Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6377b688-5448-381c-8d21-89fa28467ba2.roa
File: 6377b688-5448-381c-8d21-89fa28467ba2.roa (raw, json)
Hash identifier: pt4dzUNMqbOGSC9qPLT29Tfi+Rt3IKkCGOz+5FMvz5Y=
Subject key identifier: EA:EC:58:BB:A5:45:68:B6:5A:34:66:3E:70:BE:88:4A:B0:BF:62:2D
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F53C5ADC964A2D33B78521960
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6377b688-5448-381c-8d21-89fa28467ba2.roa
Signing time: Wed 21 Sep 2022 12:00:00 +0000
ROA not before: Wed 21 Sep 2022 12:00:00 +0000
ROA not after: Thu 27 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 136.18.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:53:c5:ad:c9:64:a2:d3:3b:78:52:19:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 21 12:00:00 2022 GMT
Not After : Oct 27 04:00:00 2022 GMT
Subject: CN=c4d8264b-d250-4cc0-872f-e694a5ccdf98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:dd:0d:a5:71:b5:65:f0:b5:a1:68:5d:fa:12:
0e:ed:7a:d4:69:8c:89:26:f4:b9:a4:76:98:3d:a2:
23:34:a6:a8:5f:4d:66:41:4b:0f:07:68:fb:b3:3a:
26:6a:6d:e9:31:30:05:eb:55:7b:5b:54:cf:dc:d8:
eb:66:a2:70:dd:c9:89:55:95:9f:43:da:5d:b7:3e:
c6:82:1f:ba:9d:c9:49:37:01:54:fa:80:2c:06:a5:
34:70:a8:a6:71:ca:16:ab:68:3b:7f:b6:7d:c7:d1:
04:6b:72:40:5f:a2:ea:73:2d:01:0f:60:c3:e8:50:
2b:2a:a5:1c:c5:69:1b:85:ed:24:ba:3b:7d:2b:4c:
79:76:15:06:fc:12:dd:f3:8a:7a:51:03:73:e0:f4:
a1:b8:70:37:0e:27:cb:35:40:47:82:e7:d7:dd:10:
21:87:f5:4a:c4:7c:15:0a:d7:d6:20:aa:75:ee:b9:
d6:6f:89:30:3d:1f:14:c9:71:33:4a:8d:cf:17:bb:
2f:c7:50:e5:f6:2b:f4:5f:a0:ef:e8:70:e4:f7:c3:
66:75:b5:37:54:82:c1:91:01:27:d3:8f:82:3b:d1:
e1:5b:b2:a5:f4:3c:e2:15:e9:45:76:d9:8b:44:e4:
e6:04:6b:0f:67:34:a7:f4:65:9c:3a:c3:9b:b3:6e:
ed:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:EC:58:BB:A5:45:68:B6:5A:34:66:3E:70:BE:88:4A:B0:BF:62:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6377b688-5448-381c-8d21-89fa28467ba2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.18.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:e7:11:65:d2:f7:70:03:8a:53:6b:ea:ea:51:46:ac:4f:c8:
57:fd:ee:62:53:12:28:67:3c:1c:ba:04:91:51:13:3d:b6:51:
7a:20:3e:fa:e8:fd:e2:d4:37:34:a4:b8:4b:93:79:a7:06:c4:
d7:70:26:15:84:7e:b6:b8:d7:93:b0:8a:3a:8f:81:9e:82:e4:
72:95:ef:a3:57:06:c5:cd:d4:b0:b6:e2:d4:9f:80:6d:a7:9c:
11:37:07:c8:fc:21:ca:1f:5c:7f:92:5f:22:1e:8a:8f:66:41:
59:08:04:b1:b4:f3:fc:a9:93:5f:cb:a1:85:e3:3b:02:92:45:
25:8e:42:b1:77:26:f9:92:54:bc:ec:c0:4a:3d:7c:d6:f8:28:
5b:e2:26:06:eb:1b:34:ea:d6:e3:74:12:f8:6d:14:7f:25:ad:
fc:e2:3b:7d:75:ec:bf:ca:db:3d:d0:e3:67:0f:ab:35:1d:27:
73:ab:43:f5:0a:c2:e0:fc:67:95:3a:df:5b:3b:b5:51:05:37:
95:6a:9c:66:8a:4a:ad:89:b9:ff:f3:28:61:98:c7:78:51:bd:
c7:f9:4a:3f:b7:a4:3a:90:8e:51:4d:71:c4:3f:72:03:34:9a:
47:84:8e:74:2c:68:9c:39:1b:86:cb:f1:07:2f:06:be:d7:9c:
db:00:25:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:25:58 2025 by rpki-client