Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/41e170ca-43b8-3a95-b495-36bfad9c2a22.roa
File: 41e170ca-43b8-3a95-b495-36bfad9c2a22.roa (raw, json)
Hash identifier: n3bPGS2TS1Ab5peqElN/1l9ckCTKKd4UKPMhVIB+Wic=
Subject key identifier: 70:6F:F7:4F:36:73:12:23:24:49:6B:F1:DF:EC:AC:62:2C:06:CE:BD
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D7D381DE691E5EBE71D96F100
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/41e170ca-43b8-3a95-b495-36bfad9c2a22.roa
Signing time: Wed 06 Apr 2022 04:00:00 +0000
ROA not before: Wed 06 Apr 2022 04:00:00 +0000
ROA not after: Wed 11 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 136.8.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:7d:38:1d:e6:91:e5:eb:e7:1d:96:f1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 6 04:00:00 2022 GMT
Not After : May 11 04:00:00 2022 GMT
Subject: CN=24c63a00-bb7d-4b59-8823-e1048dcefef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:77:3e:db:ed:6f:9d:ed:3d:8c:80:b8:24:78:
f4:44:a5:f4:ee:2b:07:ff:df:76:ce:a4:34:c6:e8:
20:45:e8:5f:ba:f3:b0:3e:7e:80:5c:78:9d:d2:d4:
e6:b7:e6:16:d5:98:62:b2:0a:af:a7:df:36:2d:9e:
94:15:36:75:9d:b1:bf:41:36:ce:a3:b8:11:ec:e1:
e6:28:7a:dc:26:24:8f:6e:6b:ac:90:98:53:af:2a:
f8:08:1b:ee:9c:c6:83:48:97:0a:c6:8d:b9:84:41:
1e:34:ed:98:31:92:86:b2:0d:cd:28:0e:a7:db:80:
1e:d6:e2:d1:d9:72:79:52:89:b1:a3:49:24:b9:08:
e0:3e:51:43:25:2c:20:37:4f:c4:f9:90:38:6d:3a:
bf:93:d6:8b:0a:ae:2e:33:3f:a0:95:c7:94:04:bb:
97:ac:bd:30:76:44:b5:c7:bb:be:1b:2d:3e:6a:42:
21:65:ae:a4:51:ab:f7:01:63:2e:4a:98:41:d3:ca:
2c:d2:8c:b9:b7:9e:55:16:51:56:f8:e5:32:9f:d6:
7a:fe:46:cb:6c:b0:43:04:5c:bc:42:80:13:6b:20:
51:b0:51:6a:7a:24:3d:22:2b:ef:d9:e8:ab:10:31:
b4:f5:0d:c3:f6:cd:ff:5b:cb:af:3c:55:7a:47:38:
3d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:6F:F7:4F:36:73:12:23:24:49:6B:F1:DF:EC:AC:62:2C:06:CE:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/41e170ca-43b8-3a95-b495-36bfad9c2a22.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.8.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:b8:bb:1b:3a:a4:65:68:a2:9b:9b:ee:31:31:8c:36:00:3d:
fd:00:00:77:b7:f7:53:53:17:ff:6a:c0:43:cb:29:cf:15:50:
1e:1a:c7:5e:95:2b:60:88:3a:d3:1e:4c:2b:49:7c:56:19:08:
fc:5c:0d:82:c5:8d:ea:9f:20:b0:94:60:89:ab:db:f0:cc:5f:
d8:d7:24:31:a3:52:04:9f:6f:bd:da:28:a6:bf:d3:f1:e3:52:
d5:47:1b:33:03:a4:df:cd:a5:af:25:1f:bb:3f:70:c6:d9:c4:
75:9a:f6:83:a8:db:41:2c:4a:fd:07:ea:7b:12:03:ae:4a:2f:
71:b8:d4:cf:85:6b:44:d0:22:d7:be:ef:09:d9:ec:44:0d:31:
b5:f5:69:72:7a:cb:41:7c:2f:f0:a7:be:6f:19:84:21:60:95:
55:8a:ef:cf:2a:11:ab:c2:f5:f6:03:c2:3c:66:79:43:95:7a:
29:fc:7a:b4:f4:36:be:b1:14:56:71:cf:a2:27:f4:8e:47:f9:
c1:54:9b:36:cf:fe:cc:4d:09:8d:3f:df:a6:f2:e1:b2:76:33:
f5:6d:4b:e1:4e:9f:2f:57:4d:62:8d:c1:b8:ee:96:d5:b6:4a:
1d:a8:f6:64:61:a5:34:b3:8b:bd:e9:99:69:fd:0d:d3:b1:ec:
5a:b4:e7:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:13:43 2025 by rpki-client