Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/23ae3708-1faa-3811-8b64-9f763ff5bfe1.roa
File: 23ae3708-1faa-3811-8b64-9f763ff5bfe1.roa (raw, json)
Hash identifier: oY8kswa2NJ9JKZiQ5yxiAAag88ZNAXlJ3QLHA6mC9ws=
Subject key identifier: B8:4D:CB:AA:FC:10:B9:BA:D4:95:3F:E0:58:E2:C4:73:C5:85:EE:8A
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583C6B659054027B8E702BD8D700
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/23ae3708-1faa-3811-8b64-9f763ff5bfe1.roa
Signing time: Wed 29 Dec 2021 05:00:00 +0000
ROA not before: Wed 29 Dec 2021 05:00:00 +0000
ROA not after: Wed 02 Feb 2022 05:00:00 +0000
asID: 16509
IP address blocks: 136.18.56.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:6b:65:90:54:02:7b:8e:70:2b:d8:d7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 29 05:00:00 2021 GMT
Not After : Feb 2 05:00:00 2022 GMT
Subject: CN=2af1212a-91dc-4ef6-9b15-d25e3299e070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a8:10:a7:15:65:3d:03:a8:bd:84:b9:cb:3d:
a1:12:d6:0c:a4:1b:64:b0:43:02:c8:cb:42:be:ec:
69:b5:42:0a:62:1b:b5:16:7b:57:0a:9a:01:68:97:
ec:b0:11:e5:f4:02:33:72:dc:1a:f1:f0:57:59:0c:
2e:0a:a5:5e:b6:87:79:46:db:77:22:5c:02:93:00:
bb:fa:87:3d:31:37:aa:d5:82:d5:f7:50:25:d4:98:
02:9d:67:89:39:70:7e:47:1c:f3:74:c8:9e:5c:dd:
f5:65:37:4e:20:fb:40:8f:c4:b0:92:42:32:ff:d0:
bf:2e:07:ce:1e:88:5c:86:b8:f5:75:6c:84:92:19:
49:48:f2:03:51:f9:59:2d:24:b8:eb:d4:2a:df:bd:
39:58:cd:ba:39:6a:a6:e5:96:a5:88:f2:8d:8c:34:
c9:2e:5a:8d:06:e7:60:98:7b:33:f0:0b:df:8b:67:
82:fd:c8:c7:a7:d8:55:76:03:3a:cf:21:6c:48:8c:
86:89:d9:99:92:8c:3f:bb:c1:88:fe:b6:49:73:59:
74:57:b9:d9:7c:39:81:62:5b:96:bc:ae:8e:22:65:
52:e4:bc:81:4f:cb:93:30:78:ec:fd:d3:fe:34:ac:
f9:11:e1:c7:fe:53:4e:45:ed:77:73:81:48:6c:97:
c0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:4D:CB:AA:FC:10:B9:BA:D4:95:3F:E0:58:E2:C4:73:C5:85:EE:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/23ae3708-1faa-3811-8b64-9f763ff5bfe1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.18.56.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:80:57:20:50:99:7e:03:3d:5f:0e:79:18:50:11:b4:59:ba:
bd:64:16:a8:15:ba:2d:4d:b7:6f:cb:ca:fe:07:8c:39:f5:ea:
41:7a:4c:2c:45:f7:bc:ce:d0:be:f9:87:d9:05:55:fa:70:57:
dc:d6:24:42:47:43:47:72:d2:a1:ea:f3:41:1f:53:85:71:6e:
cd:be:a0:67:dd:02:41:49:fc:10:05:00:9a:07:82:df:2b:ed:
eb:1a:d2:a0:92:e0:4f:ef:46:9f:9b:51:36:eb:8e:4c:e5:34:
5d:f1:e9:78:ae:fa:4d:21:b7:49:40:e5:53:a3:0a:19:2d:6a:
d0:f6:6c:36:e7:e9:fb:0f:9d:b8:fc:db:03:47:25:b4:d6:cc:
7c:19:b6:ac:d4:97:a4:07:81:0b:1c:e7:04:13:5c:76:0d:ec:
56:02:2a:5b:f8:95:d3:9b:b4:7d:95:8e:8c:bc:6e:4f:0c:9c:
9f:fc:94:11:6b:46:13:dc:70:f2:b8:3e:5d:57:1e:72:6f:d5:
b7:ac:c5:89:77:00:10:7f:60:1f:3f:5f:92:34:3f:ff:78:90:
4e:96:d6:79:31:e3:67:7c:97:24:2e:29:35:40:ca:7d:7c:89:
0b:f8:19:66:37:b0:a2:52:59:e7:ea:66:9b:14:c0:f0:28:7d:
f3:c9:c6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:10:54 2025 by rpki-client