Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3007a2dd-5c5b-385a-84ee-2e748df07df0.roa
File: 3007a2dd-5c5b-385a-84ee-2e748df07df0.roa (raw, json)
Hash identifier: arMw2pN802CWN84WEXPFD0sC2jT+9/Q67E2pYd8B4hc=
Subject key identifier: 5C:1A:97:3F:E5:66:4F:A3:F4:4E:81:70:A4:1B:55:D9:A8:B5:D4:A0
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D7D297296A211611F7F548AA0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3007a2dd-5c5b-385a-84ee-2e748df07df0.roa
Signing time: Wed 06 Apr 2022 04:00:00 +0000
ROA not before: Wed 06 Apr 2022 04:00:00 +0000
ROA not after: Wed 11 May 2022 04:00:00 +0000
asID: 14618
IP address blocks: 136.18.24.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:7d:29:72:96:a2:11:61:1f:7f:54:8a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 6 04:00:00 2022 GMT
Not After : May 11 04:00:00 2022 GMT
Subject: CN=2d4fd48e-a740-4c04-94a9-111d984b36d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:87:d0:db:b5:f6:b5:b7:0f:e0:72:06:45:1f:
38:2f:cc:36:9c:0b:f5:36:4e:f5:0e:4e:82:0f:a8:
3e:58:78:d9:21:4c:f0:19:f0:a4:29:42:3e:3c:39:
bf:06:42:94:53:38:13:98:5a:0d:20:73:1f:cb:e2:
39:04:83:a4:41:6a:27:47:79:44:cb:0d:c6:15:ea:
63:94:e2:02:3d:a1:8f:63:97:fb:0b:d1:8b:6b:f3:
7f:c3:85:9f:e2:56:9a:00:5c:0a:1c:6e:b1:a4:a3:
67:c9:77:f0:a0:c6:3b:77:80:08:b3:04:80:f1:d1:
19:83:11:57:48:9a:c7:e3:92:e8:89:7a:be:ae:d4:
0c:87:02:a1:a6:d7:fe:8d:6e:33:92:79:ba:56:81:
8d:03:6e:8b:5c:a0:ea:df:d4:51:f2:f7:b4:11:cc:
0f:c9:11:09:63:8e:19:fb:a6:28:61:0b:88:c0:17:
36:e3:38:cc:f0:73:42:37:b5:67:95:00:4f:a8:b7:
17:7f:6f:9e:da:0a:60:b4:46:66:49:7c:76:c1:c1:
a8:13:fb:ab:92:97:67:78:2e:21:2f:4c:1b:72:ea:
dc:24:aa:29:5b:86:02:5a:78:46:58:bc:8a:0e:bc:
b3:1a:36:48:a3:f3:bc:cd:9b:f2:53:b6:8e:4b:b0:
c1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:1A:97:3F:E5:66:4F:A3:F4:4E:81:70:A4:1B:55:D9:A8:B5:D4:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3007a2dd-5c5b-385a-84ee-2e748df07df0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.18.24.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:d4:6c:6e:e1:dc:d0:97:4a:92:37:68:31:62:56:45:9b:7a:
8e:f6:d8:1b:cb:58:d0:1b:11:c3:47:0c:44:70:ce:57:02:ca:
f8:3c:86:e2:fb:eb:81:b4:cd:2c:fa:a3:7b:01:b8:45:d3:a0:
c4:0e:82:c0:2e:28:62:88:d4:72:59:67:89:a1:03:0c:0d:93:
7d:d4:78:ad:4b:b7:a8:e0:5b:0a:c3:8f:6d:e1:e5:07:2c:00:
1c:43:18:78:6b:23:18:f7:22:d7:0c:0e:21:34:b9:f4:7e:1d:
74:c4:16:36:85:b5:9a:c2:17:98:51:b1:6e:a8:8e:e1:83:38:
e4:da:72:4e:e5:e9:6b:37:8f:8b:8d:e0:81:95:05:8e:39:0f:
5c:f0:75:47:cf:84:ab:77:d5:83:bb:7c:0e:f2:7e:95:95:4d:
7d:e3:02:93:5a:df:6d:d1:73:6f:8b:10:08:fc:23:3c:76:7e:
a2:9d:4f:f4:a0:69:f9:a7:b9:bc:6f:ea:5d:cd:94:02:76:4a:
4c:51:6d:c8:ef:ea:69:50:4d:42:8a:fe:17:5e:66:ee:b7:5c:
76:95:cf:8f:26:46:81:b3:a7:6f:78:d0:4a:b5:37:b8:64:36:
cb:b5:9d:5a:8a:68:cd:12:1c:d9:d2:63:49:78:9c:98:db:6c:
84:40:dd:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:39:33 2025 by rpki-client