Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bf7ea370-ddc6-3737-a66f-d54697b28872.roa
File: bf7ea370-ddc6-3737-a66f-d54697b28872.roa (raw, json)
Hash identifier: Mzr+kyxd24+qNWbDM/1sgVNnuDwO1KLnFzH7zu65INY=
Subject key identifier: 4B:DB:13:5B:3C:1E:87:88:8A:B2:52:1D:B4:C2:EB:21:2A:ED:07:F1
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FA506379B16E845AABB86EA40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bf7ea370-ddc6-3737-a66f-d54697b28872.roa
Signing time: Thu 20 Oct 2022 12:00:00 +0000
ROA not before: Thu 20 Oct 2022 12:00:00 +0000
ROA not after: Fri 25 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 108.166.224.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:a5:06:37:9b:16:e8:45:aa:bb:86:ea:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 20 12:00:00 2022 GMT
Not After : Nov 25 05:00:00 2022 GMT
Subject: CN=4029b767-4bc6-480f-934d-31f0686d7051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d7:45:e0:1a:d5:ad:51:f8:3b:c3:63:1d:a9:
e3:30:95:8b:b5:bc:23:b7:20:26:36:88:0d:6b:56:
b3:3e:e6:6a:64:d4:68:02:1a:44:f5:79:0e:65:9c:
91:42:30:0b:f8:78:d5:db:db:84:40:6e:a9:71:70:
c5:04:4e:78:1e:96:40:ad:15:35:c5:bf:3f:7c:22:
14:d6:24:7a:6c:56:46:c3:99:03:96:9b:5f:8c:cb:
47:29:67:7a:73:b2:f4:76:43:b1:b4:ca:d8:b8:62:
39:6d:95:cc:34:9c:08:a8:0d:76:d1:b0:7c:9d:e4:
ed:09:06:d8:f1:fe:cb:c2:e5:b9:21:8d:33:2e:d0:
1d:10:03:37:01:6f:97:79:b5:d1:83:1b:58:71:76:
7d:60:6a:59:5d:cc:e8:a5:2d:9b:85:60:40:30:62:
e7:c4:e0:4a:46:43:3c:87:d9:2d:5c:83:ee:fd:6a:
67:b2:bf:37:fa:d0:91:c9:e8:dd:d9:b2:ac:91:52:
68:85:ea:d7:f3:c3:9a:37:f2:e2:a2:8b:c5:52:98:
ec:e0:ad:50:ce:bc:ff:12:36:ce:f5:ad:56:43:4f:
eb:79:88:ac:5d:28:ac:bb:82:e8:d0:f0:db:0f:a4:
5b:8d:4a:68:96:92:31:7b:41:7a:e7:cc:67:d1:96:
06:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:DB:13:5B:3C:1E:87:88:8A:B2:52:1D:B4:C2:EB:21:2A:ED:07:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bf7ea370-ddc6-3737-a66f-d54697b28872.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
108.166.224.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:d7:b9:cd:ca:7d:ca:04:b7:d3:ad:02:a1:98:3b:13:00:bc:
98:3f:48:7d:ee:74:5a:80:f8:35:4d:4a:84:30:7e:e6:82:02:
a3:85:fe:73:72:e0:88:bd:50:fd:7b:1e:36:42:b9:fe:83:f4:
18:b6:65:fc:9e:3a:2e:a5:f6:8a:dc:cb:cd:36:69:0c:5e:03:
68:66:e1:da:f6:3e:b2:9b:a5:04:ed:9a:0c:d6:42:14:f5:c2:
a2:b1:2e:8a:03:a4:2d:d9:75:2a:25:1f:85:81:d8:8d:62:79:
05:41:60:ba:c1:cd:99:87:bf:56:15:d3:86:c2:3e:85:8d:44:
12:c1:f7:11:48:b1:cf:14:3c:55:c0:24:ff:08:e7:da:7c:c6:
dd:2a:36:c4:c8:ce:66:f8:25:4b:8b:60:5c:97:d5:34:fc:c4:
9d:4c:8b:c4:1f:de:7b:54:fc:73:84:da:a8:6c:5b:a9:00:aa:
0c:89:28:a5:ea:b7:69:1c:df:88:74:7e:58:70:09:c2:60:92:
53:f7:e2:56:ad:92:08:4b:59:18:3b:7d:4b:d9:8c:9f:d4:47:
c5:f1:9d:b6:f8:92:f5:a0:84:02:14:13:d7:22:0e:36:72:aa:
1d:e3:a8:4d:fe:bf:e9:2b:37:2f:34:3c:05:83:a8:75:0c:c6:
e4:1c:d8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:03 2025 by rpki-client