Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/04c01a80-0c57-36f4-8a19-7370bb0db107.roa
File: 04c01a80-0c57-36f4-8a19-7370bb0db107.roa (raw, json)
Hash identifier: 3PW+QAjQlA9cqq5qhMJn4c3eM++mHziL5hj2JLtiglY=
Subject key identifier: 16:2F:9E:BD:00:57:25:EA:85:E9:77:D6:F8:FD:20:F9:29:D7:D5:2B
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858408BE518A4A4326D518EFB6EA0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/04c01a80-0c57-36f4-8a19-7370bb0db107.roa
Signing time: Wed 11 Jan 2023 12:00:00 +0000
ROA not before: Wed 11 Jan 2023 12:00:00 +0000
ROA not after: Thu 16 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 136.18.24.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:8b:e5:18:a4:a4:32:6d:51:8e:fb:6e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 11 12:00:00 2023 GMT
Not After : Feb 16 05:00:00 2023 GMT
Subject: CN=ec3b9009-1a3e-4a1e-bc52-4a7d44f17a64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c8:11:14:8b:74:fe:34:e8:25:91:ac:fc:d5:
3c:fe:94:88:39:36:8c:c2:ae:a2:0d:40:74:a1:ab:
81:65:67:a3:35:31:9f:ff:82:f4:41:c0:e0:08:dc:
eb:f2:ee:4e:37:b0:16:95:81:f1:15:66:45:9c:e8:
36:24:a8:bf:e6:73:7b:d0:78:c2:54:a3:8d:18:fa:
fa:54:b6:19:bc:aa:9d:8d:62:63:55:16:f1:a9:dc:
38:d4:45:6e:73:04:1a:21:48:e4:b9:cb:75:91:56:
91:f8:9b:0c:de:29:3d:20:76:63:8b:65:3d:a9:90:
02:02:27:f6:03:b3:c0:61:b3:ac:b1:13:d1:05:2b:
a7:84:d1:82:7b:f2:cf:9e:18:30:38:4f:71:09:d8:
e4:77:e8:33:b7:a4:5b:44:8f:c2:56:09:a5:c5:05:
d9:e7:b1:1b:a4:a1:44:38:ed:45:a7:26:24:6c:43:
35:c9:ba:05:cd:0d:aa:ea:06:b3:78:ab:70:76:cd:
98:53:a5:7a:81:c4:29:30:1a:1d:94:a1:34:9b:18:
70:b6:ec:26:b1:28:1e:90:db:d6:2e:a3:b5:db:60:
17:a5:d7:84:99:98:fa:26:42:90:1c:8e:55:0c:3d:
16:53:c0:7e:76:c2:19:c6:6a:fb:1a:08:2f:54:36:
b3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:2F:9E:BD:00:57:25:EA:85:E9:77:D6:F8:FD:20:F9:29:D7:D5:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/04c01a80-0c57-36f4-8a19-7370bb0db107.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.18.24.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:11:b7:1a:96:5e:b1:13:d4:d3:c5:82:ce:7b:6f:24:7c:67:
3c:bb:22:b7:3d:f1:bf:8c:89:f1:34:6e:7c:c6:d8:a8:a8:49:
29:5f:31:95:ce:79:ed:8a:c5:fb:1e:c1:ee:2e:f1:c7:b7:3b:
d1:d4:87:28:b0:1c:e7:ff:cc:e6:ed:f2:51:b2:3e:40:3c:64:
d9:c8:22:d3:db:a1:3c:b1:7b:78:8f:08:e7:34:c8:72:ea:b7:
60:70:ed:de:a8:47:38:34:26:c0:67:fa:34:28:ac:ab:92:7e:
cb:03:4b:84:4d:55:33:1a:0d:ed:50:b2:bd:b1:a1:5d:2a:be:
3e:16:56:39:83:e8:6b:f8:82:10:39:52:2a:f2:1a:0d:53:dd:
5e:3a:85:09:df:2a:33:b0:8a:56:7a:39:a2:50:92:5b:90:ea:
6f:0b:6e:61:45:c7:93:31:0b:7d:66:e3:f2:ea:a3:ab:0d:ff:
8e:d3:64:de:31:31:7a:09:f5:e4:ac:5f:f0:1e:45:62:07:cb:
d9:62:a6:19:cc:12:80:e9:1b:0f:3a:72:71:3a:c4:fb:b1:b8:
bc:03:55:bc:3e:d5:b9:ac:15:a0:a4:fa:90:bf:2b:99:98:aa:
bd:29:5b:5f:4f:a0:35:ea:d4:6f:c1:26:44:4e:e1:d2:3e:af:
ec:50:9b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:58:57 2025 by rpki-client