Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5be7595c-c1aa-3ad0-9330-ff56fc12e28b.roa
File: 5be7595c-c1aa-3ad0-9330-ff56fc12e28b.roa (raw, json)
Hash identifier: tDM8jHBUElrW92YGFb61uwYL0PFUTvGbE+GCbV9ePKs=
Subject key identifier: CA:0E:C4:63:C6:30:9E:07:A4:72:48:4E:DE:1B:35:7C:36:CC:89:4D
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FC871A60E2FD5DCBF42A1DF80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5be7595c-c1aa-3ad0-9330-ff56fc12e28b.roa
Signing time: Wed 02 Nov 2022 12:00:00 +0000
ROA not before: Wed 02 Nov 2022 12:00:00 +0000
ROA not after: Thu 08 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 136.1.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:c8:71:a6:0e:2f:d5:dc:bf:42:a1:df:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 2 12:00:00 2022 GMT
Not After : Dec 8 05:00:00 2022 GMT
Subject: CN=0d22f9c3-ba19-4cd1-99b0-69683d1518a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a7:6e:47:8a:b6:15:9a:29:24:8a:af:10:1b:
32:46:4e:b7:6e:74:b3:d8:52:99:6c:ca:f6:8e:ef:
3e:c2:eb:9e:7b:f4:a2:a9:46:82:0c:ad:f1:95:cd:
04:44:f4:5e:80:3f:85:c8:a9:aa:0c:41:3e:ac:6b:
30:9d:9f:f3:3e:71:02:76:f9:8f:e5:c5:14:a1:e5:
f7:b5:47:d8:01:11:af:73:b5:d1:d7:28:62:c3:24:
89:ff:1e:7a:0b:86:40:f9:8a:36:3c:86:b1:47:aa:
fa:e1:b6:78:3f:29:b9:05:fb:92:d9:74:f0:f8:ea:
14:50:03:de:77:b6:b4:86:61:b7:eb:52:53:68:f4:
7d:6b:95:69:1c:c7:11:72:ed:93:a5:77:28:32:62:
a5:5a:1f:82:20:e9:61:78:a9:58:8e:15:0f:4c:ab:
36:92:f7:7a:1c:21:6b:60:0d:f7:52:c1:3c:b2:64:
07:a3:26:c7:21:33:90:11:4f:8a:2f:3c:91:ba:19:
c4:ae:cb:2b:09:59:ed:a7:e1:88:f4:ce:3a:51:59:
3f:f6:0c:72:61:7c:5c:e0:4d:cf:18:a5:f5:fd:8f:
97:c0:67:15:d2:a6:20:52:9a:ce:48:48:30:f5:30:
d7:4f:e4:87:24:97:db:e1:94:1e:d0:f9:17:9f:49:
56:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:0E:C4:63:C6:30:9E:07:A4:72:48:4E:DE:1B:35:7C:36:CC:89:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5be7595c-c1aa-3ad0-9330-ff56fc12e28b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.1.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:b1:7b:b3:39:a6:24:47:4c:bd:58:4c:4a:a0:b3:a4:f9:5c:
d2:7e:32:63:3e:31:fc:18:13:89:b4:f0:3b:d4:02:a9:d1:b8:
37:09:68:12:e0:23:ab:4a:79:09:ca:1c:3c:56:f9:e8:ba:21:
13:0a:07:0d:8d:3a:e5:d6:09:3a:a0:b9:5c:40:7e:28:de:1e:
24:60:46:0e:3a:3a:38:51:2c:fc:a9:9f:3a:49:69:8f:f6:85:
8f:ff:d3:b4:ee:dc:a7:13:07:f4:37:e6:fa:c8:16:9d:eb:8a:
99:72:17:08:f0:b7:f4:65:5d:8a:2d:85:33:a9:60:88:c0:fc:
3a:df:df:1b:1d:48:d6:4d:20:db:d8:e2:84:da:01:26:48:6e:
18:f5:96:ac:5a:31:a2:63:33:30:67:1c:fe:03:24:0a:ec:e5:
77:ef:17:4c:2a:1e:26:95:f2:0f:af:94:e2:a5:e1:a8:57:5c:
e2:94:41:4b:94:05:ee:c5:6b:f2:21:a1:d2:58:00:67:6b:70:
c9:15:55:e4:fd:3d:3a:35:3c:e7:e8:e6:9c:3d:b8:a9:d2:ab:
88:0b:92:75:72:58:7f:db:78:2c:d0:ce:21:6f:b1:82:dc:65:
9c:b2:9b:16:a1:d1:f2:35:31:a5:33:43:e0:e8:8e:7e:e9:f0:
7c:f3:2e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:05:08 2025 by rpki-client