Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2736a2fb-9be9-383d-baa0-63e04e4c1934.roa
File: 2736a2fb-9be9-383d-baa0-63e04e4c1934.roa (raw, json)
Hash identifier: YCkbAZXZkPjfWFfzI3HQqhhdnGceqffigjjq+voxpTQ=
Subject key identifier: FA:53:BE:C2:DA:65:C7:57:A9:AC:C2:B4:C3:99:90:C0:0D:68:AB:D5
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E409CC8EC6DF1FC735FF4ED00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2736a2fb-9be9-383d-baa0-63e04e4c1934.roa
Signing time: Tue 14 Jun 2022 12:00:00 +0000
ROA not before: Tue 14 Jun 2022 12:00:00 +0000
ROA not after: Wed 20 Jul 2022 04:00:00 +0000
asID: 16509
IP address blocks: 136.18.0.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:40:9c:c8:ec:6d:f1:fc:73:5f:f4:ed:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jun 14 12:00:00 2022 GMT
Not After : Jul 20 04:00:00 2022 GMT
Subject: CN=60657506-f85e-464d-9427-62082892b637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:14:df:a6:f3:9e:8d:b0:93:be:9f:bd:ea:ee:
60:d1:ea:09:bc:8f:ad:7a:89:80:3a:2f:0c:e7:ee:
e2:81:36:cb:88:49:3d:90:a6:38:6c:49:36:51:50:
81:1e:04:4c:87:42:ed:3d:03:58:03:2a:78:84:c6:
26:33:b5:2d:4c:36:13:43:a1:99:9f:d8:80:1e:5f:
6b:e4:35:28:70:e5:6e:6f:5a:5a:e8:ef:8e:f9:fc:
1a:1f:3d:a9:00:3b:76:f6:74:a1:33:3d:cc:21:74:
7f:96:8b:94:0a:71:58:d3:67:47:08:f0:6b:bf:7b:
46:1b:e8:e7:ed:7a:24:a8:7d:39:05:0e:28:24:62:
b5:b5:48:2f:56:eb:8f:65:5f:e1:a0:4f:35:d4:9f:
fa:91:bc:12:cc:ad:7d:ef:3a:15:10:2e:16:2b:b6:
a9:ef:2f:b8:ce:29:eb:24:aa:66:0c:7a:81:33:a6:
fd:80:27:6f:6b:8a:91:d3:49:7f:2e:da:e5:f0:fe:
d2:a2:a2:3c:83:b2:44:f3:fa:fc:c7:e3:77:98:0b:
8d:ef:2f:fa:c4:ae:44:14:4a:0c:20:82:aa:79:c2:
aa:84:37:af:c8:e6:75:ff:34:04:14:bf:63:0c:0f:
15:59:9b:8c:7d:a6:0a:d1:43:89:6a:71:23:c7:93:
f2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:53:BE:C2:DA:65:C7:57:A9:AC:C2:B4:C3:99:90:C0:0D:68:AB:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2736a2fb-9be9-383d-baa0-63e04e4c1934.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.18.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:e0:28:25:a3:a0:c1:7e:5f:9e:3b:07:09:c9:1a:6f:3e:ac:
6f:c2:54:e6:63:c3:46:4a:8a:3e:e9:ab:74:df:20:ff:8e:4f:
64:1f:aa:be:d7:5f:be:99:c6:bd:f2:96:20:14:4b:cd:f1:61:
a4:e2:3e:67:94:29:b0:33:29:88:b2:2e:62:5c:3d:be:4f:6b:
a6:b5:a8:3a:fd:91:85:6a:1b:f8:90:ab:4a:1c:97:86:50:5a:
87:18:21:d4:cf:19:13:d4:61:05:90:00:66:40:31:ca:15:35:
18:66:39:9f:a8:32:b2:0c:16:76:24:9d:54:42:08:9b:3d:a0:
90:2c:42:82:6a:02:37:87:33:3f:2a:13:d4:94:ae:d0:be:43:
55:24:76:52:5c:e2:c7:7b:92:46:fe:a8:4b:40:93:56:4f:b1:
b2:0a:76:49:6b:db:be:e8:5b:37:4f:4a:e1:63:75:8d:60:96:
d7:c8:a9:89:32:c4:e6:b5:f0:44:f0:74:95:f2:d7:dd:83:1b:
fd:2f:73:42:d9:99:ab:9b:ab:af:82:af:90:31:5b:8a:be:4c:
af:82:6f:81:ae:72:b5:81:4c:e8:57:a6:73:a9:79:fd:ea:c0:
18:94:01:57:21:6b:a5:85:6c:bf:c9:5a:14:39:2f:04:fb:29:
bf:8e:43:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:55:01 2025 by rpki-client