Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1e1857bf-d82a-3f9d-aac2-81e6f473db77.roa
File: 1e1857bf-d82a-3f9d-aac2-81e6f473db77.roa (raw, json)
Hash identifier: W4UeRiX7++g92Z9ICIPqIlWclYyoqnaHMK0uS3AjVnw=
Subject key identifier: 2A:5A:7A:B2:A0:19:3A:C8:AA:16:78:11:CF:5A:6E:CD:D8:32:B8:7C
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E40BA8C9F43AB470DF5C2EDAE
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1e1857bf-d82a-3f9d-aac2-81e6f473db77.roa
Signing time: Wed 15 Jun 2022 12:00:00 +0000
ROA not before: Wed 15 Jun 2022 12:00:00 +0000
ROA not after: Thu 21 Jul 2022 04:00:00 +0000
asID: 8987
IP address blocks: 136.18.24.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:40:ba:8c:9f:43:ab:47:0d:f5:c2:ed:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jun 15 12:00:00 2022 GMT
Not After : Jul 21 04:00:00 2022 GMT
Subject: CN=058c9f42-5d17-451c-8120-649e8cc95137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ba:62:c5:1c:21:84:d6:af:0b:ea:da:93:d6:
27:e7:75:74:12:fb:47:7b:7f:02:d8:86:ed:e3:df:
c7:af:dd:7e:c1:05:50:31:ad:f4:a7:fa:2c:48:55:
b1:b8:0e:3b:2e:85:53:c2:8a:ad:85:3f:2e:6f:33:
ff:b9:e7:d5:e1:fe:ac:78:f1:e8:35:ee:32:60:84:
a8:57:38:17:33:bd:73:5e:93:e2:61:6b:9e:58:34:
60:ff:55:42:72:4a:44:a7:18:1a:df:2c:e3:be:d1:
02:73:c4:c8:e9:b7:8e:13:38:a0:3c:12:70:39:cb:
0e:77:11:fb:a7:f5:b3:2e:8a:81:bf:66:09:34:1a:
cd:b2:b1:40:1c:14:d9:48:9a:74:72:17:29:7f:14:
1b:1c:d5:3e:32:c6:f2:87:f0:d7:a9:81:6f:e0:8a:
c1:b0:7c:7f:2a:17:50:f5:44:13:55:67:62:1e:50:
16:69:2e:17:7a:59:33:7c:cf:a8:88:ff:cf:2b:6a:
81:0e:f9:e0:f2:b9:93:b0:6d:c0:f5:1d:08:37:c7:
7c:07:8b:96:d9:01:19:5d:9f:c9:50:db:51:b6:08:
9d:d6:f1:79:7d:cb:0b:96:79:ff:da:cf:af:c3:75:
7c:ce:73:bb:e4:cf:98:b3:59:39:99:8c:03:d8:da:
e6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:5A:7A:B2:A0:19:3A:C8:AA:16:78:11:CF:5A:6E:CD:D8:32:B8:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1e1857bf-d82a-3f9d-aac2-81e6f473db77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.18.24.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:dc:4c:00:d3:11:42:49:b4:f3:ae:2e:18:1a:c6:fd:c4:f6:
9e:44:90:8f:c0:0f:0a:12:87:48:4e:1d:c1:b5:e8:58:a2:ca:
cf:3f:15:6a:2c:bc:a3:b8:2c:75:4d:1c:81:34:3c:1e:6b:67:
0c:4f:5f:d6:6e:61:d5:e4:25:1d:cd:08:e5:3b:ea:04:96:13:
00:f7:76:f0:f9:74:f8:98:bb:ce:7e:71:e3:b8:c6:f1:0a:bd:
8f:31:63:37:39:49:52:93:e7:5c:f7:f5:f7:b2:3f:e5:0b:ed:
65:41:9a:2d:42:76:0b:b6:bc:5f:2c:f0:e1:d9:a6:d9:3f:fc:
e1:37:ea:a8:ae:be:38:cb:4a:c6:58:ea:9a:82:3a:e7:fc:18:
c9:d1:bf:6b:c3:ed:89:08:20:67:8e:d2:ee:b3:03:89:99:39:
b0:c9:db:c7:d9:ed:2d:e9:94:5e:ee:74:70:25:18:ec:b7:f5:
40:01:bc:7a:21:d0:e0:34:43:5f:88:64:d5:b0:3f:ea:77:4a:
f8:e2:99:81:ab:75:1a:57:f9:85:a6:69:ca:95:39:73:49:4d:
8e:c4:f6:1e:20:4e:63:39:8e:95:e3:0c:3b:59:a2:8d:e1:46:
8e:b9:df:db:07:30:93:23:f9:25:2d:ce:99:d4:ca:80:1c:6f:
95:76:91:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:13:07 2025 by rpki-client