Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/292138d1-6676-32ed-8eff-f0c4cd604232.roa
File: 292138d1-6676-32ed-8eff-f0c4cd604232.roa (raw, json)
Hash identifier: YifUxnkexAb3EWpntgR2d8LrfOZP2b9URGyRSsQ3CLo=
Subject key identifier: 5D:0F:8B:52:0A:C6:75:77:4F:50:A5:25:77:BC:5D:14:95:EA:AC:61
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CE0CB972D94903ECC1DD2F600
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/292138d1-6676-32ed-8eff-f0c4cd604232.roa
Signing time: Wed 09 Feb 2022 05:00:00 +0000
ROA not before: Wed 09 Feb 2022 05:00:00 +0000
ROA not after: Wed 16 Mar 2022 04:00:00 +0000
asID: 8987
IP address blocks: 136.17.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e0:cb:97:2d:94:90:3e:cc:1d:d2:f6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 9 05:00:00 2022 GMT
Not After : Mar 16 04:00:00 2022 GMT
Subject: CN=29399559-28e2-440e-a72f-252cda3a005a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8a:e7:82:73:16:85:92:91:9b:72:40:46:59:
0c:51:b7:5f:df:cd:6c:15:85:00:dd:51:71:d4:3e:
99:89:ff:b1:3e:2e:7c:e5:e2:a6:6e:85:b2:11:4e:
e6:95:89:c4:75:fd:6b:d3:ef:f8:29:56:89:e3:10:
79:a1:11:4f:a7:0d:f0:c3:b8:0c:e2:b7:72:8a:c3:
dc:a2:d0:8f:c7:7e:b9:a7:a1:a8:fd:4b:fb:cc:3b:
1e:b9:65:79:57:5d:22:0c:49:e7:ff:bb:1f:9e:eb:
b5:45:dd:84:4d:ad:51:10:ff:43:55:42:e0:0d:53:
8b:c0:41:87:bf:23:1d:8d:59:a1:fa:ff:17:85:7a:
91:f5:4a:df:e7:b1:ae:35:f7:03:21:fc:9c:28:e6:
3e:23:c0:1d:30:fa:21:9e:97:eb:e0:96:01:87:61:
04:c2:70:48:03:3a:c8:27:ec:e9:3f:96:ab:46:70:
d6:88:20:82:8b:21:e3:7d:35:53:2c:34:25:62:a5:
66:63:f7:b6:ac:48:20:be:8a:00:b8:39:bb:70:c3:
0c:12:16:af:3a:f2:49:7e:c0:bf:8c:ef:61:9b:b8:
26:04:5e:b6:b5:7a:3c:50:18:9c:a8:be:ca:65:08:
ec:59:a5:65:04:56:f5:c8:2a:cf:9d:87:a9:d6:aa:
64:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:0F:8B:52:0A:C6:75:77:4F:50:A5:25:77:BC:5D:14:95:EA:AC:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/292138d1-6676-32ed-8eff-f0c4cd604232.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.17.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:5a:b1:f5:de:be:67:e1:0b:5c:36:6c:39:3a:9d:4a:4c:8a:
68:fc:96:de:34:a5:92:cd:a0:98:c7:73:d9:2b:01:e3:ae:dd:
f3:5c:54:df:79:ad:09:58:3a:3b:5d:4b:f9:0f:1f:53:15:ad:
00:6c:65:93:51:56:14:c1:b6:42:83:f8:df:45:84:17:83:5c:
cf:ca:8a:70:bf:c5:89:88:66:48:83:93:53:71:d0:bc:49:fd:
84:cb:5f:69:60:5a:88:b2:d9:a1:3f:49:ba:44:dc:4f:c9:12:
e8:2d:e1:f1:2e:d8:ec:23:e0:1c:06:e5:75:d1:fc:78:7e:48:
80:d8:50:58:59:3d:d4:dc:df:34:ec:a2:b5:00:7b:1e:87:ed:
23:00:44:e6:ec:ee:81:fc:b7:66:28:7c:f0:0b:21:bb:68:4b:
a9:db:93:33:4c:d1:8f:c6:12:68:cc:d5:43:16:bb:02:cb:f8:
e0:a2:06:1b:54:82:2c:0e:cd:ca:1a:d4:b5:4c:6a:2f:c7:0f:
cd:e8:05:09:00:82:bc:8c:61:0f:51:90:48:c1:97:3e:12:05:
49:92:74:f3:53:c6:e5:23:99:82:a0:ba:60:0c:95:5c:24:a8:
8b:ae:6c:9a:85:9e:d1:8c:c3:86:95:d3:e5:b6:bc:b5:bb:ae:
69:fb:8e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:27:11 2025 by rpki-client