Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ef4ac81e-7804-39d5-a172-d077c4f1129e.roa
File: ef4ac81e-7804-39d5-a172-d077c4f1129e.roa (raw, json)
Hash identifier: Yo8wWDB3/XDrr8n3fXCMm+Wli57F4ytl7ik+ke6TobU=
Subject key identifier: FF:28:DD:9D:30:92:57:5A:BD:6A:48:A9:F3:3E:98:ED:52:50:15:19
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DF921E78F2656F01F625D1C00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ef4ac81e-7804-39d5-a172-d077c4f1129e.roa
Signing time: Fri 20 May 2022 12:00:00 +0000
ROA not before: Fri 20 May 2022 12:00:00 +0000
ROA not after: Sat 25 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 108.156.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:f9:21:e7:8f:26:56:f0:1f:62:5d:1c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 20 12:00:00 2022 GMT
Not After : Jun 25 04:00:00 2022 GMT
Subject: CN=95bd9a9a-c73a-4324-972a-9a9123ede1b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0d:73:ea:89:d3:4d:a4:f9:a9:2a:36:f1:ee:
2b:44:59:ff:f5:86:1b:63:8a:58:d9:3f:2a:cb:45:
68:74:35:44:eb:a0:e0:f3:ce:4a:d4:0b:c2:d3:60:
b5:17:78:a0:8c:1e:cd:e5:75:c7:39:62:24:c6:53:
47:91:64:ff:a9:0b:4b:d3:7d:90:f3:28:05:80:ed:
fb:26:56:95:98:27:f4:08:cb:4a:b2:29:d9:21:4e:
4e:76:77:59:08:72:96:d9:ff:a9:85:ea:b4:a6:1b:
ad:6b:9a:ad:d9:9e:a7:c8:da:64:35:81:fa:e4:28:
52:ce:35:bb:48:7e:c7:d4:f0:26:33:67:3e:03:b3:
3d:ba:32:b8:48:41:ea:70:60:0e:ca:7f:16:96:d7:
32:96:ff:ea:ae:fb:ae:8c:20:79:3d:85:0a:1f:2c:
fe:49:1a:6d:06:e6:6b:e4:37:fc:a2:6d:25:9f:eb:
3d:73:d6:96:aa:af:f3:77:e9:f7:b0:26:bc:c2:4c:
87:d9:eb:67:54:a2:c7:e2:c1:a9:05:59:4c:3c:5f:
1b:98:38:25:3a:6a:67:a4:2c:8d:b5:1e:4c:56:e2:
23:94:4a:e3:f2:aa:70:17:b5:72:5f:21:0c:67:52:
e7:e2:d4:28:77:76:34:b2:02:87:43:68:7e:39:89:
e6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:28:DD:9D:30:92:57:5A:BD:6A:48:A9:F3:3E:98:ED:52:50:15:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ef4ac81e-7804-39d5-a172-d077c4f1129e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
108.156.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:5e:49:b3:5e:2f:9e:a9:ea:04:e8:e4:91:9a:2a:17:b6:c5:
98:28:d6:f3:76:3f:56:d8:28:c4:da:6d:eb:44:50:91:07:d0:
e3:7d:0c:ec:30:76:6f:6e:cc:05:dc:41:7c:20:cc:46:c1:04:
1e:7f:bc:fd:7a:73:db:06:a1:96:99:3b:82:15:c7:f8:b7:ec:
c3:c5:46:99:b2:49:ba:56:eb:79:ee:df:4d:0e:8e:e2:94:93:
5b:e6:55:eb:5f:08:fa:f8:a7:5f:95:db:d4:ce:4e:e1:3c:c9:
f1:60:4d:a6:a2:f9:a0:a8:57:59:f6:8f:68:c5:6d:d7:93:b2:
0d:18:a8:aa:bf:da:55:f6:14:f0:bd:6e:d0:cd:ed:40:1a:06:
c1:3e:9c:4d:9d:db:68:f8:c8:eb:1d:1e:57:43:3c:dc:a4:52:
40:6e:42:c5:b1:92:69:1b:5f:1b:5d:34:74:fb:02:26:ee:b3:
c4:a9:de:80:77:90:0f:33:ee:2f:9e:30:1c:dc:aa:a8:f4:96:
72:67:a2:8e:b5:e9:97:d6:c1:4a:5b:f6:35:aa:3d:b0:bb:c9:
39:ad:75:9e:f6:fd:83:c1:47:6c:49:81:c1:b5:1c:cd:c2:1b:
31:49:63:d5:fe:d1:65:2b:a9:8f:c2:8d:07:62:b6:85:5d:57:
57:a2:97:1c
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD35IeePJlbwH2JdHAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDUyMDEyMDAwMFoXDTIyMDYyNTA0MDAwMFowLzEtMCsGA1UEAxMk
OTViZDlhOWEtYzczYS00MzI0LTk3MmEtOWE5MTIzZWRlMWI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiw1z6onTTaT5qSo28e4rRFn/9YYbY4pY2T8q
y0VodDVE66Dg885K1AvC02C1F3igjB7N5XXHOWIkxlNHkWT/qQtL032Q8ygFgO37
JlaVmCf0CMtKsinZIU5OdndZCHKW2f+pheq0phuta5qt2Z6nyNpkNYH65ChSzjW7
SH7H1PAmM2c+A7M9ujK4SEHqcGAOyn8Wltcylv/qrvuujCB5PYUKHyz+SRptBuZr
5Df8om0ln+s9c9aWqq/zd+n3sCa8wkyH2etnVKLH4sGpBVlMPF8bmDglOmpnpCyN
tR5MVuIjlErj8qpwF7VyXyEMZ1Ln4tQod3Y0sgKHQ2h+OYnmKwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFP8o3Z0wkldavWpIqfM+mO1SUBUZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZWY0YWM4MWUtNzgwNC0z
OWQ1LWExNzItZDA3N2M0ZjExMjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCbJwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAk15Js14vnqnqBOjkkZoqF7bFmCjW83Y/VtgoxNpt60RQkQfQ430M7DB2
b27MBdxBfCDMRsEEHn+8/Xpz2wahlpk7ghXH+Lfsw8VGmbJJulbree7fTQ6O4pST
W+ZV618I+vinX5Xb1M5O4TzJ8WBNpqL5oKhXWfaPaMVt15OyDRioqr/aVfYU8L1u
0M3tQBoGwT6cTZ3baPjI6x0eV0M83KRSQG5CxbGSaRtfG100dPsCJu6zxKnegHeQ
DzPuL54wHNyqqPSWcmeijrXpl9bBSlv2Nao9sLvJOa11nvb9g8FHbEmBwbUczcIb
MUlj1f7RZSupj8KNB2K2hV1XV6KXHA==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:29:33 2025 by rpki-client