Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2fbd8e94-a432-3803-acf7-b4e15c5fa95e.roa
File: 2fbd8e94-a432-3803-acf7-b4e15c5fa95e.roa (raw, json)
Hash identifier: P0upqoL/JdbaJ9kawmAFjLGshQ3jKYRQrk3g+UXFZL0=
Subject key identifier: F8:8E:FF:67:FE:DB:9D:33:FB:99:3B:5A:19:CE:91:D9:32:B4:31:DA
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FA109F8B07B0342B8D259B258
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2fbd8e94-a432-3803-acf7-b4e15c5fa95e.roa
Signing time: Wed 19 Oct 2022 12:00:00 +0000
ROA not before: Wed 19 Oct 2022 12:00:00 +0000
ROA not after: Thu 24 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 136.8.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:a1:09:f8:b0:7b:03:42:b8:d2:59:b2:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 19 12:00:00 2022 GMT
Not After : Nov 24 05:00:00 2022 GMT
Subject: CN=9c5a6992-376e-4b0f-8688-04e2f2b249a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3c:e4:6c:04:a5:07:e5:16:61:5b:4b:1b:70:
86:cb:0e:be:78:4e:27:7b:21:cc:c8:80:73:f4:39:
a6:67:ab:b0:da:72:53:b3:a2:1f:9c:8e:f5:9f:53:
71:6f:53:b4:6c:b4:b5:08:fc:cb:88:92:9a:9f:7f:
43:12:40:16:5f:42:a0:5f:99:48:44:5d:91:6d:f0:
f7:4a:d8:5a:66:ec:12:ab:13:1d:d4:ee:26:5a:f5:
aa:f4:13:5c:96:a1:38:af:07:61:ae:a7:bb:67:6d:
66:5d:da:c4:76:d1:f2:a2:5d:12:2d:46:aa:31:11:
ff:e5:96:4f:61:a2:e6:f0:e8:ac:d6:82:c4:fe:37:
79:02:9c:f5:7a:70:57:c3:d9:21:84:22:8d:00:2d:
32:b3:bc:44:1b:73:2e:e5:fa:7c:83:85:e2:67:50:
ef:32:3d:27:0b:3a:30:55:14:e3:c6:83:31:34:39:
a8:a7:b5:b4:f2:28:ab:1d:87:16:cc:1c:0e:3c:8d:
29:82:78:f6:8a:81:66:1b:8d:f9:d9:41:51:34:23:
cb:68:ac:83:08:db:77:f3:0e:04:a7:a6:b4:ff:7d:
91:f4:e8:eb:01:0c:6e:b5:46:df:27:aa:d2:12:06:
8d:c5:57:db:52:5a:5d:f1:a7:32:02:f1:f7:fe:be:
7e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:8E:FF:67:FE:DB:9D:33:FB:99:3B:5A:19:CE:91:D9:32:B4:31:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2fbd8e94-a432-3803-acf7-b4e15c5fa95e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.8.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:8b:5f:91:f2:24:73:69:24:62:af:ce:c7:a4:cc:11:56:b3:
c3:35:d7:53:bf:92:23:14:2a:82:97:50:3c:0c:7d:36:43:94:
45:ac:b1:0f:75:4c:14:b1:35:ee:1f:6d:43:67:ab:3e:c4:a0:
4a:f9:ab:6f:f8:cd:29:ce:16:39:90:8d:56:b9:73:dc:f2:b2:
db:40:d3:de:bf:e6:1c:d4:05:44:c5:c6:64:c2:fd:3b:dc:75:
27:0a:f5:2d:c1:f4:86:a5:67:7f:04:a9:46:4f:6d:ab:7e:da:
3e:48:3d:77:33:a1:eb:b7:05:b9:a6:c8:5f:ef:e0:b7:fc:9e:
e3:b7:08:c0:2c:4b:19:8b:e5:f8:17:3a:ef:d7:5d:fa:89:03:
cf:87:fa:e1:79:db:50:f3:38:c8:32:bc:32:f6:b0:be:60:e8:
68:c0:ea:e2:6c:c2:16:a1:e5:3e:15:af:49:c6:b3:6e:5a:44:
a5:84:57:45:7b:12:2a:1c:a8:e3:34:13:78:79:64:c3:1d:3f:
df:09:10:8c:f9:ee:cc:28:18:87:11:39:49:e7:59:fe:0c:18:
ac:90:78:78:8e:ca:4f:ea:11:f5:d1:8d:e6:2b:a7:e6:70:9f:
39:99:2c:3f:d2:54:d3:d0:f4:20:a6:fb:9a:b4:ac:f5:50:18:
30:6e:f6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:59:35 2025 by rpki-client