Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7bfce012-1efc-3541-ae3c-7db1ada6a51c.roa
File: 7bfce012-1efc-3541-ae3c-7db1ada6a51c.roa (raw, json)
Hash identifier: jqRU/lpofUIZi67k6Rvdm6WoxU9i9CmvTWJVoumIp9o=
Subject key identifier: 0A:F3:D6:30:4C:C4:AD:44:85:F9:02:3A:4B:D6:76:C9:CE:C9:90:0B
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584065821BA32BFE1C16290C4D80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7bfce012-1efc-3541-ae3c-7db1ada6a51c.roa
Signing time: Wed 28 Dec 2022 12:00:00 +0000
ROA not before: Wed 28 Dec 2022 12:00:00 +0000
ROA not after: Thu 02 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 136.10.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:65:82:1b:a3:2b:fe:1c:16:29:0c:4d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 28 12:00:00 2022 GMT
Not After : Feb 2 05:00:00 2023 GMT
Subject: CN=73894dbf-79f7-4aab-8d44-a8dfefd8c106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2e:d6:54:4a:a6:81:f1:9f:71:3c:fa:b3:4c:
d1:b5:0d:c5:40:6f:c7:7a:d9:e6:18:1c:06:54:db:
78:0a:c4:66:7f:e2:e2:ed:f2:0d:30:02:66:7b:dd:
34:ff:98:f2:dd:82:5f:3a:7c:73:e8:1e:b7:fc:2c:
42:59:22:8c:64:3c:db:9b:ff:c4:cd:72:d4:c0:3c:
5d:7a:10:2f:49:cd:30:76:fd:9c:c2:79:ee:43:f1:
46:6a:77:8a:c7:71:42:a9:9b:28:0e:33:7a:40:72:
dc:2f:58:90:7a:33:06:2b:cf:c9:db:5f:e6:c8:14:
eb:e9:12:0b:91:87:12:3e:9c:d9:3b:72:7a:da:dd:
67:c8:e6:08:e3:b0:86:66:1b:a9:31:1a:7a:ee:fc:
de:4b:4e:1f:c9:8b:49:e0:cf:b6:e0:d8:27:2d:95:
03:cc:d3:cb:8d:74:c6:53:d7:0c:cc:3f:74:04:7d:
54:e2:9b:2e:59:7d:44:9c:68:51:0f:44:5d:b9:74:
28:4f:98:23:43:f6:85:1b:5b:47:c3:e3:48:2d:32:
8c:17:d8:f5:0a:64:21:99:b1:93:f0:32:9f:3b:54:
fb:f9:e8:b2:58:1e:c8:00:b5:d1:b1:b0:06:aa:21:
b8:56:39:03:fe:46:92:b7:00:93:31:86:18:6f:89:
14:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F3:D6:30:4C:C4:AD:44:85:F9:02:3A:4B:D6:76:C9:CE:C9:90:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7bfce012-1efc-3541-ae3c-7db1ada6a51c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.10.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:31:e4:ff:28:f7:83:69:5b:67:4b:51:7e:71:11:02:16:14:
b6:d0:d6:10:e3:a6:bc:e0:ac:ad:9d:49:2e:ae:8a:76:2c:57:
03:88:41:48:4d:99:dc:8e:46:d3:68:63:eb:7b:6e:8c:66:dd:
cf:1f:36:70:77:e2:d2:6b:7e:52:46:49:2f:ec:f4:e5:47:aa:
77:59:a9:d6:31:4c:f3:86:ca:93:cf:fb:b4:0c:1b:3f:99:a4:
12:bf:39:4c:a6:25:e8:40:53:1a:09:46:10:54:d4:10:6a:ec:
24:c4:99:60:12:48:2a:35:8d:7e:71:fe:87:e7:4b:b2:2f:b9:
27:42:a6:10:fd:3e:1a:1d:44:35:5b:de:e7:ad:98:d8:8f:18:
00:1a:93:e2:a1:8e:6c:c7:ec:a0:12:7f:0b:ac:2a:81:85:05:
30:b3:11:e7:c1:10:b1:17:9c:9a:c7:d2:24:0f:b2:d2:37:78:
ae:8f:b4:0f:25:8e:59:d0:a0:f6:ab:4d:d5:6f:41:94:ee:05:
6f:03:0a:c6:c3:21:0b:ff:a2:e6:72:03:91:87:aa:31:fa:cd:
29:82:ac:f3:fb:f1:f7:d0:a4:bc:ff:53:21:9a:66:e4:a6:ce:
3d:9d:c8:f4:a7:eb:52:b8:b3:ad:ae:7b:65:20:d5:b5:10:61:
1a:15:ee:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:40:11 2025 by rpki-client