Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8489fab8-1429-3b72-a2db-fa28c6faaf39.roa
File: 8489fab8-1429-3b72-a2db-fa28c6faaf39.roa (raw, json)
Hash identifier: V7//BXWRSiWNEz1ZUC0cWACqXYAq5wIE4K4GLjYCJoE=
Subject key identifier: 39:8D:4F:30:2C:0D:A4:E7:10:89:8B:22:C3:9F:54:B3:F3:22:B4:2F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858403DC87AF1CF692D8D69381280
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8489fab8-1429-3b72-a2db-fa28c6faaf39.roa
Signing time: Wed 14 Dec 2022 12:00:00 +0000
ROA not before: Wed 14 Dec 2022 12:00:00 +0000
ROA not after: Thu 19 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 136.1.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:3d:c8:7a:f1:cf:69:2d:8d:69:38:12:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 14 12:00:00 2022 GMT
Not After : Jan 19 05:00:00 2023 GMT
Subject: CN=3bb99e65-6f74-41b6-a2b9-061a4b1f91f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:1a:d6:4f:55:0f:4f:8f:27:94:4f:0a:ae:a1:
e2:8b:c5:64:99:1f:97:56:a0:ad:13:6f:a0:35:ea:
75:46:91:19:75:e0:3b:46:ed:dc:3d:eb:2c:cd:35:
49:3a:7f:76:5d:b0:29:b1:c4:48:2e:46:20:d3:ff:
76:05:cf:10:93:36:77:77:4e:36:c7:af:39:4e:59:
90:ed:a2:06:01:23:ee:c4:b6:80:cb:75:61:8e:c6:
52:88:1a:b9:fa:59:69:09:2e:68:d7:98:82:67:7f:
e5:5b:17:ee:64:c8:5e:e8:95:7e:6e:3d:92:0f:fd:
ed:c8:d2:26:4c:83:a9:99:4c:e2:65:a5:a3:0e:77:
71:d6:18:9f:63:4f:7e:9a:cc:9c:95:6f:54:0c:e4:
4f:01:be:58:bc:d1:7f:0c:25:30:39:8e:fb:dc:21:
cb:01:0b:84:17:4b:32:5b:b3:bf:d8:c3:23:23:b4:
d9:b5:51:72:82:5f:ad:e7:1f:e9:ca:34:cb:b5:01:
f7:13:9e:b2:a2:e0:1c:6a:b7:73:ad:1b:26:ae:12:
8c:93:f2:45:c8:1b:ab:ab:23:85:95:35:02:83:7d:
e1:de:d8:bb:3d:f6:25:be:be:46:af:cb:fb:2a:7b:
4f:61:1c:95:8b:e5:41:14:ce:eb:63:3c:41:53:28:
0d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:8D:4F:30:2C:0D:A4:E7:10:89:8B:22:C3:9F:54:B3:F3:22:B4:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8489fab8-1429-3b72-a2db-fa28c6faaf39.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.1.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:3e:95:6b:68:32:c9:d2:18:98:e3:95:a1:8d:ee:21:89:dc:
91:57:90:31:c4:7f:5b:e8:18:a5:51:68:24:dd:62:2c:6d:b2:
f8:54:66:23:76:bf:c7:78:d8:83:c3:3d:a2:6d:d7:09:f9:71:
3e:c4:ef:52:e9:eb:da:18:66:c8:c2:b4:72:a9:09:13:68:0e:
3c:95:e7:e6:30:da:2b:ba:97:c7:b2:ed:d5:fb:10:fa:65:8c:
20:e3:df:03:5e:8d:d4:23:c5:23:1d:69:dd:13:ad:9d:47:9b:
2a:ed:7f:8a:b9:ce:f2:d1:2c:ee:73:22:9a:e4:12:50:0d:09:
23:5a:48:9a:25:6b:be:2e:4c:e3:ac:52:32:0e:32:81:1d:9b:
97:d1:de:02:38:29:11:b2:f5:7c:98:9d:bc:be:9c:84:0c:48:
99:6b:83:36:8c:3b:b4:fa:4f:c9:97:82:d1:ad:6c:b4:10:63:
ff:ae:05:fb:5e:50:c4:b4:19:fc:54:63:63:be:2a:3f:69:51:
80:1d:14:b4:9f:51:54:f6:13:95:6e:42:60:42:b0:a0:4a:41:
4a:03:10:30:07:f8:24:b7:63:87:7b:19:13:4e:5d:ff:84:31:
6c:c3:83:a6:ef:70:9e:6a:a4:39:1f:26:ef:0d:cb:ec:70:c0:
41:83:a5:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:50:40 2025 by rpki-client