Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4eb988d3-93d8-36ab-8242-a5c674ee1254.roa
File: 4eb988d3-93d8-36ab-8242-a5c674ee1254.roa (raw, json)
Hash identifier: nRfNNzhdgrStixcCIH0c6JzoFLVnL1naVYwuUHPpXWs=
Subject key identifier: 6E:2C:08:04:F5:17:0E:7D:48:E7:00:8B:4B:D8:7A:20:5D:74:8B:2F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CE0C40AD29BD6248DCD56FE80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4eb988d3-93d8-36ab-8242-a5c674ee1254.roa
Signing time: Wed 09 Feb 2022 05:00:00 +0000
ROA not before: Wed 09 Feb 2022 05:00:00 +0000
ROA not after: Wed 16 Mar 2022 04:00:00 +0000
asID: 14618
IP address blocks: 136.8.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e0:c4:0a:d2:9b:d6:24:8d:cd:56:fe:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 9 05:00:00 2022 GMT
Not After : Mar 16 04:00:00 2022 GMT
Subject: CN=894118c4-bc84-4d0d-b73b-3c4a24992618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:71:d5:fe:f0:d6:cb:68:7c:d0:89:24:f5:85:
b1:d1:a5:66:ed:e7:97:d8:a8:ea:16:5f:7c:c4:0b:
a4:5e:27:a9:9a:f6:51:e4:45:ca:df:2e:99:88:61:
7d:fd:d9:c0:ff:28:ef:25:d5:0d:89:aa:7c:04:62:
96:e0:4f:9e:f4:cc:5f:53:4d:6b:97:08:a4:43:77:
04:dd:74:06:d1:61:c5:db:a4:03:0b:43:67:82:65:
07:99:be:4d:c7:bc:ad:ba:6b:85:5d:0c:68:1e:d1:
9d:c5:40:2c:60:67:39:58:e3:84:2e:58:af:0f:c4:
ea:e3:31:d8:f7:98:60:e6:6b:20:41:20:cb:10:7d:
ff:39:ca:2f:3f:99:9a:e9:2c:d3:27:f1:d7:ba:6c:
a4:c7:99:22:98:25:df:d9:16:23:2e:ab:e6:77:ce:
30:ff:20:73:d0:85:35:49:06:2e:06:e8:57:a3:ee:
d4:ed:fa:9b:6d:17:46:fd:ba:cc:c3:91:09:28:4f:
fc:12:50:e2:71:40:d9:a0:61:82:fa:95:ea:52:6a:
9c:90:80:7d:58:0b:18:d4:82:af:a1:43:60:21:f7:
11:6d:89:f7:8f:51:dd:9d:b1:e2:79:2a:45:8b:41:
fc:29:26:b8:06:33:97:03:66:b4:89:8b:aa:cf:d1:
96:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:2C:08:04:F5:17:0E:7D:48:E7:00:8B:4B:D8:7A:20:5D:74:8B:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4eb988d3-93d8-36ab-8242-a5c674ee1254.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.8.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:ef:21:50:17:6e:36:42:76:1c:35:55:b2:22:51:e0:ea:9e:
85:e2:ff:29:b9:2c:df:fc:98:99:09:3b:ea:a0:62:55:f1:a5:
3f:7a:82:f1:1e:d6:c5:30:65:23:d7:0a:52:03:e6:ad:c0:ba:
2a:93:a1:10:f0:c9:5d:f7:67:4f:be:a1:b5:ab:ad:ac:56:f4:
b3:89:55:b3:96:34:18:3a:81:54:07:8b:a8:3a:13:bc:db:61:
ce:2b:41:86:ac:21:67:ae:3e:8e:a3:ee:a2:43:1d:31:b1:2e:
ac:90:55:df:f1:a6:a5:14:5c:f3:6a:55:ea:2a:90:a5:e4:be:
50:05:d2:27:cf:e5:05:09:e9:ab:3e:26:99:24:a8:d5:14:f0:
07:49:a5:2a:83:05:95:b2:40:3e:ee:7b:02:3b:ec:57:95:71:
49:f6:c2:45:d1:d5:12:fb:27:64:99:46:a5:8c:08:81:0c:ea:
c3:0f:35:be:92:5b:df:2e:d8:96:33:57:95:50:98:49:5c:09:
a8:55:90:9e:a9:09:aa:6a:d6:3d:b2:fc:e6:26:7d:45:0b:82:
e8:7a:86:87:3a:cf:60:fc:5d:cf:39:f4:5f:90:10:f4:6e:ce:
49:df:fa:19:09:b1:5c:a9:36:13:33:b5:a9:58:6b:c8:1e:94:
c5:3f:0b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:22:49 2025 by rpki-client