Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3af199a9-41b5-3b65-8062-93aa0a3374d3.roa
File: 3af199a9-41b5-3b65-8062-93aa0a3374d3.roa (raw, json)
Hash identifier: d5+JVo7XZTN3DvH1hVGwmVse1a87gEM/dcsMEh5TOH0=
Subject key identifier: A9:A0:4A:BA:C2:8B:3E:00:3C:2F:51:25:0F:0B:E6:BA:8F:FC:52:92
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840B299A8B5635E0E580301B640
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3af199a9-41b5-3b65-8062-93aa0a3374d3.roa
Signing time: Wed 25 Jan 2023 12:00:00 +0000
ROA not before: Wed 25 Jan 2023 12:00:00 +0000
ROA not after: Thu 02 Mar 2023 05:00:00 +0000
asID: 14618
IP address blocks: 136.17.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b2:99:a8:b5:63:5e:0e:58:03:01:b6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 25 12:00:00 2023 GMT
Not After : Mar 2 05:00:00 2023 GMT
Subject: CN=876d4b55-05e8-4f36-828e-168f4fb4ee52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:65:2c:48:b7:1a:e2:2e:ea:4f:71:c1:ed:d3:
3e:c0:98:ba:2c:86:0a:47:cf:f9:53:14:24:eb:1a:
71:ce:0e:70:6d:36:8d:dd:df:74:fa:38:35:16:df:
d5:cd:4a:8e:49:98:09:a8:91:1b:29:e2:01:67:55:
4d:47:4a:f3:43:9d:23:41:36:83:1f:e7:b7:81:db:
7a:7d:f6:3d:0a:4d:5b:32:09:6d:94:2c:34:e1:43:
ff:d3:f5:6c:98:fb:45:1a:b8:67:0f:c4:d5:ae:83:
e9:08:c4:3b:4a:e3:1d:0a:02:b1:86:a6:1c:da:1b:
17:fe:c1:da:7a:df:2d:20:02:9d:68:54:ac:6d:2d:
74:a7:65:a3:40:4a:ac:dd:88:c6:59:89:a6:e8:81:
a4:76:14:1d:85:07:1a:5d:0e:6b:74:f3:e4:6e:dd:
e7:f7:aa:33:e2:98:43:1d:4f:58:75:f8:9d:d7:66:
4f:68:38:e6:47:24:64:2e:2a:8c:c2:db:be:2e:0e:
cd:12:e9:68:7d:b7:05:b1:1a:eb:27:4f:86:6d:dd:
16:17:43:b5:7c:42:2f:6b:33:b8:16:0d:23:2e:29:
06:54:42:5d:4b:a1:6a:76:db:ae:5b:dc:b5:e2:b2:
e8:7d:23:53:c0:85:88:a0:01:d6:23:c3:16:08:aa:
c8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A0:4A:BA:C2:8B:3E:00:3C:2F:51:25:0F:0B:E6:BA:8F:FC:52:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3af199a9-41b5-3b65-8062-93aa0a3374d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.17.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:00:01:ce:0d:88:86:c6:dd:1f:8c:18:19:0c:05:2e:39:ab:
b8:f3:e3:dc:3a:94:bf:18:f6:fc:00:d9:0d:ce:ca:b2:c5:63:
9b:64:a3:d7:c1:e6:5a:e2:5a:c6:08:c0:5c:76:9b:5a:d6:d1:
b4:e7:a4:df:99:5a:aa:16:76:e0:7e:6e:3e:66:7d:c4:c9:91:
5a:59:b2:bf:4f:2f:95:dc:a1:06:8d:2a:0f:73:54:e6:c6:bf:
ee:93:44:f8:69:29:9d:41:36:2e:75:0b:21:55:ad:75:f2:ef:
f4:29:03:f6:1d:0f:c3:77:13:f0:e1:c1:84:70:72:a2:35:d9:
52:d6:6a:06:58:e0:c9:04:5a:62:19:d1:c8:01:79:40:97:65:
28:c1:13:9a:0e:ee:81:ea:90:d7:ec:ab:5a:70:61:05:1c:3f:
46:59:c6:42:c0:4f:a1:80:a1:68:d0:44:99:c3:ef:3b:31:7c:
17:dc:d1:95:44:ae:39:3d:b6:5e:39:e1:4f:af:42:de:9d:8b:
22:cd:03:04:5c:48:66:1b:3b:95:8b:ec:9a:8a:7a:d9:7b:3a:
c3:d6:b8:b6:52:15:43:6b:61:bb:db:df:39:87:a3:89:ff:5c:
ea:c5:ad:53:bf:e4:02:3c:f1:2e:cd:a1:3b:f8:76:79:33:0c:
29:a6:52:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:15:11 2025 by rpki-client