Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/22dc89d7-27df-3c16-b2d5-4b83f71be4cb.roa
File: 22dc89d7-27df-3c16-b2d5-4b83f71be4cb.roa (raw, json)
Hash identifier: PWrx9MkaHQ4aZhlNvCvJIHRR6rRyNQJbaXCEscPRJIQ=
Subject key identifier: 2C:47:E6:6C:2F:9C:22:54:3A:C7:9F:D3:D4:22:9F:A6:C2:6A:76:38
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D2EFE0EC93B6DD47602123300
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/22dc89d7-27df-3c16-b2d5-4b83f71be4cb.roa
Signing time: Wed 09 Mar 2022 05:00:00 +0000
ROA not before: Wed 09 Mar 2022 05:00:00 +0000
ROA not after: Wed 13 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 136.8.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:2e:fe:0e:c9:3b:6d:d4:76:02:12:33:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 9 05:00:00 2022 GMT
Not After : Apr 13 04:00:00 2022 GMT
Subject: CN=91e06bd9-e998-45ed-bacd-521e64372270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5f:f9:38:c0:78:db:c3:f9:aa:4f:70:38:3a:
7e:b2:46:20:66:f3:2a:f1:b4:b4:14:7b:9d:ab:ed:
da:13:d9:22:84:a6:34:f3:ae:ae:cd:13:8d:d5:84:
57:f5:28:4b:d2:99:d4:28:f0:22:22:8b:77:bb:b2:
9a:08:49:ae:d1:34:5e:ee:a3:dc:ff:93:4a:db:c8:
9a:cd:60:9f:5e:e7:c6:79:e2:f4:4e:9c:c3:f9:46:
c5:cd:94:91:af:d7:c7:34:c1:03:d7:f1:99:3d:77:
fa:1a:64:1e:0e:84:db:3e:0b:dc:a7:c1:52:85:2f:
7f:59:86:5e:53:55:65:86:24:d1:1f:33:8d:a3:b1:
e9:45:a6:39:2c:24:65:d4:62:9e:00:dd:09:c2:cb:
65:63:5b:49:c5:7d:c9:39:d3:c9:c4:5d:7a:5a:77:
ab:16:44:9c:8a:ed:ff:6f:79:50:bc:ca:a5:63:90:
08:6f:00:98:82:73:23:c7:c6:38:7d:45:09:12:d0:
b4:16:5a:63:ac:f6:29:9d:ec:25:fc:91:e3:b9:06:
25:ec:4a:6f:fb:2b:be:fb:91:c7:2d:b4:d7:de:91:
27:53:74:e9:57:1c:7c:46:1c:89:7a:ca:79:7f:08:
f7:35:60:5a:a6:99:af:4a:94:7f:ae:9c:2e:66:b4:
ba:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:47:E6:6C:2F:9C:22:54:3A:C7:9F:D3:D4:22:9F:A6:C2:6A:76:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/22dc89d7-27df-3c16-b2d5-4b83f71be4cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.8.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:9f:9a:36:9d:44:50:f3:64:b9:22:f4:23:c3:6d:bd:fe:28:
85:af:92:eb:72:c7:2f:69:2e:7d:d1:84:42:f8:b2:5d:ce:5e:
5c:8a:d5:d8:72:94:2b:e7:f2:1d:da:66:46:ef:cb:c7:35:95:
e8:78:ef:18:7a:b6:3c:c7:15:27:4b:ae:0e:aa:ae:ec:f7:93:
87:a0:96:f8:80:54:08:6c:fb:0d:72:2c:fb:2f:a5:d8:3e:9e:
27:2b:cf:55:35:9a:b9:87:bf:ef:54:2d:18:14:93:c4:cf:74:
3e:32:40:9e:56:6b:03:5f:21:81:62:0e:f8:2d:15:99:69:ac:
78:a8:ff:76:55:11:fb:19:f5:ef:59:51:c7:ce:a7:85:62:ca:
67:90:18:3a:6e:ad:9b:b7:ee:01:e9:09:59:e5:1a:6c:c9:a7:
cc:be:95:f2:7f:86:7a:9b:c5:17:64:6a:5c:58:d6:d0:17:18:
68:9e:d2:11:13:d5:3b:d2:e3:f8:3f:71:76:cb:56:ca:3e:6b:
34:24:29:55:68:ab:1c:f8:ca:de:d8:75:f6:3d:ad:33:0f:33:
f5:e2:73:f8:80:b9:ba:2f:2b:d6:f1:48:c1:d7:b5:c2:47:e3:
74:0a:9d:b3:49:3f:e7:94:e5:4b:47:d2:e3:dd:0e:cf:e7:e7:
31:d8:76:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:04:03 2025 by rpki-client