Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/855e57c6-4b1b-3665-91ae-fc8babbbbce0.roa
File: 855e57c6-4b1b-3665-91ae-fc8babbbbce0.roa (raw, json)
Hash identifier: w6V7h/ooofwnNXFFAuQaLjy6o2oXFgF98FoAdW6gO8Y=
Subject key identifier: 19:E3:97:EB:C3:E2:0E:F2:7A:3D:2F:00:88:56:2E:EA:68:0A:B7:79
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DAA77F8A1DDEEBB9D8B3ADA40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/855e57c6-4b1b-3665-91ae-fc8babbbbce0.roa
Signing time: Fri 22 Apr 2022 12:00:00 +0000
ROA not before: Fri 22 Apr 2022 12:00:00 +0000
ROA not after: Sat 28 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 108.136.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:aa:77:f8:a1:dd:ee:bb:9d:8b:3a:da:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 22 12:00:00 2022 GMT
Not After : May 28 04:00:00 2022 GMT
Subject: CN=5985d430-6eb5-41db-948f-e1707bf14b6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:40:f4:40:8c:67:17:27:a4:ab:08:da:47:58:
e2:e0:38:a7:67:6a:77:65:09:9b:40:d2:12:75:06:
37:17:0f:c2:6f:1c:fc:8e:77:56:12:e3:6f:7a:17:
5e:41:a7:0b:7c:3b:ba:e8:d4:04:89:ca:85:63:93:
3c:94:67:09:f4:e2:d2:38:21:e9:ff:c8:b9:d5:dc:
93:ef:95:fb:46:73:e1:73:5b:f6:6f:e2:10:ec:84:
50:2a:6a:6d:48:df:d7:eb:94:7c:5f:a5:c1:2b:fd:
3d:bb:1f:bd:23:99:00:73:0e:ca:e5:7e:85:d3:e5:
d4:90:88:0c:9f:2a:17:a3:9a:db:3a:82:ff:ec:2a:
05:bf:0c:36:45:6b:c8:a8:02:86:d9:73:c6:f7:03:
bd:19:14:bf:a1:2d:06:0c:2f:b4:73:d5:07:02:49:
87:a0:bd:a8:51:e8:6e:6d:b4:fd:a1:66:af:e6:f7:
0a:87:9b:67:40:fc:e0:ba:c3:4a:1b:16:d6:ad:a5:
9a:3f:a4:cc:03:3f:62:10:41:dc:c0:e4:f2:fa:52:
32:d7:22:20:38:a4:48:1f:b4:75:9a:e7:1f:04:b9:
89:a5:a6:8b:31:1e:a1:47:ba:07:fa:e5:13:17:80:
28:b2:69:70:e7:4e:de:bc:7c:7b:b8:b6:4c:55:50:
3f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E3:97:EB:C3:E2:0E:F2:7A:3D:2F:00:88:56:2E:EA:68:0A:B7:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/855e57c6-4b1b-3665-91ae-fc8babbbbce0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
108.136.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:3b:5f:46:aa:bb:d4:fa:07:1d:95:bd:63:6f:9e:2b:16:5d:
04:fd:a8:3b:fc:a0:2d:30:62:c9:14:e5:c8:c1:b5:72:01:53:
63:f2:22:38:8c:05:b5:c8:ba:54:a7:66:79:a3:f4:c0:be:fc:
23:c3:ed:17:f0:af:43:02:02:06:01:ba:69:1c:87:38:2c:0a:
c5:d7:2e:29:4b:6a:e7:95:5d:61:49:c3:74:05:6b:fc:04:85:
7d:af:a3:90:c6:54:49:01:32:f7:d8:c0:e3:cb:13:f3:c6:03:
23:25:80:45:34:17:59:2a:ff:2e:fb:94:c4:8d:cb:d2:f1:fe:
3c:52:e9:27:7a:81:28:83:e9:ce:05:be:6e:59:fa:d2:49:d9:
6c:72:13:4c:69:a6:0f:e1:ad:99:b2:1d:51:a6:c3:c3:ce:6e:
c5:dc:eb:f5:1d:91:0a:f1:c6:7d:e6:b1:87:6c:56:21:eb:8c:
fb:9b:be:4d:ec:cc:e6:9d:f9:bc:b5:5d:c5:dd:2b:28:54:cb:
8c:71:3d:dc:54:8f:e4:8d:6b:dd:5f:9b:ef:90:f7:24:47:f7:
03:e5:84:38:aa:3e:02:cc:b1:a7:1d:a2:8d:bb:33:40:57:cb:
ea:fe:e7:8f:2e:fe:bd:cf:8e:b2:e6:fb:5a:3e:41:1c:e7:4a:
31:86:cf:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:35:11 2025 by rpki-client