Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0eac0fc5-12dd-3410-88c7-77355ed3cffd.roa
File: 0eac0fc5-12dd-3410-88c7-77355ed3cffd.roa (raw, json)
Hash identifier: g/Z0uF37UdjGrrMpwxQa39PKr9xaJ44V20p9qgnCY9c=
Subject key identifier: F9:95:31:13:E9:CF:78:DE:52:D6:7C:48:B9:90:86:01:5E:25:EC:2E
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DA4556E70B1E6717B89AA5E08
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0eac0fc5-12dd-3410-88c7-77355ed3cffd.roa
Signing time: Wed 20 Apr 2022 12:00:00 +0000
ROA not before: Wed 20 Apr 2022 12:00:00 +0000
ROA not after: Thu 26 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 136.2.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:a4:55:6e:70:b1:e6:71:7b:89:aa:5e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 20 12:00:00 2022 GMT
Not After : May 26 04:00:00 2022 GMT
Subject: CN=4bce17a1-220e-48fe-a58a-85345643a484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c8:79:68:54:4a:3c:95:97:e1:fd:28:6e:75:
bc:b4:b7:ae:6b:b0:39:ec:d3:c9:87:47:c1:80:db:
e9:3a:ce:89:4b:2f:89:12:6d:62:f5:ff:a2:54:f3:
f2:10:bd:da:6b:96:13:06:3b:68:ae:0e:50:74:39:
22:1a:76:5f:10:e3:00:e1:90:4f:13:0b:80:7e:34:
ca:af:68:64:31:05:9d:df:3c:b0:df:84:78:a3:0c:
ef:90:bb:6a:20:c7:67:ea:0d:32:78:fc:ee:36:37:
93:5a:9b:2e:f0:ee:b0:fa:39:25:26:39:a5:42:f6:
e9:06:86:77:6c:9f:fa:1f:04:3e:e8:af:79:c2:b5:
54:58:86:f4:97:67:69:6b:49:ea:9e:64:44:f2:f3:
74:b8:26:70:38:c1:c8:54:91:67:25:f1:f5:95:2c:
5c:38:77:72:c2:f1:d1:93:06:66:1c:56:e8:40:f3:
2c:86:29:f2:19:02:3a:4d:dc:78:22:57:92:29:52:
78:5f:1c:b2:49:a1:62:53:24:5b:2c:d8:45:3f:12:
c4:e7:42:43:51:42:df:1c:09:20:33:95:0b:9c:02:
54:f7:e3:e2:5a:bf:a7:ab:71:15:48:50:bf:df:0f:
d0:48:02:68:2b:9a:cd:5a:62:d9:87:99:07:82:43:
22:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:95:31:13:E9:CF:78:DE:52:D6:7C:48:B9:90:86:01:5E:25:EC:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0eac0fc5-12dd-3410-88c7-77355ed3cffd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.2.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:60:cb:78:60:41:86:a8:02:3a:aa:fd:8b:6a:6a:be:8d:e8:
59:4a:29:9a:0b:59:d7:57:5c:66:a0:14:fb:ec:a9:03:64:6e:
62:42:7b:af:0b:28:58:17:b5:38:cc:70:97:a4:09:fd:56:3c:
36:aa:be:50:69:40:af:66:55:a7:85:da:7d:6c:7e:75:47:bd:
88:a1:0a:bc:00:e4:cf:09:61:eb:ab:41:23:54:5b:cb:79:3a:
07:ce:e0:fc:e0:1f:5b:10:6d:f8:e4:90:aa:40:95:82:bd:2e:
b8:82:dd:87:c2:3d:80:79:b1:ac:d8:ce:8b:e4:f3:78:db:bd:
35:d6:fe:33:f2:47:e7:86:b9:df:e1:0d:d6:3f:af:53:ca:96:
0f:00:73:20:dd:ac:43:7e:5f:94:4f:97:89:38:47:2b:9d:51:
87:23:67:7d:6f:8a:e8:42:8d:88:36:c5:2e:8c:51:ce:c0:85:
c2:8e:0d:de:a6:93:31:57:da:16:c9:8a:4b:34:f0:84:50:77:
81:4e:00:a6:ec:3f:24:0e:4e:27:ec:0d:59:b7:c6:b9:3d:e7:
80:ea:89:4a:de:40:67:ac:e4:2d:c8:41:87:6f:14:61:9f:2b:
bd:52:cb:af:01:d8:cc:10:2e:90:f9:75:e5:62:0b:9a:3f:84:
9e:ac:36:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:38:09 2025 by rpki-client