Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/322eb85d-b20a-3500-968d-ee2798cc4fbe.roa
File: 322eb85d-b20a-3500-968d-ee2798cc4fbe.roa (raw, json)
Hash identifier: 5dyGKUfNIq4pEeyyONrtfUuq6dVCLPxOLhft791lPOc=
Subject key identifier: 3B:77:68:8A:7B:84:D5:0B:D6:D3:4C:61:FC:C6:13:12:02:89:B7:7F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FA14D448E571CBA1845CCEF48
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/322eb85d-b20a-3500-968d-ee2798cc4fbe.roa
Signing time: Wed 19 Oct 2022 12:00:00 +0000
ROA not before: Wed 19 Oct 2022 12:00:00 +0000
ROA not after: Thu 24 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 136.18.24.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:a1:4d:44:8e:57:1c:ba:18:45:cc:ef:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 19 12:00:00 2022 GMT
Not After : Nov 24 05:00:00 2022 GMT
Subject: CN=77e91a61-2b17-4b72-9f6b-f207801e2edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cd:a5:ee:26:bb:39:f3:b7:2f:fb:21:83:45:
1e:a5:d4:3c:7c:5f:99:e1:69:9b:7f:02:23:00:b7:
a2:82:fa:fd:1e:4e:41:8a:c6:9c:b1:52:6c:e8:5b:
49:99:11:0f:d8:be:b6:ad:d3:b0:5b:a8:2e:02:16:
ab:9d:fa:72:bb:44:5c:81:c0:8e:77:99:c4:28:bd:
43:ff:a0:84:9b:1b:2f:a3:d3:e4:a0:de:f3:38:d7:
14:79:61:59:6d:83:97:6a:dd:80:a8:20:71:3d:b2:
10:06:44:5a:90:f0:60:2c:b8:2f:f3:a2:0d:4d:d5:
e5:5c:c4:70:7a:1b:a2:ba:ac:3e:49:68:98:0a:c1:
e3:98:16:36:44:e6:45:b0:73:77:11:49:07:b6:28:
63:c1:34:de:db:ea:94:bf:d3:83:ef:e2:71:49:01:
12:f2:c1:2e:e0:7d:67:e7:fc:9d:31:a2:b3:ef:16:
bf:ab:f2:9a:96:ac:02:44:73:6b:74:ef:2a:99:8f:
6b:d1:af:2a:e3:20:d4:75:f0:7a:cf:af:ab:04:d5:
28:eb:ca:0b:b1:c5:e5:f1:a0:de:e7:95:f2:89:1e:
0b:72:5a:78:02:b3:1b:13:db:66:d5:05:69:d3:a8:
de:41:e3:66:02:11:3d:8a:23:4d:c6:ca:23:60:a1:
20:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:77:68:8A:7B:84:D5:0B:D6:D3:4C:61:FC:C6:13:12:02:89:B7:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/322eb85d-b20a-3500-968d-ee2798cc4fbe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.18.24.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:29:a9:bf:fe:07:9a:cc:ca:db:eb:a3:da:85:d0:4f:b2:c8:
1a:0b:a0:c2:73:0b:81:b9:0b:fc:bc:e8:06:56:36:f3:3c:e9:
b2:46:1e:49:01:76:51:b7:29:af:11:5c:c5:58:56:2f:74:47:
b2:5a:04:8f:8b:67:6b:11:5c:ea:de:19:a4:d1:fc:6c:56:57:
8d:4d:1c:d8:64:95:0f:2b:ee:db:19:bf:ea:33:62:65:af:db:
11:12:e5:c6:38:fd:c4:9e:29:d1:2f:5c:3a:6f:5e:a3:3a:39:
8a:c3:4d:cb:bd:c9:29:ce:8a:f7:03:04:1b:95:d9:a2:ff:e4:
52:81:3d:8b:bc:7b:7b:27:3d:a2:e4:9e:73:15:a8:cd:8d:06:
34:5c:60:e7:d1:73:c6:62:41:c6:7f:9f:9e:6d:6e:6e:bc:48:
4f:7e:7f:dc:a8:74:d3:a5:81:07:c7:ff:a6:16:4a:b5:5b:4e:
62:c3:53:68:95:c5:2b:b6:98:19:e3:ec:7b:79:d4:cd:24:df:
5b:c9:a2:ba:6f:80:57:ba:9d:43:b4:a3:69:f1:15:2c:89:b5:
f0:a0:7a:51:e3:79:f6:f3:22:c9:3b:52:0f:ba:87:4e:f3:53:
73:52:b4:af:8c:ef:9a:36:d2:1a:f1:da:b0:11:78:bb:d8:a1:
da:53:b7:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:27:36 2025 by rpki-client