-client