Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a536c67a-26fb-38dc-981b-b9fead9de98a.roa
File: a536c67a-26fb-38dc-981b-b9fead9de98a.roa (raw, json)
Hash identifier: zrTXzvBsc7SrGsl2CR3V0QnKJQ4BQ9Gc9Ymz9VQoXIs=
Subject key identifier: F4:4B:BC:ED:8B:74:DD:F7:F0:81:B6:65:E5:C5:D5:28:EC:EE:1A:DB
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583C96B379E30231F20BF8151CC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a536c67a-26fb-38dc-981b-b9fead9de98a.roa
Signing time: Fri 14 Jan 2022 05:00:00 +0000
ROA not before: Fri 14 Jan 2022 05:00:00 +0000
ROA not after: Fri 18 Feb 2022 05:00:00 +0000
asID: 16509
IP address blocks: 108.136.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:96:b3:79:e3:02:31:f2:0b:f8:15:1c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 14 05:00:00 2022 GMT
Not After : Feb 18 05:00:00 2022 GMT
Subject: CN=67deb3ba-71a3-4585-aecd-bc4dfc6cca72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:09:70:34:c3:90:a1:5b:ef:c1:6f:bb:dd:e0:
12:0c:6e:af:0f:db:0f:5c:14:35:3f:cc:30:07:65:
fc:ea:93:3c:e7:ad:8c:a3:2d:d5:65:a4:c3:c4:1b:
99:a4:05:a9:88:2f:4b:b5:c3:6d:01:c8:57:a3:4e:
60:03:b6:57:05:6b:d1:be:9d:67:9d:b9:15:00:5e:
7d:ff:5f:03:ba:e2:ec:3a:0f:e2:d3:a9:d4:5b:e0:
e4:a8:36:cd:a8:30:05:64:53:c7:0d:73:ee:89:f3:
d9:63:3f:93:81:3f:c1:e4:ae:1a:b1:bd:cb:3f:6c:
01:d9:91:6a:64:ca:de:8b:82:83:4f:b0:48:e7:09:
cd:dd:85:53:2f:42:e3:18:ff:06:4c:65:eb:42:da:
e0:06:f7:59:9b:ba:d3:ba:61:36:a1:71:cc:aa:23:
5e:81:35:18:25:05:ea:70:8e:14:7a:27:10:ec:ce:
5d:18:5e:9a:da:4f:c5:ca:96:eb:b9:60:78:5b:08:
5a:80:cf:d6:6f:3b:b8:9a:ff:c8:7c:65:e0:20:97:
66:89:42:13:74:4d:cc:98:f0:34:9f:7d:34:6f:a7:
48:84:1e:9d:3c:01:fe:e0:63:8f:7e:c9:e8:86:da:
be:40:d7:91:2b:7e:28:0d:b6:d6:17:bb:4d:c6:3e:
66:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:4B:BC:ED:8B:74:DD:F7:F0:81:B6:65:E5:C5:D5:28:EC:EE:1A:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a536c67a-26fb-38dc-981b-b9fead9de98a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
108.136.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:7d:cc:28:58:ef:fa:14:33:ae:04:2d:99:a2:4c:1a:83:e9:
f6:f7:53:6d:1e:0e:e1:6e:ba:57:76:d9:9c:98:23:92:78:90:
ed:45:28:ff:2e:58:41:bc:ab:ee:81:94:cb:42:a3:63:c4:d8:
27:c8:81:b7:e7:ba:c8:dc:16:6b:d5:57:c9:bd:29:b7:25:fa:
37:f5:27:b0:5a:df:cb:77:81:6d:db:bd:a3:fe:da:e5:6a:21:
6d:c8:ae:43:83:a6:e6:f6:be:2f:33:a4:cc:e9:83:24:ea:37:
4e:b9:f0:6f:36:82:cc:84:d3:bb:48:48:95:81:2a:79:ab:07:
8e:30:d3:8b:1e:8d:61:ab:de:8a:d8:2c:41:69:d8:a9:2e:48:
d2:6b:32:53:d7:e4:41:5c:d0:83:ae:79:47:45:b1:fb:5e:c4:
27:ac:da:0b:d8:dd:3a:86:c8:c3:e0:74:94:d2:1e:fe:2c:94:
6c:fa:dd:4f:a0:fb:3c:55:97:13:47:70:68:2e:9a:5d:1c:b6:
4f:5d:8a:fc:54:e3:69:5d:5c:53:73:75:6c:47:ec:74:30:65:
47:7b:a9:16:b0:0e:dc:08:f1:0f:a0:3b:1b:a8:06:8e:38:bf:
62:6f:21:d4:b8:e3:d4:23:59:af:f4:15:5f:49:41:28:ff:2c:
4e:63:22:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 17:03:43 2025 by rpki-client