Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/72051278-ad98-32e0-8ed8-c5cfeeca6819.roa
File: 72051278-ad98-32e0-8ed8-c5cfeeca6819.roa (raw, json)
Hash identifier: f3JesyfhiQjlEIxnd6KZmzFqmOh47155Dljjy2O5z5E=
Subject key identifier: CC:9E:73:1D:E0:08:81:71:2E:6C:59:AD:22:40:CF:8D:68:77:9F:DA
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583C926C67B5BEF0043C30160D60
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/72051278-ad98-32e0-8ed8-c5cfeeca6819.roa
Signing time: Wed 12 Jan 2022 05:00:00 +0000
ROA not before: Wed 12 Jan 2022 05:00:00 +0000
ROA not after: Wed 16 Feb 2022 05:00:00 +0000
asID: 16509
IP address blocks: 136.9.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:92:6c:67:b5:be:f0:04:3c:30:16:0d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 12 05:00:00 2022 GMT
Not After : Feb 16 05:00:00 2022 GMT
Subject: CN=f538f699-a7c8-4e37-9481-d9567765c795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:44:35:80:21:c4:60:4a:21:20:3b:eb:be:9a:
51:b8:17:15:d3:1d:f2:4b:6a:c8:3f:cd:d6:58:7a:
84:79:33:22:a5:1f:7d:09:c4:7a:18:5f:9a:7d:21:
36:b5:c6:78:02:e7:a7:1a:bc:7a:ee:93:23:16:dd:
7e:96:5c:af:ae:fd:c3:7c:60:d2:8b:eb:72:28:67:
5e:e8:10:d0:e2:6b:67:05:de:5f:67:3a:7c:37:35:
84:b2:3e:b3:01:16:18:e3:fc:c6:13:8e:46:42:a7:
37:08:3d:2d:b0:09:48:dd:79:98:72:56:6d:09:aa:
9e:64:ee:01:8a:fa:6f:83:d1:1f:ef:49:0e:03:0c:
97:ce:2e:6c:4e:49:bf:00:b5:21:4c:65:16:60:04:
a0:aa:e0:62:7d:59:7e:62:22:85:86:7f:f2:8d:aa:
76:6e:ab:24:a0:58:40:b3:e8:90:3f:61:94:ae:84:
88:9f:73:47:af:f2:ff:92:f6:43:65:fd:2d:a2:c4:
b1:b0:35:a8:30:24:03:51:e8:33:09:ce:82:c6:eb:
17:45:2b:83:37:7c:ea:50:b6:c6:b3:f3:4f:36:2f:
f4:4b:3b:19:fb:51:73:b8:15:28:a0:ba:0f:8d:06:
8c:b7:9c:ab:15:9d:f7:3d:1e:e6:19:3d:74:32:c7:
86:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:9E:73:1D:E0:08:81:71:2E:6C:59:AD:22:40:CF:8D:68:77:9F:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/72051278-ad98-32e0-8ed8-c5cfeeca6819.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.9.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:5f:05:de:0e:52:dc:94:96:ee:ac:01:7c:43:04:21:9c:1e:
39:0e:44:6e:53:cc:8f:3c:d6:17:fe:0c:44:20:c2:96:5b:25:
89:64:5e:9f:6b:7e:61:6d:66:2f:2b:f4:dd:4e:c1:34:f6:63:
e5:70:a5:78:c5:8f:68:1b:5e:69:0d:df:49:c2:eb:f1:48:4c:
00:fb:87:98:22:48:68:52:3a:87:2c:4b:05:12:da:0d:c7:2a:
58:c7:da:ae:aa:6f:13:f7:4e:99:70:da:d8:fa:a2:e3:a1:8b:
4c:c2:56:bb:26:08:ce:7b:dd:ab:c9:2d:bc:b4:b7:0a:b5:11:
58:e7:19:6c:ca:fd:f5:5a:ea:26:74:a2:42:b3:70:a5:7e:c3:
99:33:27:f4:6a:fa:ac:63:f5:6d:8c:52:4e:50:32:0d:f5:c8:
d3:a5:f1:06:38:6e:74:f3:b1:0a:47:30:79:97:5e:5d:d4:bd:
f5:0a:38:0e:fe:fa:bb:ac:0b:d0:81:3d:4c:a2:4b:d0:1c:8d:
68:07:67:e4:39:b0:5a:81:ce:af:6c:cf:c3:47:59:d8:94:2f:
c4:ef:d6:c8:5c:8b:7a:1b:b8:a2:50:79:3b:39:e3:d7:13:66:
f4:8a:05:6f:15:38:33:59:60:0e:c2:a4:d3:e8:6b:06:28:a8:
a1:54:32:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:56:13 2025 by rpki-client