Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/835a68fa-de7f-303e-8e79-e93541ac5faf.roa
File: 835a68fa-de7f-303e-8e79-e93541ac5faf.roa (raw, json)
Hash identifier: r9oHYanagXxzQzMkAs+thDxT1aunerRUM2XMmqfcoZc=
Subject key identifier: 6A:C8:8C:DE:CF:48:F3:4A:5E:A3:A6:DE:2F:D9:9A:20:9B:C8:44:7E
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FC81FB1250A24CCF0B046BF00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/835a68fa-de7f-303e-8e79-e93541ac5faf.roa
Signing time: Wed 02 Nov 2022 12:00:00 +0000
ROA not before: Wed 02 Nov 2022 12:00:00 +0000
ROA not after: Thu 08 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 136.8.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:c8:1f:b1:25:0a:24:cc:f0:b0:46:bf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 2 12:00:00 2022 GMT
Not After : Dec 8 05:00:00 2022 GMT
Subject: CN=62a6f26e-3676-4ffd-94d1-2de4066694ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:00:d0:0a:21:76:27:c3:c9:15:94:b7:c3:fb:
28:ce:4a:1f:30:eb:8f:46:91:eb:42:81:3f:cf:0c:
98:4e:e0:a0:fd:0e:e3:d0:af:67:18:36:ef:f2:e5:
22:61:b7:c9:f8:5f:45:d3:a8:b2:98:a6:41:6a:b7:
c1:79:fe:0a:b7:96:50:dc:b6:ce:b9:b9:89:61:6e:
d9:fc:56:47:79:d0:11:4c:f7:52:c1:d5:5b:7f:ce:
29:4b:46:7b:c1:84:f7:db:10:c5:35:d2:8b:b2:d8:
5b:9f:bc:74:bb:06:cc:10:ea:56:0c:d2:83:01:2f:
ac:91:4a:47:be:a7:47:1b:70:02:09:94:99:7a:b3:
7c:21:2c:23:28:ba:15:75:26:e2:a5:eb:0c:0c:bd:
a0:e0:dd:af:0b:cc:db:4e:0b:12:e0:f8:60:e4:2c:
4d:3d:69:21:d3:cf:01:16:bf:cf:bf:a6:01:c8:25:
15:cf:50:7b:08:d2:5c:45:7a:8b:14:b5:ab:f8:af:
3b:7d:a8:bc:da:e6:63:f6:f0:60:48:cf:b7:63:bc:
db:e2:7d:f3:86:c2:2a:50:b1:c0:43:bf:87:51:13:
9d:4f:1e:c6:6a:28:31:bd:83:cd:5e:21:af:48:7e:
2a:12:f1:c6:12:ba:0d:60:7d:ec:55:e2:6c:c0:48:
00:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C8:8C:DE:CF:48:F3:4A:5E:A3:A6:DE:2F:D9:9A:20:9B:C8:44:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/835a68fa-de7f-303e-8e79-e93541ac5faf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.8.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:52:d2:9c:a6:ab:d1:5d:93:39:d4:ee:95:b4:6f:79:2a:18:
83:93:23:09:33:cf:88:e5:e0:dc:4c:e7:4d:84:90:be:71:86:
20:58:a6:14:fb:0b:75:cf:34:3d:c9:0b:64:25:b0:85:a7:e1:
b1:5b:11:5a:4b:f7:7c:71:9b:66:7b:36:66:3c:25:8c:0f:28:
91:ca:5e:90:82:7c:ab:aa:40:5c:94:20:47:f3:81:8c:f3:c3:
c3:86:9a:3a:5f:51:3d:03:76:7f:13:a7:1c:a5:ea:5a:dd:ee:
0f:f6:0e:56:4b:ed:75:b1:67:0f:84:13:4f:c3:f8:51:d9:06:
85:bc:77:49:12:4e:16:cd:31:91:11:2f:90:a4:0d:61:33:02:
3a:88:6e:4c:44:a6:a5:0b:ae:ef:26:e3:9d:a3:09:34:00:77:
dd:e6:b4:0a:5f:a3:f2:fd:ab:77:27:64:08:6f:d9:69:7e:dd:
c3:02:8a:51:ae:08:d9:be:85:26:06:89:72:e8:be:6a:f6:4d:
03:d8:e1:f5:9e:00:b2:c3:71:be:2d:89:9f:29:98:d6:7b:77:
a4:ae:00:9a:65:c7:07:76:fd:ee:b5:13:37:42:d0:a7:f8:1b:
d1:75:8d:a8:c8:c9:61:43:e5:a0:69:7d:6b:59:ae:b3:87:68:
d5:e2:38:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:14:20 2025 by rpki-client