Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/48cbcdca-d195-323f-a7c4-81e189d1ed53.roa
File: 48cbcdca-d195-323f-a7c4-81e189d1ed53.roa (raw, json)
Hash identifier: Ayp2Bm9x8LCq+u/5N1oqnzom+dR0I+YIt0aVxD2OsrE=
Subject key identifier: AB:3D:B8:1B:E4:A1:13:4C:62:4F:81:2A:2B:E7:14:80:74:A7:66:49
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840646EC29A874B30A77CD59940
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/48cbcdca-d195-323f-a7c4-81e189d1ed53.roa
Signing time: Wed 28 Dec 2022 12:00:00 +0000
ROA not before: Wed 28 Dec 2022 12:00:00 +0000
ROA not after: Thu 02 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 136.17.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:64:6e:c2:9a:87:4b:30:a7:7c:d5:99:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 28 12:00:00 2022 GMT
Not After : Feb 2 05:00:00 2023 GMT
Subject: CN=663cca48-bb8f-46a9-b882-960eb3162e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f2:e6:cb:7f:15:3f:78:77:a2:ee:16:3e:18:
41:5b:71:9e:29:67:68:a9:b0:ce:83:7a:0f:66:2e:
7d:c8:77:bc:0d:c9:00:26:06:d5:84:13:14:d6:5a:
5f:16:a7:bb:42:90:0a:89:36:75:7b:9f:95:c0:c4:
44:3b:03:c4:46:69:55:d9:85:0e:e9:a6:fa:81:d2:
a3:8e:b2:c7:c3:0e:70:3d:51:82:95:71:f1:e6:5d:
7a:e5:b6:71:e3:b0:12:ba:28:8d:73:4a:41:03:e0:
1c:69:f7:00:be:4c:34:09:d0:7f:55:fe:90:09:96:
38:2b:25:36:25:95:21:e4:94:fd:85:59:6f:b2:0c:
8a:de:5d:4a:6c:70:4d:6a:43:b2:c0:44:b4:98:62:
de:f8:60:4c:33:db:1c:e8:1c:97:6f:9a:19:5c:84:
bd:71:8b:3e:a7:28:e9:fe:ce:80:6c:b0:7b:87:a4:
79:9e:67:4d:79:31:c4:75:42:8d:89:83:9c:7c:49:
ee:d5:b3:57:4a:fa:9f:02:b1:d6:bc:41:46:ec:c3:
83:18:94:9e:13:99:8f:15:d1:fb:e4:ca:72:eb:9c:
df:1d:01:87:29:a1:f8:6c:71:fc:f9:a7:bb:8e:0b:
76:53:a6:4b:4b:19:d0:82:1c:28:1e:cc:2b:62:16:
40:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:3D:B8:1B:E4:A1:13:4C:62:4F:81:2A:2B:E7:14:80:74:A7:66:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/48cbcdca-d195-323f-a7c4-81e189d1ed53.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.17.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:3f:cc:7c:13:30:bb:83:fb:9c:8c:d1:f0:91:87:08:d1:1a:
0f:4b:1b:73:48:32:fa:b0:6b:50:50:16:98:75:99:2a:9c:43:
bb:6a:3e:17:c6:56:77:d6:22:16:f6:c5:a4:99:25:b0:b6:4b:
3f:7e:6d:c1:10:71:19:59:e3:da:25:80:74:cb:ee:d6:3e:9d:
7a:6d:b4:e4:2a:6e:c2:92:80:c1:c1:58:f6:87:fa:eb:80:55:
13:64:12:ea:9e:c9:bd:7f:c2:d9:21:0d:fc:c9:66:41:75:96:
5e:f5:2e:06:7f:fd:ba:72:54:ac:e7:7a:d9:30:91:58:30:5d:
2d:cf:69:7c:95:44:c4:86:e6:21:9a:ee:c1:1c:5b:6a:dc:0c:
4c:cb:8e:be:e7:ef:25:c9:a7:91:d0:9f:ad:d3:0e:c2:06:8e:
b6:05:4b:cd:02:17:d7:a6:c6:75:4f:ea:b0:f5:28:48:7f:92:
52:11:49:66:97:d3:9e:35:eb:68:34:af:74:63:4d:3f:25:fd:
72:54:ca:92:3e:7a:70:84:f3:ef:8a:26:34:55:bf:7d:7f:33:
44:a1:8a:ba:b0:c2:e4:8c:6a:6a:a1:f2:98:c0:56:69:ba:06:
56:31:1f:57:d2:7e:eb:2c:a2:de:4f:cf:37:59:65:81:52:19:
c8:ca:99:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:55:21 2025 by rpki-client