Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1badeee6-d81a-3b3e-b687-dc54af91a1c3.roa
File: 1badeee6-d81a-3b3e-b687-dc54af91a1c3.roa (raw, json)
Hash identifier: F8BRJsrB13Qt714jlE1HphHQsm4Dqig9v3x1i7Uoxmk=
Subject key identifier: 59:96:85:1B:1E:89:5A:66:A8:66:AC:B8:50:7C:BF:BD:F7:91:F6:D4
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D5613A27120EB5E5D67B0DE80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1badeee6-d81a-3b3e-b687-dc54af91a1c3.roa
Signing time: Wed 23 Mar 2022 04:00:00 +0000
ROA not before: Wed 23 Mar 2022 04:00:00 +0000
ROA not after: Wed 27 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 136.18.56.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:56:13:a2:71:20:eb:5e:5d:67:b0:de:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 23 04:00:00 2022 GMT
Not After : Apr 27 04:00:00 2022 GMT
Subject: CN=abcfe3a8-3c1d-4f48-a808-5fda2682a3a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ce:4c:f5:8c:cb:21:cc:12:d6:4b:53:bc:58:
46:e6:7c:66:04:e7:61:22:fe:c3:70:24:aa:29:8d:
92:7b:46:1c:34:33:fc:d7:f6:59:9c:2a:dd:09:d9:
7f:36:3d:2e:72:17:96:c3:69:a0:7d:6a:a9:8b:1e:
81:25:7a:c1:08:15:6c:ff:71:c3:39:b1:18:8c:c4:
c2:3e:c0:a2:a6:72:28:64:c5:91:d3:64:9c:d7:02:
d0:e0:e0:23:c6:0c:22:39:e7:31:22:69:69:1e:f1:
a8:ec:cd:6b:a2:1c:e3:94:b3:da:d4:92:e4:1c:97:
e0:62:32:51:70:09:b0:c9:08:bf:68:0a:bf:ca:8e:
7e:d6:fe:fe:dc:f9:c9:7d:db:83:af:8b:b1:db:e8:
74:26:9c:bb:b7:cd:fc:03:3c:8c:34:79:14:04:7e:
66:9a:43:87:94:e1:b0:15:23:de:b1:0f:41:1c:b3:
e1:9e:d9:1c:43:d2:c9:7a:f1:44:ca:33:ce:e4:21:
50:4b:35:f0:a5:16:ae:da:d1:6d:57:af:a5:73:e5:
5e:59:85:4e:f2:30:94:8f:db:7c:5e:8c:85:12:f1:
ca:32:08:ce:05:e3:2e:aa:fa:3d:08:d4:f9:25:59:
49:46:cb:66:79:ea:11:29:a3:bc:2c:83:a3:87:11:
fa:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:96:85:1B:1E:89:5A:66:A8:66:AC:B8:50:7C:BF:BD:F7:91:F6:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1badeee6-d81a-3b3e-b687-dc54af91a1c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.18.56.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:0f:75:db:6f:ce:52:b0:f9:e0:54:6e:31:2f:c6:5f:a1:db:
b1:0b:a7:5e:33:9e:e9:c3:13:c3:a9:6e:68:1e:2f:c7:73:c4:
13:6f:a9:d4:59:ca:ca:96:1d:6b:55:83:d8:2b:f5:86:c4:0e:
24:45:5d:5a:b9:e6:c9:de:7d:33:15:a1:27:66:21:6c:56:6c:
1e:e3:15:49:e6:2e:8c:6e:05:e0:98:09:12:52:42:82:c1:cc:
7c:88:4e:62:04:1c:69:95:2c:c2:f2:15:4a:3a:4c:1b:e6:d6:
3e:46:75:eb:fa:a9:b4:92:f3:a2:9c:c7:05:1a:cb:54:c2:f7:
c1:b6:35:dd:a8:d7:f1:57:be:ed:a3:e4:6f:4d:64:64:03:7a:
20:0f:97:13:25:d6:40:ae:12:22:78:20:9d:0e:b8:91:fa:6e:
b8:f9:7e:6a:1a:42:5c:4a:7a:75:aa:08:ab:76:80:27:35:ac:
94:fe:61:c5:db:73:4d:84:ca:6e:9c:0f:02:88:37:66:54:16:
b7:ac:dc:50:f2:35:15:98:11:b3:80:b6:62:8e:2a:38:e8:70:
52:b5:6a:1f:a3:10:4a:41:ac:e4:f0:bd:56:ab:3b:12:ee:92:
88:ea:47:79:11:41:b9:35:0d:d2:fc:b4:9c:22:f5:e7:ef:93:
df:21:de:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:15:02 2025 by rpki-client