Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/61370da4-69e6-3ada-8520-34f98d69d8cb.roa
File: 61370da4-69e6-3ada-8520-34f98d69d8cb.roa (raw, json)
Hash identifier: 9TC7x2GkQ6iy2JRU+5XmE3BsAdOeRy6T2ug6K7J9nO0=
Subject key identifier: 60:E8:2A:A8:E0:00:8B:C0:2A:69:00:0C:08:2C:B7:0A:25:DE:21:B6
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D5A44941705C23A91FAAC6E20
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/61370da4-69e6-3ada-8520-34f98d69d8cb.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Fri 29 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 108.136.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:5a:44:94:17:05:c2:3a:91:fa:ac:6e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Apr 29 04:00:00 2022 GMT
Subject: CN=4f3f2474-8b65-49b8-970e-f8afb71a0719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c6:19:cd:12:ff:d6:a2:c2:1c:0a:66:a3:2d:
e0:77:15:31:41:a2:65:58:67:31:77:1e:d2:bf:95:
a1:f6:a4:ec:96:15:8b:3e:6b:5c:bd:52:06:ed:9b:
bd:74:de:36:2b:91:98:de:f6:98:b9:5c:c4:f4:c2:
cd:45:5f:51:fc:c3:39:80:b2:f1:f4:cb:8c:85:98:
57:62:e6:02:d4:f9:5e:78:92:6e:7b:fc:35:63:87:
89:3c:30:9c:da:ce:91:78:fd:73:19:8d:d8:e8:2f:
b7:d7:ce:34:32:21:51:de:e6:cd:0b:8f:35:2b:ff:
ca:d9:8a:ae:5c:24:1f:26:23:3c:16:e1:c4:e9:82:
a5:1e:a2:52:6a:b5:4b:59:9d:ce:1b:e2:88:73:d7:
39:a6:da:77:c6:8b:cd:9e:3b:64:2e:61:f1:3e:42:
14:ab:6a:6d:f5:9d:84:5a:ec:41:18:1e:a7:03:0d:
db:66:21:b3:06:48:0c:eb:fd:62:5d:51:1a:d7:c3:
3b:37:75:2a:d1:0c:95:a5:5c:05:fc:a1:db:ce:e4:
dd:5f:ac:1e:13:f0:05:1a:87:7e:06:79:ae:6f:ca:
fa:81:fa:fd:6c:f1:4f:18:5a:4b:77:e3:f4:4b:ad:
ad:ab:ed:89:de:fb:96:21:44:2d:50:4b:2b:a9:4b:
46:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E8:2A:A8:E0:00:8B:C0:2A:69:00:0C:08:2C:B7:0A:25:DE:21:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/61370da4-69e6-3ada-8520-34f98d69d8cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
108.136.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:e7:7c:5e:72:f9:b9:7e:3d:39:45:b6:5d:5e:74:6d:0c:b2:
80:76:31:e5:83:50:f8:3f:50:1e:0b:1f:09:d5:7c:ef:b2:ee:
ff:9f:10:8f:7c:6c:fb:e8:3d:70:9b:39:1f:f4:8a:3c:ff:8e:
26:76:49:03:a3:1e:0a:b4:e6:32:17:db:ef:08:2a:ed:dd:39:
df:b3:ab:b7:e4:52:44:ab:9f:87:cc:00:4e:44:aa:98:72:cb:
98:33:b5:49:dd:f7:35:9b:45:27:8b:4c:fd:77:c7:45:1a:64:
a8:22:97:47:99:af:e9:fb:f5:db:3a:fe:a9:b1:50:18:30:88:
a2:49:6e:55:9d:5c:3c:3a:a1:ba:2c:b8:72:fa:42:d9:e3:44:
ab:6d:c4:0f:5b:79:5a:56:69:91:0c:d9:0a:48:a3:09:41:d0:
66:8f:0e:4a:b2:2c:66:66:91:94:68:d9:bc:1c:fb:6d:1c:d0:
dc:8d:97:aa:f8:fe:5c:a4:12:dc:0a:27:6c:9d:69:5e:4c:69:
57:4f:d9:0f:b3:b0:2e:ed:6c:06:d4:28:b6:c6:cc:af:d8:3e:
16:82:43:d0:1f:6e:91:be:c9:dd:6f:10:1d:72:16:66:40:dd:
75:58:1e:35:e6:c6:fe:4d:65:e6:72:eb:b7:25:ad:ce:df:85:
16:2b:32:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:22:25 2025 by rpki-client