Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/431736c2-126c-31a6-a24b-ce301342f6cc.roa
File: 431736c2-126c-31a6-a24b-ce301342f6cc.roa (raw, json)
Hash identifier: J91FFeq02sKNHtrfkEnltrIK26EEdN3mJWypGZOKCcQ=
Subject key identifier: 2F:D6:91:83:AC:9B:13:6A:C4:F1:02:A6:DC:27:86:AA:9A:4B:F7:A6
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FF014A97C53ADB1F78E775A00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/431736c2-126c-31a6-a24b-ce301342f6cc.roa
Signing time: Wed 16 Nov 2022 12:00:00 +0000
ROA not before: Wed 16 Nov 2022 12:00:00 +0000
ROA not after: Thu 22 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 136.18.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f0:14:a9:7c:53:ad:b1:f7:8e:77:5a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 16 12:00:00 2022 GMT
Not After : Dec 22 05:00:00 2022 GMT
Subject: CN=b02ad07d-de83-4464-9b3a-16c62900e9fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:3a:48:f8:54:97:c4:34:a3:35:00:4e:b7:ff:
73:0f:a5:e4:b9:39:12:60:61:57:37:a5:af:45:a4:
2f:15:0f:c3:f7:6d:b6:77:8c:96:bc:2f:2f:fc:94:
82:ff:4a:25:2f:1c:09:ca:c4:10:3c:fc:fe:d1:2f:
e3:66:d8:f9:e4:a9:34:27:a9:8c:ca:e6:1c:e3:a6:
0f:60:d1:9c:9a:f0:fb:d5:30:0b:03:bd:99:7e:9b:
04:5e:a2:78:76:8d:9b:18:0a:c2:d3:87:c3:ca:46:
76:69:4e:2e:c0:ec:3f:83:a6:6f:bf:aa:48:5a:d8:
27:86:79:31:87:c8:95:5d:f6:8a:9b:d6:dd:80:f2:
d9:c0:17:dc:7f:67:3f:cd:43:d9:e7:6c:64:72:6d:
1f:f8:8b:23:02:3f:12:2a:c7:c0:8d:26:c9:d3:d8:
5b:da:e1:d8:03:6a:c7:36:c4:36:b2:eb:10:80:65:
bd:87:39:a8:3e:df:df:34:99:85:ce:ac:57:f3:fe:
30:ef:20:d9:6d:b6:3d:58:6a:4c:4f:c7:c7:6f:7a:
f6:f8:97:8b:e8:2e:c2:59:c2:ce:31:33:98:73:c0:
9b:29:4c:12:f1:bd:3c:15:e6:81:bc:bd:af:1d:74:
51:a8:37:bf:b6:09:52:9d:e9:4a:d9:04:46:b0:19:
fe:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D6:91:83:AC:9B:13:6A:C4:F1:02:A6:DC:27:86:AA:9A:4B:F7:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/431736c2-126c-31a6-a24b-ce301342f6cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.18.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:8d:c5:f9:69:d9:ce:80:30:c9:ea:34:22:e6:ea:e1:d4:59:
93:ec:22:ca:0a:ba:a3:da:a8:7d:a2:b2:40:6a:b2:83:38:bd:
df:84:de:4a:89:0e:ff:c0:d5:2d:80:f4:77:ae:24:7f:76:0e:
9f:0e:bf:9a:f1:07:26:5e:4f:29:89:28:2c:ad:49:45:7d:95:
b9:41:6e:18:ac:81:c8:13:78:f9:3a:eb:bb:a5:13:e1:3b:87:
5f:f2:fb:5c:43:c7:0a:55:f1:dc:b2:54:c0:7f:f8:a2:b3:c5:
70:92:13:e4:c6:f1:30:9c:96:5f:93:af:6d:5e:ce:9a:c7:c0:
f6:ae:e0:85:05:ec:e1:cb:9e:5b:2c:c7:74:a6:b6:ea:0a:df:
b2:11:bc:97:3b:8d:fb:c0:50:48:77:f5:76:6d:26:4e:37:91:
a2:5d:3c:d3:94:e3:9e:0c:ce:ad:57:b4:14:39:3b:26:fb:70:
43:77:e5:72:d4:2d:06:e7:0c:6d:b7:3d:14:f2:50:a8:82:6e:
13:ce:d9:f3:61:e3:ba:a2:99:7e:6d:95:19:ca:60:2d:6d:42:
0c:ff:e9:57:88:62:50:af:51:2a:40:e1:79:eb:36:69:59:13:
45:1a:a5:ce:72:38:4d:2f:82:d9:27:52:39:a7:0b:40:8a:8b:
d9:b0:d4:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:38:29 2025 by rpki-client