Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/64b62b91-c3bb-3780-bd16-ae7899038fdd.roa
File: 64b62b91-c3bb-3780-bd16-ae7899038fdd.roa (raw, json)
Hash identifier: DALiLtWlk6bgHDLojD9VF01nfxdqNSGyr9CzCnBjknc=
Subject key identifier: A3:1E:E8:4B:02:40:B0:2B:6D:5A:66:B1:31:56:0B:87:E4:68:0D:56
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FC82E7226BBA4510B21BD3A00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/64b62b91-c3bb-3780-bd16-ae7899038fdd.roa
Signing time: Wed 02 Nov 2022 12:00:00 +0000
ROA not before: Wed 02 Nov 2022 12:00:00 +0000
ROA not after: Thu 08 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 136.2.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:c8:2e:72:26:bb:a4:51:0b:21:bd:3a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 2 12:00:00 2022 GMT
Not After : Dec 8 05:00:00 2022 GMT
Subject: CN=88eac0e0-36f6-4af9-a95a-bcb49bccbb80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f5:db:06:23:cb:72:73:fd:2a:b0:62:cf:b9:
0e:53:f5:2b:f6:35:dc:bf:7d:26:56:1b:60:40:b5:
f0:45:aa:4e:6d:72:d2:5b:e0:b2:57:cc:bf:39:12:
b1:97:3a:bf:96:2f:d1:83:45:eb:51:9d:08:eb:89:
68:db:ad:6b:f3:bb:53:bd:6e:3c:fb:38:2d:6c:8b:
f7:20:a4:31:2e:e0:be:b5:7b:e3:7e:f0:e0:2d:92:
f5:36:e0:64:d6:75:25:34:15:82:64:1a:e6:d7:4f:
7a:71:a7:c4:4e:f8:92:c3:be:43:be:5b:44:fd:3a:
fc:d2:e5:33:8c:ab:89:4c:88:1a:cc:60:db:fe:72:
5f:d1:96:de:39:36:ab:ec:44:fc:67:ae:bc:8b:af:
0a:ce:c5:7d:52:d4:a6:09:ee:b4:4f:d7:3d:d3:17:
27:70:10:b3:0e:7b:cf:1d:61:19:2d:2f:32:33:4f:
0e:c5:14:03:b5:0d:92:ed:1d:c7:95:7c:41:ad:48:
81:db:7e:76:b4:dc:66:05:c6:4d:fe:4c:cf:92:0b:
79:5e:6a:7a:2b:ac:b7:6f:3c:49:10:06:0e:a6:93:
9c:ec:3e:1f:0a:9b:1a:47:79:ec:d0:67:43:58:84:
f4:25:ce:fd:48:53:a2:b1:dd:21:bc:52:a7:48:d4:
4a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:1E:E8:4B:02:40:B0:2B:6D:5A:66:B1:31:56:0B:87:E4:68:0D:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/64b62b91-c3bb-3780-bd16-ae7899038fdd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.2.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:8d:34:fd:af:85:99:ad:82:94:55:68:79:31:73:65:ca:61:
e8:cd:bc:30:83:70:e7:92:68:ef:d8:fa:31:bf:51:f8:82:c4:
41:2d:53:67:97:0d:25:fa:cb:ef:23:fe:7f:3c:b2:80:d0:1d:
f0:fc:c6:f5:9a:71:36:06:73:73:9f:c0:9e:12:7f:35:34:a2:
71:da:2a:ee:ee:19:9d:8b:ef:a0:00:4b:41:25:08:d1:79:3e:
7b:5a:01:c4:1b:43:b3:7a:5b:43:d2:5e:10:79:ff:22:f0:f6:
cb:b0:fd:de:67:32:b6:b0:0a:a7:57:51:6b:4c:cb:e3:80:26:
62:70:62:4c:67:86:02:df:21:2d:6d:a9:11:54:53:da:e8:32:
7d:8e:5d:9c:0a:7b:91:ce:7e:95:1b:86:83:55:2f:f6:10:91:
87:c4:1f:aa:e1:94:b5:c8:ee:3e:ec:8f:c7:42:27:d1:8e:4b:
d4:df:05:6d:92:42:38:a6:82:fb:d6:92:cc:12:1a:98:18:48:
4d:a7:de:5d:13:0c:fc:0b:62:42:27:e6:ca:eb:29:1b:62:79:
d9:9c:a8:53:08:0d:d2:b5:90:ea:7c:16:a4:a6:4e:d7:f6:02:
a9:07:83:0c:7b:9b:8e:9e:72:be:15:b5:7a:6d:12:52:bb:dd:
bd:cd:ee:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:30:11 2025 by rpki-client