Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8f950412-ebeb-3635-87fa-775ee68545d8.roa
File: 8f950412-ebeb-3635-87fa-775ee68545d8.roa (raw, json)
Hash identifier: IsFoYGXsquz9J+UxPR69HElEjYqSRomC+j7qJW1Z0Po=
Subject key identifier: 65:1B:83:42:F0:0B:C1:5C:EA:5E:C7:90:C3:98:DC:58:C3:31:59:D2
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858401748030EA3F381D8A98C4E00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8f950412-ebeb-3635-87fa-775ee68545d8.roa
Signing time: Wed 30 Nov 2022 12:00:00 +0000
ROA not before: Wed 30 Nov 2022 12:00:00 +0000
ROA not after: Thu 05 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 136.18.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:17:48:03:0e:a3:f3:81:d8:a9:8c:4e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 30 12:00:00 2022 GMT
Not After : Jan 5 05:00:00 2023 GMT
Subject: CN=710b4e35-47da-480b-b70d-78cb71b82213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:62:cf:f5:7c:d7:e7:80:83:c5:58:f3:16:9c:
d9:49:58:7e:db:d1:82:68:6b:73:51:68:87:3a:4e:
9e:65:ff:a2:47:e7:d2:54:fb:1a:89:1e:50:49:b0:
09:80:7d:90:82:50:c7:4d:bb:f7:ce:ee:c3:6d:45:
75:8b:9a:b3:9a:07:59:a1:08:e2:56:34:fa:fc:14:
6a:1c:e7:b6:77:e6:73:e6:fc:1c:96:86:73:d9:5d:
6b:ff:74:d6:ad:56:19:85:de:ef:e3:24:22:cf:41:
86:6c:fb:d0:66:92:2f:19:20:42:8d:66:5e:46:1b:
32:27:d0:03:ad:4b:1e:60:0f:89:12:e2:d9:77:3c:
73:c5:e7:0b:a7:b5:01:cb:da:14:fd:e9:61:7a:4b:
0a:f4:bb:54:7d:8e:e6:72:3f:48:0c:e2:90:00:37:
b2:9d:12:51:82:ee:f0:26:b7:fd:d2:2c:ef:d0:06:
1e:70:42:c0:77:06:8c:13:53:fb:4e:76:ff:d2:b6:
44:fd:a8:07:3e:04:96:67:b8:d4:07:93:1b:67:89:
3e:8a:d7:e6:55:2d:36:02:3d:59:53:06:7d:b8:22:
e6:7e:2d:fc:06:d8:fd:1b:c0:83:b8:c1:76:b1:7c:
50:07:3b:28:64:7d:2e:0f:67:fd:94:71:cb:a1:a2:
e2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:1B:83:42:F0:0B:C1:5C:EA:5E:C7:90:C3:98:DC:58:C3:31:59:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8f950412-ebeb-3635-87fa-775ee68545d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.18.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:5f:cd:57:22:31:69:1e:ee:13:71:4b:a0:95:23:e3:3e:06:
23:7c:dd:28:4f:ac:1a:e8:73:8b:4a:2a:6a:3f:42:10:d2:41:
a6:0d:74:15:b2:61:99:6d:32:b5:3c:fd:ed:da:35:b2:30:d6:
04:bc:15:6e:8f:60:95:50:8a:a6:14:8f:73:61:28:61:e5:25:
ba:aa:be:56:aa:04:01:0b:a3:46:24:e3:1f:d9:53:22:f4:e2:
78:23:fa:ee:ad:9b:e3:6f:f3:69:e7:9f:21:95:72:67:ab:b8:
34:87:eb:67:72:24:e7:fe:1c:55:0f:f2:54:66:0e:46:35:be:
5d:98:d4:e2:e5:6f:7d:d1:34:c7:1a:0e:60:94:3f:73:a0:8f:
a9:8b:cb:1a:0a:dc:6f:2e:2b:54:06:5b:4a:c4:79:24:b7:76:
25:72:4b:5e:11:0d:7b:10:cd:d2:94:8c:58:f6:1f:ba:5e:34:
a6:15:8e:6e:73:6b:d6:ec:3b:3c:69:36:b6:a8:58:e9:f2:5a:
b9:06:f2:2a:7d:7e:cf:97:bb:59:3d:cf:84:05:77:1d:da:70:
5b:0b:8e:ae:f4:e5:32:72:d7:e2:b2:46:97:94:6c:5f:f1:ef:
5f:61:01:a3:34:ad:d5:97:fb:c5:3c:db:1a:02:fa:dd:9e:e3:
a0:4c:0b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:28:25 2025 by rpki-client