Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bfd89d99-4379-3a91-bac1-6cd3bceb3057.roa
File: bfd89d99-4379-3a91-bac1-6cd3bceb3057.roa (raw, json)
Hash identifier: +ClPV5nslSQT5biarAwJERkK3PxeDp4jC1R8Xq+bBSQ=
Subject key identifier: 0F:15:03:37:27:E1:2C:35:20:01:52:30:C1:DA:E9:CA:95:89:10:88
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858404356BB130AFC6DDCBD6AC880
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bfd89d99-4379-3a91-bac1-6cd3bceb3057.roa
Signing time: Fri 16 Dec 2022 12:00:00 +0000
ROA not before: Fri 16 Dec 2022 12:00:00 +0000
ROA not after: Sat 21 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 108.156.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:43:56:bb:13:0a:fc:6d:dc:bd:6a:c8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 16 12:00:00 2022 GMT
Not After : Jan 21 05:00:00 2023 GMT
Subject: CN=37974569-a0ee-404e-aba0-a33feeb38241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:df:0d:60:a1:ec:11:94:b4:7f:ce:30:7d:a3:
e4:8f:ee:ce:0c:0c:7b:65:45:c5:d4:2f:df:a9:37:
ca:3e:d3:f2:fc:96:af:6b:c8:dc:00:3d:8c:f4:26:
81:46:25:00:2c:c7:6d:7a:02:f9:b5:23:b3:e6:73:
3a:c3:69:72:f9:81:33:f5:14:a1:91:a9:f9:b7:e6:
4b:52:a7:e7:8c:fe:57:4a:e8:87:83:26:c4:a0:ba:
bf:41:2f:c6:2a:8d:f0:ba:b9:e2:a0:6e:fc:38:9a:
9e:fa:c4:30:06:61:0a:05:2f:6c:06:fb:bc:f2:65:
86:a0:75:3d:bc:65:0d:bd:42:b6:37:d8:83:06:93:
20:14:e3:72:72:b5:c7:0f:62:34:14:92:a2:0a:94:
5a:2b:bc:d8:63:be:be:a1:7f:f6:1f:7a:39:70:80:
9e:69:6e:92:86:35:c1:17:43:a8:73:e7:22:02:39:
55:57:64:78:cf:b4:be:1c:6d:1a:99:cd:75:36:f7:
6d:88:07:40:8f:fa:0c:f9:4e:d2:24:41:79:da:04:
b4:5b:f1:45:f8:12:66:db:50:72:79:ba:01:82:36:
24:a7:bf:71:05:0a:49:84:9c:1b:5e:33:09:81:43:
c7:0c:ea:e0:ad:0c:64:75:28:99:40:31:4e:a3:a4:
7e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:15:03:37:27:E1:2C:35:20:01:52:30:C1:DA:E9:CA:95:89:10:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bfd89d99-4379-3a91-bac1-6cd3bceb3057.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
108.156.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:61:38:50:b7:a2:a2:50:04:9c:40:50:8a:4b:54:d5:72:8c:
ab:54:a6:71:c7:d8:4a:36:90:c8:3a:ae:2b:e4:00:0b:c2:9a:
b4:16:01:67:ba:4f:92:9c:e9:7f:8c:6c:d7:7a:65:f5:a3:99:
d6:3c:f4:e1:91:db:f2:0e:0c:01:b3:52:97:36:f0:9d:5e:69:
73:4a:bf:a1:26:46:fe:74:fb:b2:1c:87:55:75:17:6d:b5:99:
94:6c:88:47:96:79:54:78:3f:a0:ea:75:bb:20:3c:18:94:8a:
91:d2:3f:62:2e:b7:3a:49:eb:91:7a:7a:fb:b9:6b:a7:3f:76:
d2:44:8c:fd:55:85:1b:f8:ca:13:37:6d:20:f6:1e:a2:83:93:
55:c9:87:91:97:2c:f8:a6:70:94:b1:46:b0:ca:79:d1:fb:0b:
fa:1c:0a:75:55:d9:7d:f1:b8:b5:20:01:79:1e:f7:15:77:d9:
ba:ec:04:00:e5:09:76:5b:f2:a0:47:06:0b:3e:1a:64:52:d6:
28:9c:9d:ce:5a:2d:70:c5:af:4f:79:c6:59:08:1c:89:29:2b:
2a:10:40:d8:d3:f0:cd:5e:14:b6:73:36:4d:27:a3:48:66:ea:
20:a2:e5:c8:f5:fe:25:d4:ed:db:46:b7:7a:ef:ca:c0:1c:d0:
21:da:a3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:45:26 2025 by rpki-client