Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5f300b3d-bd4e-3e3d-b51e-e98ee75b5081.roa
File: 5f300b3d-bd4e-3e3d-b51e-e98ee75b5081.roa (raw, json)
Hash identifier: gnlHaoQ8SgVFljcZ8ayTnjef7qbtiWs/w+tSXM2jqkc=
Subject key identifier: 21:BB:78:00:C0:9E:9E:3B:AC:84:E3:A1:F7:78:11:40:10:06:BA:84
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DF8B2345C30B9426A6E752E00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5f300b3d-bd4e-3e3d-b51e-e98ee75b5081.roa
Signing time: Fri 20 May 2022 12:00:00 +0000
ROA not before: Fri 20 May 2022 12:00:00 +0000
ROA not after: Sat 25 Jun 2022 04:00:00 +0000
asID: 14618
IP address blocks: 108.128.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:f8:b2:34:5c:30:b9:42:6a:6e:75:2e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 20 12:00:00 2022 GMT
Not After : Jun 25 04:00:00 2022 GMT
Subject: CN=832e684a-bb1c-4352-9f7f-ec670362f6ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:46:6e:58:82:1d:ec:42:4f:c7:44:49:9b:46:
d9:d8:62:05:ee:aa:a9:0a:cb:fa:ce:8d:4d:43:08:
9d:c6:67:c9:34:d4:d1:30:06:e8:8c:cf:3e:fc:5b:
c8:c5:a1:05:72:d6:5f:a7:76:fb:cf:fd:7f:90:ae:
43:a7:b6:66:92:eb:52:4b:06:32:98:f5:71:65:ba:
87:2f:01:7d:3a:e1:0c:27:1d:7c:cf:0c:ac:75:c6:
68:70:3d:36:43:f7:56:61:41:00:d3:fc:9b:44:be:
72:d7:3a:99:d6:5a:8e:14:5f:c1:22:b7:d1:04:20:
5e:21:6a:3d:92:93:2f:4a:38:ef:68:78:5d:dd:bf:
a0:7e:62:ed:70:84:10:46:59:84:ef:c7:24:e6:aa:
41:28:58:b2:72:51:7a:40:a7:ba:1f:5d:0f:a5:03:
ff:38:8c:b1:bc:c6:b9:70:17:b8:84:88:ce:37:92:
3f:b5:65:31:b0:b6:74:33:13:36:b2:fe:9e:bb:ab:
cd:11:13:6e:33:8e:78:e2:88:4f:9b:a5:59:dc:de:
1a:b9:07:ad:2e:91:06:c5:15:7c:5e:81:04:9f:db:
16:be:9f:c8:dc:61:86:61:cc:dd:b6:0b:49:cd:0d:
93:b4:60:83:8f:b5:34:35:9a:e4:b3:82:6e:ce:9a:
b4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:BB:78:00:C0:9E:9E:3B:AC:84:E3:A1:F7:78:11:40:10:06:BA:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5f300b3d-bd4e-3e3d-b51e-e98ee75b5081.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
108.128.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:a2:be:60:45:ea:c7:96:43:80:41:e8:8b:70:b2:21:ed:61:
1f:4b:32:e3:03:46:6f:fa:f7:75:5b:53:3d:e6:80:7a:96:f5:
ab:9b:af:c4:e8:4c:55:cf:df:54:a4:9b:01:70:09:32:26:95:
0f:08:be:57:af:81:1d:38:91:d4:7e:2a:99:52:5a:a2:0d:b6:
d0:d5:c5:99:33:92:2d:a3:79:ab:76:61:20:3b:17:ce:81:28:
00:b8:85:bf:72:c7:ae:93:01:20:87:5e:bd:ab:54:b6:55:64:
d2:5c:59:23:87:9b:32:00:a3:e0:06:65:b0:70:44:fd:81:21:
3d:51:3c:16:85:09:20:d4:f7:9c:b5:bd:7f:17:c6:27:76:1e:
69:e4:98:80:ec:ae:fe:ab:42:93:f7:11:4a:89:94:ca:16:d5:
47:3a:e8:fe:3e:4c:04:7b:00:42:f9:75:eb:b5:7e:da:e3:b6:
bd:ca:09:f5:e1:8c:fb:af:ab:af:98:bf:4e:34:53:a2:c2:e7:
27:ec:77:36:b1:59:ad:f6:a4:20:73:6e:cd:72:3b:2d:3c:41:
f4:8a:49:27:62:53:31:c9:78:be:da:0b:bc:da:18:84:a5:91:
6a:11:bf:0f:1e:ce:c2:f8:59:df:b8:20:2c:c3:68:39:fd:72:
f3:19:13:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:45:07 2025 by rpki-client