Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/14c8912f-2c2a-301c-871d-b5422301f47c.roa
File: 14c8912f-2c2a-301c-871d-b5422301f47c.roa (raw, json)
Hash identifier: pGpQVXiKwJ2WJi3XqDLsRv/Zx1ruxoeETwPUS9+oz6s=
Subject key identifier: 2F:8A:FB:4B:D7:17:97:6B:4C:75:2E:06:DF:AF:A1:7B:EE:A6:55:C8
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CE0CBAADACA047558F3B3D000
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/14c8912f-2c2a-301c-871d-b5422301f47c.roa
Signing time: Wed 09 Feb 2022 05:00:00 +0000
ROA not before: Wed 09 Feb 2022 05:00:00 +0000
ROA not after: Wed 16 Mar 2022 04:00:00 +0000
asID: 8987
IP address blocks: 136.18.18.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e0:cb:aa:da:ca:04:75:58:f3:b3:d0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 9 05:00:00 2022 GMT
Not After : Mar 16 04:00:00 2022 GMT
Subject: CN=ba945bb1-a08c-4489-be9b-2e23ea85d0d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7f:8c:bc:df:31:0f:d8:11:be:ea:e3:30:39:
ae:bb:8a:ee:e5:35:01:17:f6:ee:5d:8e:9f:95:88:
e5:50:5c:2f:de:54:80:9b:ce:a2:e4:2c:13:ff:92:
79:8e:8d:8c:23:63:b2:1b:fd:ef:af:27:47:f8:ba:
1c:8a:9e:b2:34:24:b5:dc:d8:7d:72:e4:de:2b:80:
ca:15:ad:7a:3f:3f:ae:6e:ff:f4:11:12:0e:44:50:
14:fa:72:36:c3:63:17:5e:7d:d9:2b:8d:da:14:82:
09:dc:55:48:cc:7b:90:19:ff:9c:01:22:92:02:37:
82:43:5c:50:da:6d:b6:c9:c0:9a:fc:11:4a:63:12:
50:3a:41:49:de:43:e4:a8:09:5b:82:2c:57:8f:87:
ed:45:04:77:5a:7b:1e:2a:07:de:c0:cf:97:5b:66:
cb:f6:5c:b5:17:67:b6:a7:e3:46:b5:a5:cf:30:35:
51:a7:ed:fa:11:ad:51:c0:34:2d:77:78:99:ea:22:
6d:8d:19:64:80:57:4c:6a:fd:21:7b:c4:af:2f:4f:
62:78:12:14:dc:00:fe:39:22:f5:f4:de:0b:7b:01:
21:68:69:43:99:48:05:68:92:82:5b:64:f5:90:4e:
86:aa:48:ad:bd:4d:f1:d0:5a:0a:0c:b1:1e:01:33:
f5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:8A:FB:4B:D7:17:97:6B:4C:75:2E:06:DF:AF:A1:7B:EE:A6:55:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/14c8912f-2c2a-301c-871d-b5422301f47c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.18.18.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:50:f9:e9:8b:ed:55:2d:9d:81:60:cc:ff:6c:31:fb:d6:01:
d0:ce:c5:9c:7d:e8:08:e2:c9:2b:0e:ad:b1:63:bf:e3:a1:8d:
97:b9:28:62:bb:e3:87:03:72:d0:d1:64:b5:07:e5:8b:ec:9b:
52:c7:62:d1:2d:da:5e:74:4b:ed:a7:25:78:de:1d:4f:e2:f8:
d2:a7:31:3c:a4:6e:bc:30:83:9e:1b:eb:c0:7d:0f:b9:e5:f7:
88:21:bc:94:20:e4:37:13:1d:69:87:98:d3:18:42:4b:15:6a:
46:96:ca:ac:0f:02:a2:3f:02:75:b7:bb:33:dc:ed:1b:77:a4:
10:35:54:13:45:95:f1:f2:dd:4d:12:cc:89:c4:1b:05:6a:9a:
94:eb:aa:b6:df:cf:aa:02:db:9c:5b:23:68:bc:25:3b:1b:e5:
88:22:e2:1a:7f:c1:e1:ef:ab:37:9f:13:b5:40:9d:e3:c1:ce:
21:45:01:ad:f6:2f:41:24:9c:35:3d:a8:e3:ae:08:a0:85:10:
56:3e:c9:45:8f:43:75:97:df:50:65:79:67:47:93:86:c8:b3:
71:51:17:4b:b5:ff:45:30:6d:ab:a1:76:cf:65:eb:76:ce:ea:
b5:1d:88:be:31:de:14:cf:90:86:3d:6a:2f:f4:a7:a9:fe:0c:
fa:33:00:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 21:52:39 2025 by rpki-client