Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/16265160-d6d1-3214-ae71-3d50e772acc8.roa
File: 16265160-d6d1-3214-ae71-3d50e772acc8.roa (raw, json)
Hash identifier: RSGDFfmqQSFfxRub+pkd5YWc6zwBqZg6aSyiv80JT80=
Subject key identifier: 38:5F:A3:E6:2F:3A:65:E0:AB:E4:23:96:5A:9E:A1:BA:D5:8E:A9:8D
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583EB5FB0F96027976226961E600
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/16265160-d6d1-3214-ae71-3d50e772acc8.roa
Signing time: Wed 27 Jul 2022 12:00:00 +0000
ROA not before: Wed 27 Jul 2022 12:00:00 +0000
ROA not after: Thu 01 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 136.18.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:b5:fb:0f:96:02:79:76:22:69:61:e6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 27 12:00:00 2022 GMT
Not After : Sep 1 04:00:00 2022 GMT
Subject: CN=2e1f397d-3a98-462a-902e-70ddda95acb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:41:ec:a3:27:21:34:8b:67:17:01:b7:26:a6:
45:19:09:3a:42:83:70:45:64:95:36:eb:f2:94:bb:
f1:be:1d:5d:e8:dd:08:27:da:e6:89:4d:9f:2d:36:
e2:0b:72:92:01:12:a4:b2:cf:83:79:e0:90:1a:84:
bf:19:d8:8a:98:4a:4a:38:1f:d1:90:54:04:06:d7:
0d:b2:89:8f:81:00:1f:f3:05:0e:55:4a:5b:66:24:
35:c5:08:90:2b:c9:87:60:58:aa:91:b2:31:6a:98:
98:16:75:43:08:91:dd:7f:65:c1:87:c0:d8:40:07:
08:47:7b:f2:ff:5c:0d:2f:8d:66:a0:96:92:cf:92:
fe:ec:d6:f0:5b:f7:69:2a:ef:e2:8c:48:5a:9f:a5:
fa:0b:0a:c0:51:41:43:7f:6e:88:33:20:ef:17:82:
11:ae:dc:d7:11:54:2f:cb:1b:9f:eb:ce:cb:15:0b:
aa:2d:60:3e:46:88:29:eb:05:31:f6:a0:3f:c4:18:
97:ff:17:65:6e:18:d4:46:d7:b0:29:25:90:8f:24:
79:1b:e3:76:7a:12:38:84:0f:c8:73:f3:fe:af:e8:
83:68:b9:05:da:10:21:06:51:b6:14:9f:c6:f4:74:
17:87:fc:4d:27:ab:3b:05:72:61:86:52:11:e5:d3:
b0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:5F:A3:E6:2F:3A:65:E0:AB:E4:23:96:5A:9E:A1:BA:D5:8E:A9:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/16265160-d6d1-3214-ae71-3d50e772acc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.18.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:2d:ef:c4:f7:45:30:fa:19:b8:d5:44:34:7c:ed:20:e6:5b:
15:6f:96:85:62:46:33:59:5c:c1:65:2d:41:bb:86:ae:60:eb:
3d:45:bc:40:df:1a:78:09:78:1b:a4:3b:bf:a8:2f:da:ca:01:
f8:b6:52:20:36:3b:49:86:08:63:6c:09:5d:59:3b:c0:90:23:
2f:e2:4e:22:e0:be:75:d8:fb:a7:1a:e4:78:84:30:3c:ca:a4:
18:28:6d:4e:3a:71:5f:a3:94:19:01:37:ed:0f:16:44:f2:72:
11:a7:e8:fe:23:69:c0:2d:6c:40:cd:29:b2:48:3b:38:1d:3a:
af:0d:e7:d3:21:60:c3:f9:d7:69:72:b4:d8:68:fc:1c:72:1b:
80:55:b4:8c:4e:9e:54:47:56:aa:76:ac:1e:e3:8c:2d:57:12:
95:1c:4d:31:47:6e:90:8c:b9:7b:9f:53:be:a7:21:3d:a9:1b:
24:3e:42:2a:d4:9d:bb:5e:09:fc:ec:4f:65:e4:13:a0:28:6f:
52:41:9f:51:73:a5:95:81:ab:9f:0f:5b:e2:71:d4:a9:85:01:
5f:22:22:a9:bd:b8:32:88:14:65:97:bf:9d:03:de:e8:d7:40:
0d:22:4b:0f:e6:dd:2f:c2:d9:41:0e:02:3f:5b:2f:a0:4f:8c:
06:73:49:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:30:32 2025 by rpki-client