Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ddcf3f37-a919-3d48-a945-d3d57ed2b5ca.roa
File: ddcf3f37-a919-3d48-a945-d3d57ed2b5ca.roa (raw, json)
Hash identifier: u6Ug3Q7SVj8oUt1LFhdt5pmGNBp82lBiJC8Z+D+IC1k=
Subject key identifier: 3F:49:E5:34:E7:EE:AB:E1:00:AF:02:99:72:82:80:E5:B2:9F:15:3A
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D32FA6A80EA90ADF614E08D40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ddcf3f37-a919-3d48-a945-d3d57ed2b5ca.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 108.156.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:32:fa:6a:80:ea:90:ad:f6:14:e0:8d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=f17540bf-29a4-4c80-8a61-e1c58ce1eff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:33:d1:0f:a3:c4:0a:af:89:9e:5a:86:54:e5:
ea:b7:60:da:5a:75:b4:bc:63:79:8b:7c:03:52:32:
9c:ea:50:58:a5:0b:fb:60:0b:0d:19:2b:bc:f2:8b:
27:a3:6e:c7:43:49:90:ea:21:13:63:ba:81:d5:60:
4d:1e:c3:59:f9:02:6b:ba:03:d3:ec:0d:64:54:1a:
2e:74:9c:c8:b9:e3:84:46:78:92:bf:88:5a:e2:5c:
67:5e:7a:15:e5:63:cc:30:53:0d:93:48:f0:5b:3a:
22:e6:ec:e8:97:6a:01:12:8c:85:18:87:fc:66:22:
20:65:70:15:86:5d:47:25:9a:ce:0e:1d:56:8c:66:
2b:18:9b:f4:8b:53:95:bf:e1:c0:d7:28:da:e4:f6:
e7:7a:cf:ee:4b:6a:c5:9d:31:76:f3:69:47:88:ea:
96:b0:7a:ff:f7:8f:86:8c:f0:db:a8:70:a3:68:9a:
d4:a6:87:b9:25:a8:55:2d:69:de:3a:cc:a9:4d:c4:
9c:30:17:95:cd:66:77:71:15:59:06:9a:24:7b:18:
e3:9b:08:26:e5:44:33:14:ef:2a:96:6c:32:93:4e:
20:c2:c5:c6:1d:70:78:33:c1:76:ae:86:03:73:ec:
59:21:11:96:ba:6e:1d:30:fc:41:db:f4:fd:73:51:
46:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:49:E5:34:E7:EE:AB:E1:00:AF:02:99:72:82:80:E5:B2:9F:15:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ddcf3f37-a919-3d48-a945-d3d57ed2b5ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
108.156.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:13:f6:82:d4:9e:5d:16:e4:8f:2e:fe:7a:c0:bc:74:13:d4:
b6:d6:12:dc:68:55:02:90:6b:c5:2c:9e:d3:d7:ee:9b:8d:1d:
53:33:ae:6b:f5:8a:51:c2:13:b6:96:1f:09:7f:51:10:c1:f0:
36:9b:c0:3c:d2:96:30:74:5e:13:4e:92:47:22:e9:32:88:18:
a9:54:68:5b:0d:2b:d1:1c:f8:fe:87:8f:ac:57:7b:31:69:c0:
24:22:96:02:12:cf:b6:4e:74:f4:6c:8c:40:9e:79:63:dc:d4:
d4:a2:30:3d:dc:bb:54:b3:10:4a:b1:33:91:56:2f:58:68:99:
8e:b8:89:c2:88:a0:2d:ff:7c:e4:1c:25:ab:fb:5a:43:e7:7d:
98:34:d9:7e:21:73:76:30:35:b7:ee:4b:1c:ba:fa:b8:67:6d:
d6:1c:35:6b:6c:b6:e0:2b:dc:0c:3e:7e:3d:3e:d3:7d:9c:2c:
d7:12:75:25:24:70:df:86:73:49:6b:90:68:50:36:ba:96:00:
bf:d7:ae:0a:9a:f7:10:b3:f5:15:8d:39:af:8f:2f:39:25:78:
54:1e:bb:4e:27:54:9e:c5:cc:66:18:ce:65:9e:6e:70:d1:ca:
3d:18:2a:0f:58:a9:7a:e0:80:2c:6d:b5:39:d7:0a:ec:42:09:
ac:1c:1a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:47:57 2025 by rpki-client