Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/74c31b30-17d6-3114-b1dc-dd8eb9eaea9e.roa
File: 74c31b30-17d6-3114-b1dc-dd8eb9eaea9e.roa (raw, json)
Hash identifier: s8R8LfnaLHx7WHZmT9Knejvi2V1/pJpBdOlzZgn4MDU=
Subject key identifier: 68:EE:82:A3:AF:6A:33:93:FF:C2:D8:7E:73:35:74:02:A5:FB:5E:9B
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D2ED1A4B4FA39CE3634E39980
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/74c31b30-17d6-3114-b1dc-dd8eb9eaea9e.roa
Signing time: Wed 09 Mar 2022 05:00:00 +0000
ROA not before: Wed 09 Mar 2022 05:00:00 +0000
ROA not after: Wed 13 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 136.10.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:2e:d1:a4:b4:fa:39:ce:36:34:e3:99:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 9 05:00:00 2022 GMT
Not After : Apr 13 04:00:00 2022 GMT
Subject: CN=0c17c3fc-76ca-4bfe-8193-6a2072acf94b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:0e:ff:1c:51:1c:de:d4:dc:2f:f3:70:db:eb:
25:7f:5d:68:92:76:0d:df:47:b7:e6:b0:85:63:93:
62:e1:7a:f5:23:c9:53:2a:a5:12:fc:d7:4c:d2:f0:
5d:b5:cf:79:8a:a7:8b:49:c5:25:09:26:b1:f8:5c:
b3:b8:35:c6:f8:5d:77:a8:90:4a:2f:5e:5e:27:c8:
9a:d7:dc:9f:f7:28:9c:cf:68:6f:38:49:37:34:72:
d0:3e:79:5b:e5:e8:03:8e:a7:9b:1b:c8:f1:cb:76:
73:e1:4c:1b:74:cf:90:95:34:4a:1f:2d:4e:bd:5d:
a4:98:43:08:ca:3b:24:23:83:a4:57:cb:59:70:60:
ad:6b:3a:2e:d4:f0:90:a9:28:35:0e:6f:2f:e2:27:
c1:4a:6a:39:7d:1e:0d:dc:4a:a4:a6:48:cf:60:5a:
a6:99:22:d7:14:97:8b:85:9f:45:89:03:32:46:cc:
0a:2f:dd:d9:16:b5:a8:05:f7:8b:eb:1e:1d:42:18:
46:1b:75:89:06:72:7a:0c:ab:39:40:8a:1a:24:cd:
3a:f2:a8:2a:69:be:10:4d:a3:0c:4b:56:fe:95:cc:
f5:cb:a6:cc:f7:e0:df:1a:72:e4:a6:66:ba:ff:0a:
b3:9d:e3:3a:22:9a:5d:af:2d:a8:b3:1c:d4:d6:57:
46:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:EE:82:A3:AF:6A:33:93:FF:C2:D8:7E:73:35:74:02:A5:FB:5E:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/74c31b30-17d6-3114-b1dc-dd8eb9eaea9e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.10.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:74:8f:e4:eb:7a:b6:63:92:87:1a:8b:1a:4e:e5:25:e7:3d:
7a:91:66:ba:4c:90:12:f9:8c:82:4d:c9:d6:58:8a:7f:a4:90:
dd:91:2a:0f:26:c2:d0:f2:d9:1c:cf:76:6f:18:be:a1:95:53:
90:e1:31:ee:a7:67:54:87:3d:b4:ab:a7:ad:3c:7a:10:9e:f3:
82:c9:1d:2d:14:fa:c2:9d:e5:e8:e3:64:61:04:21:3d:8d:37:
da:ad:d3:91:3e:b3:76:a9:fd:f3:3d:cd:9f:fd:02:49:b0:85:
03:96:39:08:64:b1:e2:6b:30:a7:3c:08:9f:72:0f:7c:f1:67:
98:6a:71:91:50:9c:67:fb:f9:6f:38:c8:e7:cb:07:23:52:54:
a4:c8:29:b2:b5:d6:7d:c8:de:da:03:d5:5f:2f:76:01:c3:b0:
54:76:9a:ff:dc:1b:1b:39:e9:25:c1:a5:18:a7:10:09:a3:c4:
b6:1c:55:52:2d:dc:7b:21:3d:65:94:ea:58:48:73:37:e2:87:
30:54:0b:90:4a:df:1f:e6:07:6a:96:66:d3:b2:8b:42:5c:c4:
63:9d:1f:f2:cb:af:97:13:ee:62:72:c2:61:a8:90:84:fa:71:
73:58:91:d1:66:85:ce:52:11:a7:05:d3:2e:d6:06:4b:a2:f2:
24:da:93:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:32:58 2025 by rpki-client