Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b84351a0-bda0-3615-9439-7c181483b9c5.roa
File: b84351a0-bda0-3615-9439-7c181483b9c5.roa (raw, json)
Hash identifier: BoeOUO4Mde0F+ZzY6c/8kQiQr8keZwPwwBtBQw16ATk=
Subject key identifier: 44:E3:CA:38:4B:6B:EB:81:32:DF:EA:13:1A:D1:EE:AF:8A:DA:0E:B0
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858406A6C2D2DDA6FDF1CD37700C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b84351a0-bda0-3615-9439-7c181483b9c5.roa
Signing time: Fri 30 Dec 2022 19:54:08 +0000
ROA not before: Fri 30 Dec 2022 19:54:08 +0000
ROA not after: Sat 04 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 108.156.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:6a:6c:2d:2d:da:6f:df:1c:d3:77:00:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 30 19:54:08 2022 GMT
Not After : Feb 4 05:00:00 2023 GMT
Subject: CN=146b866e-4e3f-4131-98bf-245fd4f20844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d6:0a:c6:5b:43:30:85:3f:36:a8:2a:e6:bf:
31:ab:da:d7:07:f9:81:a3:b0:74:35:b5:1b:11:22:
fa:36:c1:dd:55:a4:a9:44:5b:1f:cd:26:c4:71:3d:
af:01:7f:77:10:ba:93:95:30:0d:04:13:b3:29:37:
66:e4:c4:b0:60:8a:c3:62:06:ea:23:2b:d5:cd:a6:
f4:f6:f6:da:1e:65:61:84:de:6f:f1:87:dd:46:93:
0d:21:0b:d1:4d:fb:1c:a1:c7:9c:20:a6:86:6f:c4:
37:06:03:07:52:06:85:62:88:5e:12:1e:e0:a1:c4:
4d:bf:35:8c:b1:89:f3:5a:6f:79:42:e6:01:05:8e:
e4:54:9c:a6:76:b4:98:49:80:8d:66:df:6e:65:65:
23:5b:f9:4b:89:70:0c:8f:63:6b:5c:9c:f7:46:b0:
ed:1d:b2:4c:60:46:ed:0d:8d:75:49:df:9c:28:d9:
66:c9:da:b9:e2:d4:f4:70:ee:9b:f3:c8:3a:8a:10:
a4:a6:be:ab:65:be:bb:a8:f6:e0:88:ed:f0:aa:02:
d3:15:3e:bc:29:7a:6b:68:67:88:81:ce:82:0c:70:
a6:f0:fe:c6:94:5a:70:2f:db:51:1f:61:42:6f:05:
7a:28:7f:08:b1:fd:3e:4c:07:ff:18:dd:15:22:be:
71:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E3:CA:38:4B:6B:EB:81:32:DF:EA:13:1A:D1:EE:AF:8A:DA:0E:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b84351a0-bda0-3615-9439-7c181483b9c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
108.156.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:02:9c:48:2c:f7:52:37:d4:f9:b9:c8:7a:3d:4e:50:80:b3:
2a:ec:a5:2c:14:58:fe:06:b5:c7:ea:93:f0:eb:2f:fe:ba:8e:
85:5d:77:07:a9:02:67:ff:f4:d1:9e:d1:db:22:53:94:5e:97:
a2:b7:97:c0:d0:be:6b:3b:a6:73:ea:df:ce:1f:36:de:34:93:
43:a2:a2:37:66:a7:bb:72:a6:10:37:6f:66:90:ff:72:05:71:
b7:cb:af:11:9a:43:06:06:7a:60:88:8b:33:88:db:d1:15:f0:
67:14:7d:87:5d:73:4c:2a:90:06:3e:7f:2a:27:6a:ad:5e:20:
3c:17:2d:1e:54:d1:c9:f0:99:70:1c:37:25:a7:de:70:d6:c6:
da:13:aa:17:68:6e:84:7a:65:83:b0:7f:10:9f:36:c4:33:a4:
c4:14:22:9a:3a:02:81:2c:ef:76:01:a4:98:eb:84:0d:97:f4:
e0:72:ba:4c:d4:2a:5b:04:4f:29:b9:19:d0:75:50:77:7f:5a:
8f:c0:3b:d7:e3:5e:6b:6d:6e:05:ad:cd:4d:62:31:78:bd:28:
83:32:c1:e6:8e:e3:f1:04:f0:90:f7:20:10:aa:4a:a0:ae:34:
82:27:b3:2d:b0:f6:eb:e3:bc:eb:98:a0:f7:ec:24:ea:92:bf:
43:57:49:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:01:00 2025 by rpki-client