Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6c4ee0f8-acb9-33aa-8113-744bc7e749b1.roa
File: 6c4ee0f8-acb9-33aa-8113-744bc7e749b1.roa (raw, json)
Hash identifier: aY9iRZQouV+1Xwif0wrXkI+OCnnNCp6w9VxEBfTiTWA=
Subject key identifier: C7:20:DB:48:72:70:7B:C1:60:22:14:F0:36:7C:C5:B1:1F:64:6C:84
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583EDD1FCC582DB8895F0CD91110
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6c4ee0f8-acb9-33aa-8113-744bc7e749b1.roa
Signing time: Wed 10 Aug 2022 12:00:00 +0000
ROA not before: Wed 10 Aug 2022 12:00:00 +0000
ROA not after: Thu 15 Sep 2022 04:00:00 +0000
asID: 8987
IP address blocks: 136.18.52.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:dd:1f:cc:58:2d:b8:89:5f:0c:d9:11:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Aug 10 12:00:00 2022 GMT
Not After : Sep 15 04:00:00 2022 GMT
Subject: CN=7e09aff7-4a07-4f04-b49e-de77abced53b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:fb:f6:6f:dd:84:3f:85:8c:42:ee:1d:f6:4d:
2e:5f:33:ce:ec:3b:e3:57:3d:26:be:9f:18:f9:aa:
75:b8:5e:60:ff:a8:a9:e0:f3:72:30:e7:97:0c:2b:
39:b4:e9:7a:5c:31:dd:37:f6:3b:f1:a9:e2:b7:1e:
83:3f:b0:67:96:d3:8f:ed:be:06:f3:eb:35:14:38:
7a:15:08:1e:65:d8:da:d0:1f:90:a2:86:08:49:9a:
b1:ff:56:aa:58:02:76:74:83:df:39:02:8e:c4:81:
a5:0e:ae:d5:7a:ff:64:85:c4:67:5c:7a:74:88:59:
06:21:06:6c:f5:bf:a2:5d:9f:52:9c:e6:96:fe:77:
ca:cd:ee:9b:69:bd:dc:f9:15:01:30:30:6a:a3:d9:
24:f9:24:83:29:02:49:93:d2:19:c2:75:f1:6d:0d:
79:16:51:04:b8:71:87:64:2b:5c:21:a6:28:38:84:
d5:dd:4c:ab:2f:45:ce:57:7e:70:1c:2c:44:87:54:
34:0a:93:11:14:48:b5:00:de:4a:0e:4c:5b:9b:92:
1c:bd:66:15:14:f7:5c:f0:30:01:af:ff:76:2e:ff:
cb:65:a9:31:ca:02:af:85:5e:43:57:7c:43:00:e8:
a7:68:84:49:35:47:f9:3a:a8:1d:b6:af:26:01:39:
7d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:20:DB:48:72:70:7B:C1:60:22:14:F0:36:7C:C5:B1:1F:64:6C:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6c4ee0f8-acb9-33aa-8113-744bc7e749b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.18.52.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:9c:6b:85:62:fe:db:fb:2f:f1:e5:2e:d1:94:12:f2:00:17:
e4:46:60:be:e3:f2:12:c3:b5:03:c9:e8:45:fd:5b:0a:2d:9b:
80:bd:ee:23:37:e0:9a:6e:cb:29:d3:c8:70:78:07:fc:ae:9b:
6e:1c:e1:67:a4:4b:bb:e2:ee:5d:82:d4:ef:21:cc:22:33:ca:
aa:f0:6e:10:dd:1b:f9:eb:3f:0a:47:34:86:cc:da:e9:19:13:
3c:e2:9b:d2:32:b0:c4:33:66:9a:27:23:1a:90:38:d2:f0:33:
89:f0:0b:2a:a1:e1:56:0e:fe:99:2f:96:6f:cc:4c:6a:18:cd:
67:a8:05:4b:54:cf:d7:37:62:7d:0e:31:2a:4d:4a:58:26:88:
77:e6:4a:09:b2:90:4e:84:fc:74:9e:56:db:bf:58:ae:ec:78:
22:b8:4c:9e:d4:1b:ba:6b:27:58:a5:a8:ca:ea:de:fc:4f:23:
a5:49:29:62:95:e1:55:45:9a:55:c6:98:3a:d8:aa:4e:de:14:
86:e9:48:27:54:d7:3a:51:bd:f1:69:41:75:91:5e:1b:a3:26:
7b:4a:c8:f4:7e:93:37:3a:ea:f2:0a:81:db:f2:ef:96:2a:27:
25:20:5e:66:95:35:d5:0c:72:b6:47:a3:3a:2b:4d:b1:04:56:
c7:23:09:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:33:09 2025 by rpki-client