Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/84e68973-ddc5-30f8-bf05-9aea4cf830c3.roa
File: 84e68973-ddc5-30f8-bf05-9aea4cf830c3.roa (raw, json)
Hash identifier: tMWDedFE/zgbp+5S8vFEQnkyWzpqSU4cr4D1HefL6AY=
Subject key identifier: 29:E3:51:E0:8B:22:5A:63:0B:61:D6:5F:9F:1A:C6:10:F8:EC:6A:34
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583C6F9669AE7491E6C74BA1F880
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/84e68973-ddc5-30f8-bf05-9aea4cf830c3.roa
Signing time: Fri 31 Dec 2021 05:00:00 +0000
ROA not before: Fri 31 Dec 2021 05:00:00 +0000
ROA not after: Fri 04 Feb 2022 05:00:00 +0000
asID: 14618
IP address blocks: 108.136.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:6f:96:69:ae:74:91:e6:c7:4b:a1:f8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 31 05:00:00 2021 GMT
Not After : Feb 4 05:00:00 2022 GMT
Subject: CN=70f48425-8b1e-4c8f-bc24-ba21df0d011d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e7:91:b6:8c:ab:fd:65:0d:f6:32:31:0a:f3:
6d:75:63:ec:37:52:c6:a7:97:17:b3:ad:c9:b0:3f:
40:65:7e:35:b3:c7:c5:b6:47:8b:99:ef:0e:e9:bc:
9d:af:3d:0c:79:74:e4:e5:1d:67:4c:6d:8e:cc:aa:
fe:19:9c:43:2d:f4:b7:f2:0c:27:24:78:09:2c:4e:
ec:08:d6:90:47:92:51:28:ca:a1:f0:c5:81:a1:5a:
51:c3:80:03:ba:84:80:8c:2c:b9:cc:b4:c4:64:0a:
8c:6e:17:9a:da:93:bc:6a:ed:13:57:4d:19:70:fc:
85:37:d7:0b:10:73:87:4d:cb:77:b4:f5:a8:f9:07:
45:16:38:ba:aa:e2:c3:05:ac:26:ac:fc:72:a1:99:
aa:61:fa:39:82:8a:44:04:82:c4:34:21:5c:1b:50:
e3:ea:7e:4a:17:15:e6:44:f0:52:b1:70:a9:51:37:
6e:f2:33:cc:ac:f7:f2:bd:92:47:41:36:ea:7b:09:
21:e0:3e:c4:6e:b5:6c:a7:45:50:d9:eb:5e:b4:ff:
f8:9f:c2:c6:1c:7b:05:72:79:d6:43:aa:c3:56:00:
f7:00:96:9d:cf:3c:d6:29:f0:e3:e8:90:79:51:b2:
82:de:d6:b2:79:16:51:ac:d4:ef:1a:0d:1d:8a:36:
a4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E3:51:E0:8B:22:5A:63:0B:61:D6:5F:9F:1A:C6:10:F8:EC:6A:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/84e68973-ddc5-30f8-bf05-9aea4cf830c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
108.136.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:96:cb:e2:4c:80:38:15:df:3d:c1:62:30:93:32:c3:4f:b9:
12:dd:ed:ff:f3:21:38:9f:77:0e:0a:10:e6:c1:87:0e:a5:1b:
f8:c6:10:e5:8d:5d:76:b6:a6:e8:f7:a5:aa:80:11:03:a7:94:
a9:8c:c1:02:12:7f:cc:cf:e6:40:f6:73:2b:75:6d:b7:4a:1f:
d8:84:c2:40:6a:3a:50:18:80:00:05:8a:50:30:2b:2c:75:90:
44:fb:fc:20:3f:ee:e9:a9:a7:ff:96:dc:2c:97:1e:77:fa:9d:
80:17:9b:2f:8b:88:2b:23:0d:f6:2f:56:41:f7:31:51:95:20:
b9:58:3d:bc:91:93:a1:6f:cc:1f:97:3b:d5:97:6b:64:65:96:
ae:41:f1:70:e3:fb:1a:35:d7:81:c6:01:fb:99:4e:82:b3:71:
1c:88:e7:43:d2:14:9e:5d:97:39:0c:53:83:59:dc:a5:19:a5:
67:e8:0f:58:ea:84:7a:34:55:cb:69:7f:c6:2e:22:35:00:dc:
6f:5d:d9:81:f2:41:b8:5d:b1:12:c1:46:08:a5:30:84:78:96:
4e:ba:0a:86:5c:4b:f5:18:ff:d8:aa:0b:4a:a2:74:83:1a:24:
ab:bf:66:bf:89:63:11:ae:9f:da:6f:d8:f5:ec:36:9e:13:82:
27:a6:61:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:47:55 2025 by rpki-client