Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2f21a343-2b82-35df-b296-c0e03ccfc0cb.roa
File: 2f21a343-2b82-35df-b296-c0e03ccfc0cb.roa (raw, json)
Hash identifier: IwPh9xuQ6t1AodtO00FGPiXAmfrY5uDpNn0IK6XFjzg=
Subject key identifier: B0:0F:D7:C6:34:79:91:6D:86:3F:EF:07:4C:2B:CD:46:41:F3:EB:53
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D07E14E1659466ACE39134D00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2f21a343-2b82-35df-b296-c0e03ccfc0cb.roa
Signing time: Wed 23 Feb 2022 05:00:00 +0000
ROA not before: Wed 23 Feb 2022 05:00:00 +0000
ROA not after: Wed 30 Mar 2022 04:00:00 +0000
asID: 16509
IP address blocks: 136.2.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:07:e1:4e:16:59:46:6a:ce:39:13:4d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 23 05:00:00 2022 GMT
Not After : Mar 30 04:00:00 2022 GMT
Subject: CN=1a5e81b0-db1a-4a59-bd6d-a6853efb5995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0b:8c:23:4b:6c:d2:5e:77:ab:32:16:d8:23:
a6:52:bf:be:c8:c0:95:00:2d:77:a7:b9:87:64:cf:
05:d5:a6:8b:bd:49:55:61:e1:a8:30:31:40:d2:52:
40:2c:82:81:81:ed:64:46:4a:e1:63:01:b7:71:d9:
81:df:ae:d3:5b:9c:28:7c:37:b9:8b:a9:d0:e1:bf:
cc:c4:0b:fe:0b:7c:4b:5e:b5:38:19:ee:66:71:1b:
05:7d:d0:9a:6c:d0:3a:06:ae:99:62:40:52:8d:a9:
b2:d3:f6:b5:8a:d1:cd:e4:e2:1d:32:4f:f1:05:96:
5a:e5:9e:c6:35:ee:27:ed:43:47:79:f3:5b:a7:94:
a1:51:4f:f3:10:18:bc:c5:24:8b:94:58:be:c1:ba:
40:a3:72:3b:1b:0f:ff:66:d1:c5:20:82:d1:5c:3d:
80:d9:ad:9e:6c:f7:1b:d3:fa:04:4a:3c:0e:fc:33:
fd:73:de:36:6e:35:de:9a:9c:d9:16:73:29:18:25:
d6:3b:cf:19:c4:a2:2c:ea:e5:52:25:b0:a9:b3:38:
6d:d2:14:04:68:1d:bb:7a:16:eb:08:b3:78:f1:d4:
a1:2b:79:76:0e:51:25:21:88:6f:52:a6:1c:04:e1:
ef:53:df:ec:81:e8:1f:25:ba:39:34:f2:fa:79:27:
8d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:0F:D7:C6:34:79:91:6D:86:3F:EF:07:4C:2B:CD:46:41:F3:EB:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2f21a343-2b82-35df-b296-c0e03ccfc0cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.2.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:78:7f:78:0f:24:3f:41:8e:8e:78:da:e8:96:0d:49:b6:ff:
09:ce:24:6e:f2:da:c5:3e:9d:07:9e:a3:b9:ad:67:2d:68:e6:
fc:64:59:c1:01:1c:3b:88:f3:f2:64:61:d4:f7:e4:f2:2a:be:
95:f2:ed:6a:f1:71:cb:e4:7d:b1:4b:9f:f4:d5:40:6e:ab:18:
f4:52:a4:51:2b:29:8c:dd:57:cf:dc:d7:ec:7a:84:ce:39:e1:
23:6e:d5:d5:ac:59:4b:59:29:62:8d:ac:62:72:26:88:1c:5d:
d5:6b:b8:e5:2d:57:07:04:b0:fe:89:e3:f5:c0:16:3b:f4:3f:
10:3a:7f:ea:1a:9b:09:10:d0:9a:ee:91:59:fe:3f:55:cf:0f:
a2:92:c6:b9:0f:e6:d8:7a:6c:5c:73:29:a7:5e:93:7f:c4:7c:
31:30:66:5e:6c:38:f9:27:4c:06:1c:b8:06:87:46:8a:08:b4:
4d:3a:65:ec:e3:ff:4a:33:d8:9b:df:f9:b5:7d:a4:af:87:52:
0a:a8:20:1c:57:e6:4c:fd:4c:de:2d:b0:0e:6d:72:fe:4e:d0:
59:c9:48:39:79:21:4d:48:9d:6f:85:02:96:b8:f4:59:64:c0:
af:fe:c2:d7:b3:fc:c5:10:05:de:23:da:62:f3:97:54:cb:cc:
e5:79:12:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:36:45 2025 by rpki-client