Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/95079a53-bbea-3c3e-af5a-e7cff67104e1.roa
File: 95079a53-bbea-3c3e-af5a-e7cff67104e1.roa (raw, json)
Hash identifier: bbqRAopUcTOatnCjIsDQ5xkXDE5KjONooZlvJvCwPuc=
Subject key identifier: 87:38:7F:00:6A:09:80:C1:78:50:7F:9F:49:F1:55:E6:B7:B9:67:A7
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D2EFE540287EB7991455F1000
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/95079a53-bbea-3c3e-af5a-e7cff67104e1.roa
Signing time: Wed 09 Mar 2022 05:00:00 +0000
ROA not before: Wed 09 Mar 2022 05:00:00 +0000
ROA not after: Wed 13 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 136.2.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:2e:fe:54:02:87:eb:79:91:45:5f:10:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 9 05:00:00 2022 GMT
Not After : Apr 13 04:00:00 2022 GMT
Subject: CN=de23f511-738e-4bd7-bf6f-8ae7765c58f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:63:b4:d4:34:3f:3c:c7:dc:4f:46:92:c1:ca:
43:4f:43:9f:3b:0a:16:ca:54:74:99:c9:d6:16:bf:
d8:3b:db:af:5b:48:50:4b:4c:92:43:63:5a:4e:73:
71:5d:65:64:b8:10:ed:49:83:51:9b:55:c1:c4:59:
12:45:24:2d:e0:74:8b:d0:79:6b:cb:65:a8:c4:cb:
c3:12:11:d0:82:d9:6d:27:58:40:c2:b2:51:be:12:
e2:64:7d:31:f2:d8:78:25:6e:ea:7a:05:c5:32:a9:
94:80:1c:95:22:8a:bd:01:11:d9:59:5f:49:03:05:
b5:3b:23:d2:e9:cd:3c:ea:6d:31:dc:a3:da:53:d6:
18:6e:eb:78:b3:76:eb:03:32:a0:64:8f:2e:9a:a3:
38:8a:19:a4:a8:90:2a:f4:35:0f:14:f7:bc:a5:90:
44:44:ad:22:35:29:4c:9b:37:56:e7:e0:6e:62:89:
a9:a0:0d:75:47:42:2a:1a:0e:7a:a9:31:c9:15:05:
3f:c3:15:4f:5e:f9:e0:99:9b:bb:53:41:59:85:8e:
27:0e:1e:4d:12:8c:b8:6e:a3:c9:08:61:94:0d:17:
92:e0:a8:ca:7a:29:55:e5:bd:c8:f5:3f:a3:35:26:
73:9a:b6:72:15:12:db:c7:b7:81:ce:e1:7a:01:7e:
f6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:38:7F:00:6A:09:80:C1:78:50:7F:9F:49:F1:55:E6:B7:B9:67:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/95079a53-bbea-3c3e-af5a-e7cff67104e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.2.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:b7:29:88:d3:45:60:e7:08:f7:40:4e:7d:0e:ad:fd:c6:0b:
c7:fc:23:59:7c:3f:7b:b3:ee:38:0f:21:4c:d1:29:3a:b8:d0:
ec:59:27:a0:01:5b:4c:e1:65:ee:51:4b:6a:2f:52:f9:da:5a:
47:22:92:24:11:4d:0d:1a:f0:aa:5e:8e:d2:3e:b5:63:7b:9e:
aa:11:86:4e:1f:d4:7e:b1:47:22:f9:17:c9:51:dd:9b:22:2d:
c8:71:0b:47:c2:19:44:66:41:ab:a6:06:60:61:dd:f7:92:76:
16:ea:a9:0c:37:c7:3f:a0:41:5a:d9:d0:2f:bc:d2:37:3f:ad:
ac:29:00:52:1b:3c:2b:21:88:f9:2e:eb:b2:d9:23:8f:4f:19:
5a:a8:0b:ee:a9:7d:ec:6a:e8:b6:65:92:3d:26:35:8f:06:ed:
1c:ff:af:e2:bf:6d:07:84:f0:a7:0d:66:db:b7:42:df:d3:db:
f3:c3:2a:a7:65:d5:f5:44:5e:4e:3d:da:21:0d:f6:f4:e9:bc:
97:72:28:b8:c4:d3:74:5f:e9:01:00:15:5c:19:4e:ea:7a:c1:
a1:cd:91:11:50:e5:e1:f3:82:04:dc:5d:53:c4:36:d8:94:2c:
66:cc:66:a8:71:6d:0f:a4:cf:b6:ff:e0:f8:ae:d2:98:3e:3a:
a1:68:b3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:28:01 2025 by rpki-client