Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2a00f185-cf05-3a96-bfba-e81776df6360.roa
File: 2a00f185-cf05-3a96-bfba-e81776df6360.roa (raw, json)
Hash identifier: PiiqZOgheENsexp/urCwYSznAsu5xpOvdxN4YYyzqzQ=
Subject key identifier: D9:D2:92:C6:EF:B7:AD:FC:4E:3A:21:F7:6C:39:EF:10:70:FE:EA:88
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584065731F228E56BB128051F8C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2a00f185-cf05-3a96-bfba-e81776df6360.roa
Signing time: Wed 28 Dec 2022 12:00:00 +0000
ROA not before: Wed 28 Dec 2022 12:00:00 +0000
ROA not after: Thu 02 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 136.18.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:65:73:1f:22:8e:56:bb:12:80:51:f8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 28 12:00:00 2022 GMT
Not After : Feb 2 05:00:00 2023 GMT
Subject: CN=b3206807-7e23-4382-8679-990660c96372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:11:58:3d:42:b5:af:1f:ac:c5:d0:c7:f7:07:
2d:91:cb:18:c9:78:cf:b5:4e:e3:d4:13:58:83:14:
75:c8:33:e1:a6:67:68:d3:59:f7:99:77:72:0c:de:
01:52:60:2d:c0:10:cd:ad:51:fa:29:0d:71:d9:6d:
48:48:58:ef:6c:22:d8:66:ff:15:79:ac:ba:4b:c3:
fb:7b:c6:3c:4f:19:b0:59:69:d2:d3:84:e2:55:fd:
7c:07:78:ea:8b:b1:d3:b1:30:77:74:68:6e:59:b2:
4e:08:dc:cb:3b:77:6d:fd:1e:75:72:e2:f0:14:17:
1c:f1:64:9c:a0:b9:b5:53:c6:5d:51:98:b4:96:9f:
bd:b9:7d:44:05:e5:0e:30:eb:b3:e2:73:50:b7:b2:
99:6a:9e:16:97:c6:aa:93:1b:00:0e:8d:25:c3:25:
44:ee:7f:3b:ed:0a:2e:13:12:ac:d8:54:f2:93:21:
29:71:4c:22:42:fb:80:78:27:18:ca:93:e9:e1:ce:
11:f2:ab:d8:46:be:53:9f:3a:81:34:06:a3:02:c7:
92:d7:5d:2e:f5:d7:6f:91:1b:30:70:c0:4f:62:4c:
31:af:f1:61:f6:07:c0:d0:eb:82:40:15:b8:fb:e4:
90:9f:fd:77:e2:21:27:cd:b7:9d:c5:6d:7d:d7:05:
47:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D2:92:C6:EF:B7:AD:FC:4E:3A:21:F7:6C:39:EF:10:70:FE:EA:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2a00f185-cf05-3a96-bfba-e81776df6360.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.18.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:14:93:3a:06:ac:b1:d4:24:74:9f:14:92:bf:81:cb:60:82:
3a:9e:f8:e4:e7:04:4a:28:69:b1:51:18:93:b2:a4:25:2a:06:
57:ea:ac:45:7f:9b:2b:4d:e3:98:47:65:03:f8:3c:d8:8e:05:
0c:27:19:89:81:22:73:7c:3c:34:a8:47:52:ea:c6:8f:6d:ce:
dc:4d:8a:7b:eb:ab:dc:46:5d:f1:94:52:ca:f4:dd:44:50:b6:
27:52:fb:4f:01:6e:44:94:a3:a2:29:e0:cc:55:7e:47:ac:66:
04:1f:0b:ef:db:79:22:0e:e0:65:b8:51:f0:10:af:e9:32:8e:
b4:35:48:77:c3:62:5e:92:fe:7f:fc:d1:bd:31:68:ec:c2:37:
dd:2f:53:8a:1e:2c:c5:d4:1e:bb:44:ff:34:31:a3:98:d4:59:
5c:ee:cf:0a:20:eb:97:25:bb:d1:0b:81:7f:40:f9:d9:12:af:
26:79:7d:3c:63:68:00:e3:6a:cd:b6:09:ca:2d:98:bb:df:5d:
9e:d7:2e:ad:fc:ae:b0:4e:d8:81:4d:47:f7:71:24:7d:9a:53:
9b:23:6d:e2:86:c6:91:d5:f0:c4:a4:cd:18:ab:10:f6:42:9e:
ee:5f:6c:6f:17:e6:bf:65:0c:60:de:82:c3:f4:1d:43:07:20:
43:06:2b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:51:52 2025 by rpki-client