Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/62db2e99-66b7-3598-ad92-28ec4c2b1d8f.roa
File: 62db2e99-66b7-3598-ad92-28ec4c2b1d8f.roa (raw, json)
Hash identifier: 4hayzKiJSOibqHsINNYg+Ee2ed5u6/wZP00ftO/8A5s=
Subject key identifier: 8E:17:E1:18:58:B8:12:FE:43:ED:F9:72:CD:3F:0F:6D:B4:68:8A:6A
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583C928A0673EBD1C54A2B8B8780
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/62db2e99-66b7-3598-ad92-28ec4c2b1d8f.roa
Signing time: Wed 12 Jan 2022 05:00:00 +0000
ROA not before: Wed 12 Jan 2022 05:00:00 +0000
ROA not after: Wed 16 Feb 2022 05:00:00 +0000
asID: 16509
IP address blocks: 136.8.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:92:8a:06:73:eb:d1:c5:4a:2b:8b:87:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 12 05:00:00 2022 GMT
Not After : Feb 16 05:00:00 2022 GMT
Subject: CN=06c138c9-b9ed-440e-ac2a-ddb55b691b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ec:45:0e:99:04:0d:68:fe:3e:70:f2:a4:a1:
2d:f6:e7:33:26:f2:6a:22:6b:9b:db:fd:b9:62:df:
b7:20:7c:0d:0f:1a:33:18:c1:12:6f:be:84:3e:ac:
3c:8b:d1:c2:7c:70:b1:e2:2f:d0:d7:92:77:44:ea:
62:a6:ab:12:18:9b:26:f3:ce:f4:01:77:b2:07:e3:
6e:aa:40:69:01:b0:eb:13:68:2f:f7:ef:11:bb:2b:
31:6f:30:8a:36:e6:f4:a3:02:9b:67:02:58:da:db:
ed:9c:86:cb:c3:d3:30:ba:a3:6b:7a:6f:33:1b:3e:
d4:09:4c:c9:e1:36:41:4a:22:89:5f:71:10:97:3d:
b5:1c:7c:7b:79:12:08:8f:ad:86:2b:dd:14:ed:7a:
1b:8c:24:41:65:cd:8e:a9:5e:5f:0b:71:af:79:c8:
de:41:a4:47:14:89:40:fe:c5:72:fc:d5:9e:04:ff:
0f:37:ba:02:b3:da:7c:73:74:cc:85:23:cd:3c:0b:
79:e6:33:a9:79:e3:2a:55:e0:05:f9:ac:60:19:89:
9b:0e:81:51:3a:89:ff:a9:a6:cc:da:5f:65:f0:b0:
bd:b0:e9:37:aa:f7:8a:87:bb:e3:fc:18:50:37:6d:
9e:dd:25:cf:87:76:6b:8d:09:7e:6a:d2:fe:21:6c:
1e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:17:E1:18:58:B8:12:FE:43:ED:F9:72:CD:3F:0F:6D:B4:68:8A:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/62db2e99-66b7-3598-ad92-28ec4c2b1d8f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.8.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:81:57:37:00:72:8a:41:69:2d:c7:ec:33:9b:1f:ce:2d:19:
03:b7:36:72:cb:8a:95:77:87:8c:b3:93:0d:3c:50:ae:75:03:
15:5d:1c:bb:2e:10:7f:b4:e1:30:61:6a:2d:3e:c6:64:7d:83:
e5:cd:f6:d4:3f:f3:55:a6:fb:70:1a:00:8f:79:ac:fc:02:fd:
9f:e6:ae:25:40:47:d5:88:ae:ac:3e:04:e6:92:2d:64:d3:11:
1c:9a:9b:cb:a0:b0:5e:69:84:b3:00:84:58:1b:ce:c3:73:e1:
cf:9b:58:ff:15:43:40:77:48:9d:b9:7e:67:ec:ac:6c:f3:d8:
fd:c0:2f:c3:86:da:c7:c1:84:3c:05:9f:18:e1:4e:c3:f8:96:
73:95:9f:9f:e6:f4:70:70:17:76:18:86:dd:8e:35:aa:c7:8d:
e2:40:e0:c7:9b:e1:86:c8:fc:07:d5:71:e9:fe:fa:3f:a7:a4:
dd:68:ed:d1:fd:3d:8c:9f:10:bf:97:ae:f0:c3:05:34:f5:4f:
b9:d3:a6:19:f0:2d:11:b9:69:39:db:55:1c:de:ca:a8:18:05:
b0:7d:c7:86:47:3d:ec:a7:6f:24:dc:ce:63:36:e4:27:da:8a:
a5:64:9f:a2:cb:dd:b1:db:28:fb:95:c3:c2:4f:3b:5d:ae:f6:
28:fb:b6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:58:25 2025 by rpki-client