Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2fae6f3b-b6e5-351b-9861-9e85451bdbba.roa
File: 2fae6f3b-b6e5-351b-9861-9e85451bdbba.roa (raw, json)
Hash identifier: vx3oZIWUTl2wD3Xqx/mp9D9Iynb1hDJ42PqrAE1QImw=
Subject key identifier: 06:28:A2:4D:B4:45:A0:54:C9:3A:C4:24:BF:82:1D:0E:7E:23:6D:8E
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FC82E9AFAF92BBCF5000E93A0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2fae6f3b-b6e5-351b-9861-9e85451bdbba.roa
Signing time: Wed 02 Nov 2022 12:00:00 +0000
ROA not before: Wed 02 Nov 2022 12:00:00 +0000
ROA not after: Thu 08 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 136.2.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:c8:2e:9a:fa:f9:2b:bc:f5:00:0e:93:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 2 12:00:00 2022 GMT
Not After : Dec 8 05:00:00 2022 GMT
Subject: CN=ff6a1831-d20d-4c1a-b2a5-f71da0316879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7a:d2:af:0e:0c:12:75:7f:84:a0:c7:5e:73:
72:83:11:0f:a9:cc:00:b2:a4:39:bf:31:a7:12:a6:
9c:2b:7d:61:7b:b6:e8:c3:27:e2:76:ca:d9:18:a6:
51:a4:57:f3:ab:20:af:16:02:fc:d5:1a:97:06:dd:
fe:da:56:b3:8b:10:ee:c1:fd:d2:30:1e:07:e0:79:
2b:f2:e1:27:78:c4:ce:54:35:3f:e1:0a:41:fb:f0:
e5:3e:f3:a7:93:47:76:d4:e1:7c:ef:33:a5:81:b3:
18:d1:05:d2:3b:f3:19:c4:79:b5:44:a1:69:fd:ec:
3d:e8:03:29:4e:1e:42:29:14:c5:5f:e1:82:c1:b2:
fd:a4:c9:2c:30:8a:f6:05:4f:44:13:cb:e3:48:c2:
66:47:61:23:c2:9b:74:7e:46:43:21:37:fe:64:be:
16:c7:e3:ac:20:c1:04:0e:33:5f:85:c0:6d:b0:a1:
e5:d2:e8:b8:43:3c:97:e1:0f:7f:c4:04:c7:65:5e:
8d:c0:68:03:10:7e:8f:1b:04:c7:2c:2c:34:4a:18:
0c:2d:b0:d8:fc:d1:36:7b:69:c5:42:c9:d2:ec:e5:
97:6b:1a:5c:3a:99:f7:91:f5:d0:4b:19:9f:7e:91:
d7:b5:a2:e7:9b:70:8b:6b:93:bc:6f:11:e8:3c:ef:
e4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:28:A2:4D:B4:45:A0:54:C9:3A:C4:24:BF:82:1D:0E:7E:23:6D:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2fae6f3b-b6e5-351b-9861-9e85451bdbba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.2.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:a7:e8:49:3f:4d:cb:89:ff:1d:b1:29:bd:25:89:34:c2:7c:
89:f7:cf:3b:c0:37:ec:ff:e9:c7:fa:37:08:70:c3:0c:86:46:
6e:3f:e3:8c:eb:7a:38:2d:48:35:2b:c6:c7:56:93:d3:72:53:
ae:11:51:84:bf:47:65:75:a8:7f:30:d0:79:c7:6e:43:5d:b7:
24:18:c1:06:57:0e:27:3b:19:65:27:04:60:96:bb:ca:34:98:
9b:1f:da:27:2b:ca:da:4c:60:8c:59:69:a3:0c:84:a3:7f:1d:
89:18:a1:52:39:a4:7e:89:f5:af:98:3c:8d:c3:cd:f6:59:dd:
1b:08:39:c0:b1:d6:66:0a:b5:36:b7:bd:fb:3d:db:df:15:67:
79:6e:5f:17:f7:2a:e1:9a:ad:b2:d3:ac:ee:da:40:80:a6:a6:
20:23:24:7b:f7:93:84:3b:11:15:fc:28:03:86:f2:e4:2e:23:
fe:f1:92:14:b8:ef:8f:db:a5:03:7f:af:90:dc:eb:9e:e7:29:
f3:eb:cb:e4:13:fc:1b:63:20:5b:40:ac:d7:cf:8e:5c:35:75:
af:85:44:84:46:9e:18:e1:6f:c1:c6:93:1f:7e:e8:20:9f:c6:
52:d4:3c:ca:92:cb:c6:e8:7c:65:24:76:3a:95:46:fe:9c:aa:
f7:0c:56:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:09:26 2025 by rpki-client