Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/41ce3d1b-05fe-3407-887d-18dcaedb3037.roa
File: 41ce3d1b-05fe-3407-887d-18dcaedb3037.roa (raw, json)
Hash identifier: a0KNPBsHKzFsUKeW7A72dSW9NTy+mMNrT8YBY51gmP0=
Subject key identifier: 0D:04:DA:66:64:10:D0:7F:CC:D4:B2:C7:72:33:52:2E:5B:B5:A2:18
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840657334C41EDF4A5F270990C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/41ce3d1b-05fe-3407-887d-18dcaedb3037.roa
Signing time: Wed 28 Dec 2022 12:00:00 +0000
ROA not before: Wed 28 Dec 2022 12:00:00 +0000
ROA not after: Thu 02 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 136.18.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:65:73:34:c4:1e:df:4a:5f:27:09:90:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 28 12:00:00 2022 GMT
Not After : Feb 2 05:00:00 2023 GMT
Subject: CN=0ea46a88-1e72-476e-b30d-dcbaa2af2e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:28:e1:98:b3:3c:5b:7a:f9:d4:b9:5c:0c:1a:
42:d2:ba:ad:9b:57:c2:d9:a3:5f:05:d8:27:b6:52:
11:d4:4f:c1:af:fe:a1:32:36:78:02:5f:03:4f:50:
b3:a7:7c:f0:96:7d:be:b2:30:44:0c:01:98:ad:37:
00:f3:4b:18:17:60:46:6a:d9:81:89:71:7a:94:47:
c4:e8:0b:c1:31:69:77:86:35:03:00:e5:a8:c2:f2:
9e:75:b3:f7:f6:14:55:32:6d:8e:ef:b1:5e:d0:09:
00:bc:f9:cf:5f:57:45:c1:01:9c:ff:c1:f3:df:c2:
48:75:0b:9b:66:24:06:bf:00:5b:d5:28:f8:47:7d:
eb:41:12:ad:70:a1:38:fe:d4:a5:3e:0e:8b:a9:d4:
aa:ca:e2:1e:9f:7d:c0:a1:45:d2:fa:03:fe:56:16:
8f:f1:40:f8:3f:70:42:5b:cc:fb:e9:f9:30:22:aa:
e5:6d:0c:fd:1e:3b:d9:3c:34:fa:11:53:5e:46:88:
46:91:10:37:68:a2:fb:02:83:ab:0b:c9:0c:67:0b:
b3:25:bb:60:7f:7e:c9:45:7b:35:a4:53:c0:9c:50:
8e:f7:4a:cb:b4:27:6e:7c:f4:42:0c:19:6c:eb:37:
8d:db:c7:63:dd:c5:a5:75:95:07:43:e1:a6:06:b2:
5a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:04:DA:66:64:10:D0:7F:CC:D4:B2:C7:72:33:52:2E:5B:B5:A2:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/41ce3d1b-05fe-3407-887d-18dcaedb3037.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.18.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:9b:e8:cc:71:fc:8e:fb:28:d9:4d:ee:d9:50:ff:d9:c0:a5:
08:cb:23:da:a2:f7:cf:2a:ab:3a:fa:c9:7a:a5:9b:19:88:9a:
c3:d5:7b:2b:13:df:9e:50:37:3f:fe:29:11:2d:96:5d:c5:ab:
c5:5d:e4:94:37:cc:c9:cb:58:5e:5f:92:af:87:de:71:19:83:
fb:e2:9a:a8:cd:31:c0:90:7c:9c:7b:12:8b:4f:1c:85:49:f2:
9c:40:93:81:bb:ac:7d:6e:b0:e3:23:00:4d:65:8f:a7:57:e8:
08:39:4f:70:43:a7:f6:6a:68:94:76:cc:cc:ca:a7:c9:e6:e4:
d8:f5:9b:9a:1b:8c:0d:a5:d1:7d:40:ff:17:b2:91:b6:54:a1:
d2:43:0e:5d:2c:22:d3:0c:92:dd:a6:aa:8b:10:02:54:c2:37:
56:fa:c9:ab:de:f8:03:fc:53:be:a2:de:38:24:18:f4:ab:f9:
43:7e:8d:cf:75:27:26:ee:48:1f:c7:b5:73:92:1c:8a:2a:d4:
2e:c4:5b:db:81:a3:84:33:72:49:55:5e:4d:88:58:66:48:68:
80:e4:f8:02:6b:3d:8a:7b:c2:25:06:23:05:cf:c5:03:88:03:
e0:4c:da:59:b2:59:6e:9f:0a:db:c8:59:74:45:84:fe:f4:d3:
8a:de:8f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:24:38 2025 by rpki-client