Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/caca85bf-5461-3065-bd93-1d71e8d8e3b8.roa
File: caca85bf-5461-3065-bd93-1d71e8d8e3b8.roa (raw, json)
Hash identifier: HR9YxaFDS8pc+vWT5QDrr+d7o9KfxcaYorVbwwVmtJQ=
Subject key identifier: 44:7C:9F:FB:74:EC:D6:1A:6C:BE:02:D4:D5:19:AA:B0:81:24:FC:93
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D81346F050523D97BB75C97C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/caca85bf-5461-3065-bd93-1d71e8d8e3b8.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 108.156.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:81:34:6f:05:05:23:d9:7b:b7:5c:97:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=37f22310-1fb2-4c37-8637-4d1f10e15fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4b:e4:e9:de:b8:e4:c7:74:d9:1c:08:3a:ff:
cc:f1:e7:db:ed:3b:70:e2:d2:88:4a:11:d1:c2:5b:
6d:7f:01:36:0c:76:aa:9b:bd:0b:3a:a7:55:68:14:
5f:ac:82:08:9a:ab:f2:29:a8:dc:d7:47:c5:ea:8d:
85:f5:68:05:63:0b:39:ea:ba:d1:bd:95:c2:92:93:
85:b3:b0:ad:91:cd:df:d9:27:83:f3:89:d0:f0:e9:
73:06:0f:5e:b1:9d:04:43:e8:61:06:bf:9d:5f:d4:
08:6f:cf:ab:a6:27:cf:e6:95:cb:44:93:88:14:24:
1b:4c:6a:9c:f9:e5:a4:cb:95:b8:fc:1a:29:c0:6d:
7e:e3:ed:be:c9:05:34:38:4b:d6:24:ed:c2:5f:21:
f2:5d:01:e1:9f:f5:36:be:db:58:10:3b:7c:60:a7:
53:e6:b6:13:cb:3b:20:89:e1:dc:00:77:4b:84:a7:
a8:95:e6:59:0c:d3:42:38:b7:e1:57:07:30:82:b6:
1d:79:ca:5e:9a:cb:31:f8:fd:52:20:db:92:9c:04:
4d:16:90:24:d1:62:e3:73:56:e3:c4:c7:e7:fe:63:
7d:fa:6c:0d:3f:ff:28:84:81:cb:01:af:4f:bf:76:
df:ea:aa:8f:d1:58:9b:8a:7a:ad:35:bc:1e:f9:1b:
a7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:7C:9F:FB:74:EC:D6:1A:6C:BE:02:D4:D5:19:AA:B0:81:24:FC:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/caca85bf-5461-3065-bd93-1d71e8d8e3b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
108.156.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:b1:68:9d:3e:17:fa:8a:62:7c:41:0d:0f:5d:33:b4:8b:45:
b0:b2:10:59:3f:6a:68:1a:7f:c4:73:af:d4:14:ae:d4:cd:35:
2e:c4:8a:19:37:e5:72:2d:99:33:0f:69:81:90:0c:11:7e:18:
c0:53:4c:07:ce:97:a8:9d:5e:61:a1:f2:ef:88:6a:76:c3:2e:
a6:e3:f9:b0:61:b4:48:56:13:f2:c7:43:0c:3a:7c:61:59:25:
b5:65:7a:ab:49:ae:c4:79:d6:f9:0d:8f:46:21:d7:89:56:b2:
2d:a3:4f:7a:18:79:e8:9f:3f:dd:17:e9:b3:51:51:f1:cf:83:
4f:8c:f8:51:31:93:b9:d9:be:42:5a:6d:d2:fd:8b:18:0e:cf:
c9:4c:f3:c6:0a:1a:d4:d5:f7:23:73:b9:62:f9:aa:e8:e0:79:
b2:be:8f:de:39:bf:2d:9a:a9:02:48:13:3b:92:a0:94:bf:1c:
12:6a:c5:73:d4:f3:12:1a:3f:81:22:74:2e:b1:ac:0e:86:09:
a0:63:be:7e:1e:75:b7:7b:da:9e:15:6f:2a:35:9f:f6:2f:8b:
ec:a8:a6:46:12:d3:19:99:ec:cd:48:07:f7:b0:91:40:cf:b8:
16:87:51:aa:47:99:c6:e5:c0:3d:60:44:b5:46:2a:81:ed:37:
65:80:f9:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:05:39 2025 by rpki-client