Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5e8c4ff5-6df6-3aee-8bb2-3bf541d4d443.roa
File: 5e8c4ff5-6df6-3aee-8bb2-3bf541d4d443.roa (raw, json)
Hash identifier: DvquoLyJgbSewBwXJME3wIUn/eR6KxJwbH5RhWCrq/U=
Subject key identifier: 13:BF:78:08:2A:0E:45:E6:D6:79:28:BA:D9:9F:D6:11:D0:37:F6:DF
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584016A44536A6C0520BC48D9280
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5e8c4ff5-6df6-3aee-8bb2-3bf541d4d443.roa
Signing time: Wed 30 Nov 2022 12:00:00 +0000
ROA not before: Wed 30 Nov 2022 12:00:00 +0000
ROA not after: Thu 05 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 136.18.24.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:16:a4:45:36:a6:c0:52:0b:c4:8d:92:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 30 12:00:00 2022 GMT
Not After : Jan 5 05:00:00 2023 GMT
Subject: CN=69d84c63-d21d-4b17-af3b-087cd3a6cd61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:52:d0:87:dd:58:3a:97:4f:ec:03:fc:38:21:
5e:dc:25:b0:e8:68:c4:db:b9:01:00:23:b5:40:1e:
9e:22:5d:cf:ab:95:47:fc:65:01:22:aa:cc:60:3d:
ae:83:cf:47:dd:c4:90:bb:be:6e:41:5e:54:aa:a5:
29:07:a9:39:91:e2:da:0d:55:f8:31:b7:2d:27:c1:
34:7c:d9:ba:fe:b8:e9:17:d4:70:98:cf:ef:66:a3:
da:7a:ce:e6:bb:8f:41:29:e9:7c:e6:78:fe:2d:29:
79:a9:db:42:3f:7d:0a:f4:ec:19:01:0d:8e:45:0b:
09:ae:f6:70:7e:2e:36:0e:59:1b:00:b1:bd:b1:6c:
65:d8:08:0b:98:42:fa:84:18:1d:c7:39:57:93:50:
c3:b4:9a:24:49:2c:61:95:9f:8d:26:86:d4:a9:60:
96:18:1b:ba:50:c6:82:00:b7:08:f9:8b:ef:d9:84:
ac:65:ac:25:4a:e5:7c:da:43:07:fa:61:af:d0:7c:
1f:2b:85:53:85:52:2f:f7:77:ee:9e:90:71:e6:7d:
e5:d6:5d:58:4f:2f:a4:95:ba:01:51:51:8d:ad:e2:
cd:98:fe:b0:27:63:a2:dc:2d:36:b7:e3:be:66:79:
e6:72:dd:dc:64:88:4a:9f:6a:10:8b:f2:32:63:56:
d5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:BF:78:08:2A:0E:45:E6:D6:79:28:BA:D9:9F:D6:11:D0:37:F6:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5e8c4ff5-6df6-3aee-8bb2-3bf541d4d443.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.18.24.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:b3:1c:ef:0a:a1:21:11:a1:b7:e6:84:b4:12:c3:be:94:c1:
fd:15:62:96:ad:d7:b4:d4:02:b3:90:c6:0d:60:5c:8f:ee:e0:
fc:e8:29:a5:a3:af:fc:aa:e4:0d:40:01:4e:94:66:72:28:76:
5c:0b:3c:d4:ee:6e:41:9d:26:97:00:36:d8:79:7c:9f:fd:7c:
a0:e6:d8:79:63:6b:37:9b:7a:27:3b:8f:2c:18:9c:c9:bd:7f:
04:f8:01:7e:a0:78:e6:ce:c1:6e:3f:f5:50:96:70:aa:54:70:
e4:b4:c2:5e:ff:96:00:ec:3b:bf:10:e1:16:d5:0d:05:e1:7e:
1b:49:e1:77:ee:74:c8:b0:56:8c:01:e0:b7:ad:0b:aa:85:77:
e4:e3:b9:5f:87:a9:b4:04:71:44:91:f9:63:25:67:1f:b0:87:
e0:16:6e:b1:cd:20:f4:13:31:1f:70:19:a9:61:4e:12:c1:79:
71:7d:26:75:ee:0f:bf:3a:bc:0c:66:14:ff:39:c7:0a:56:67:
5c:d0:a3:3e:5a:d9:30:e6:e2:bf:11:02:f0:ec:7c:ee:16:05:
fb:af:22:7d:26:80:aa:bc:04:c2:3a:58:07:fc:8c:c8:9e:1a:
52:d2:c0:6e:81:cd:ed:ac:48:51:9c:57:8d:1c:96:a5:e7:19:
64:14:ad:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:10:38 2025 by rpki-client