Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1fabb704-bfd6-3be8-b259-54f6fafe0346.roa
File: 1fabb704-bfd6-3be8-b259-54f6fafe0346.roa (raw, json)
Hash identifier: a4kkTyHijn6/Cl5EMZNNZNia5w80YD5V2xazqgHS/zw=
Subject key identifier: 9B:E6:6E:9A:6B:23:90:76:A4:6F:61:11:21:B0:58:97:D2:9A:2B:ED
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DCB725C6225187A7E4AE86900
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1fabb704-bfd6-3be8-b259-54f6fafe0346.roa
Signing time: Wed 04 May 2022 12:00:00 +0000
ROA not before: Wed 04 May 2022 12:00:00 +0000
ROA not after: Thu 09 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 136.2.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:cb:72:5c:62:25:18:7a:7e:4a:e8:69:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 4 12:00:00 2022 GMT
Not After : Jun 9 04:00:00 2022 GMT
Subject: CN=2afd29b2-1fba-4585-8cdb-acc7b83c57e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:5f:df:da:60:7e:86:7e:ef:84:bd:de:31:f2:
56:5a:d3:0e:57:aa:66:b2:10:93:fe:3f:53:94:b6:
f0:bb:18:21:ff:7b:42:b6:c8:db:8b:50:19:bd:e8:
44:e5:f0:85:d0:e1:12:f9:f9:9b:e1:52:cd:77:2b:
05:19:81:bb:b6:eb:92:75:99:7b:35:d4:8d:18:55:
e1:42:ce:93:02:5a:d4:a6:66:9b:b4:01:38:d3:d8:
c2:af:30:1c:d0:95:8c:56:c2:15:16:12:26:b7:db:
30:2b:bd:de:8b:d7:0e:55:9c:b2:0d:7d:d3:5b:e3:
2f:0a:d9:71:c5:01:67:de:48:d4:ef:07:20:f2:e1:
c9:20:37:8f:e8:a6:95:4a:95:69:85:d2:ad:9f:ca:
16:ea:8e:34:23:b2:c0:29:f6:8a:9e:f1:c0:a5:28:
bc:27:f8:9c:ca:9f:47:6b:64:30:ab:e9:98:92:57:
6c:cf:1b:fd:31:2f:6c:b1:0a:56:ae:a5:58:bf:83:
73:c5:06:53:4d:59:15:7f:4c:97:e2:37:76:af:19:
4a:9d:39:83:61:62:2f:bf:12:03:a5:ca:e0:e1:c3:
86:42:04:44:fb:db:72:72:8e:1d:7f:7e:70:52:14:
6e:91:b4:2f:6c:fa:1a:28:e4:0c:1b:98:1e:88:bf:
9c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E6:6E:9A:6B:23:90:76:A4:6F:61:11:21:B0:58:97:D2:9A:2B:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1fabb704-bfd6-3be8-b259-54f6fafe0346.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.2.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:51:ae:1a:bd:20:a6:6f:6a:8a:2b:39:67:24:2c:81:97:55:
81:b9:26:95:47:42:1f:9e:27:ec:fd:2c:05:ac:07:c8:94:96:
2a:3e:d1:f0:a4:14:aa:8d:f5:32:97:00:69:81:f4:2e:95:ef:
a7:ee:b7:e3:53:7e:57:e5:a8:54:20:6d:bd:83:38:53:27:31:
49:8e:b4:5c:21:d8:dc:2e:c1:b8:e9:1a:15:eb:7f:70:ec:d9:
25:05:41:39:b8:1d:48:c9:25:e0:10:da:cd:ef:c1:7a:6d:a4:
b2:95:3c:09:21:0d:e6:0f:11:40:85:a7:27:6f:f6:1c:6c:8e:
9e:b1:81:ac:7f:70:6e:56:cd:2e:c8:16:66:cc:6e:1c:89:ac:
b4:12:d6:92:01:e3:28:8c:f1:71:7c:7a:91:b4:16:bd:a8:cd:
a7:67:05:f6:3a:69:3c:7d:eb:75:f4:3c:2b:5b:6b:38:f4:f4:
5c:93:93:ed:b1:f8:c3:1b:d2:eb:fe:4b:4e:8c:32:4a:cf:00:
b5:5c:83:96:f7:46:df:c4:fd:4a:12:67:f6:43:a0:b1:e9:56:
7b:1b:b3:cf:69:4b:ab:56:43:ad:05:d3:8f:22:b3:a0:dd:c7:
4e:46:19:40:0f:56:a2:af:19:04:92:8a:4f:6e:3c:86:0e:9a:
cf:6b:4e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:06:04 2025 by rpki-client