Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/968e7dc2-0eac-3cad-a493-f9bc0b04456e.roa
File: 968e7dc2-0eac-3cad-a493-f9bc0b04456e.roa (raw, json)
Hash identifier: bvrWTpnWIp9/uIaXDZJ/g49LW+k2l9yagwyfzd7N690=
Subject key identifier: 40:A8:3B:A1:86:3B:81:69:B2:A2:DA:E2:96:D7:EC:9F:75:AB:0D:BC
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F04351D76B9687A5649587FC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/968e7dc2-0eac-3cad-a493-f9bc0b04456e.roa
Signing time: Wed 24 Aug 2022 12:00:00 +0000
ROA not before: Wed 24 Aug 2022 12:00:00 +0000
ROA not after: Thu 29 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 136.18.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:04:35:1d:76:b9:68:7a:56:49:58:7f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Aug 24 12:00:00 2022 GMT
Not After : Sep 29 04:00:00 2022 GMT
Subject: CN=58ef520c-df03-4426-b525-32f13c27b50e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:31:8d:38:c9:dc:ca:bb:f3:ca:22:e6:35:93:
6e:75:a4:21:fb:4f:51:b8:1d:16:56:a8:2f:c6:2e:
74:c7:48:38:0b:fd:5c:91:26:f8:41:4c:79:53:e6:
06:4d:e7:17:36:85:3f:b2:c8:31:d1:b3:96:f8:0f:
8b:d9:76:fa:f9:1e:4c:a9:bc:fa:f2:54:3a:8d:7f:
da:32:4c:c5:a7:85:63:8b:1f:60:d1:7f:d5:50:30:
90:e3:a1:9b:d9:d2:07:87:55:f3:db:27:79:5b:3f:
b9:c4:0b:06:0f:53:36:ac:6e:2f:11:e2:2f:59:04:
e7:b9:04:5e:83:f2:0d:2f:d5:23:18:03:5f:16:35:
16:31:6f:1c:da:79:09:e4:75:a8:b5:3d:66:d4:dc:
27:6c:02:c8:c7:a9:8c:b3:68:73:87:cd:ad:cc:41:
56:12:78:70:11:3a:f8:2e:dd:c2:21:e7:d5:24:0a:
3a:23:2d:dc:7d:7e:3f:b1:f6:3d:fc:4e:0b:e5:9a:
60:56:f7:cf:eb:4d:26:1f:60:59:78:97:e2:5b:55:
a5:21:53:ea:e7:33:83:c4:a8:0a:64:73:61:1d:90:
fc:83:79:1c:28:a4:f4:98:0f:8f:9e:f8:61:bc:8a:
46:3a:d2:a0:53:81:b8:14:e3:b6:cc:58:0c:f2:bc:
27:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A8:3B:A1:86:3B:81:69:B2:A2:DA:E2:96:D7:EC:9F:75:AB:0D:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/968e7dc2-0eac-3cad-a493-f9bc0b04456e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.18.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:ce:d5:8e:62:a0:42:36:61:c1:35:c4:93:b0:a6:a2:5f:79:
ea:6b:07:ed:c9:2b:2e:67:ea:d2:b1:16:84:1a:0e:fa:f8:99:
ab:19:bc:1d:be:ae:d4:91:4c:b8:c8:8f:37:48:82:39:ab:23:
e5:7a:bd:31:c8:67:6c:4b:b3:ae:24:f1:3b:bc:aa:89:9e:75:
1e:62:b5:16:fb:b1:68:af:88:93:20:1d:50:43:3c:b3:1e:dd:
9d:be:5a:d4:82:e9:b5:ea:52:1c:1f:d8:8e:0c:e8:0d:a2:45:
00:e9:c7:82:9e:fe:85:53:76:ae:36:99:e2:a9:2c:99:7e:e4:
bc:10:d3:68:94:50:b1:5e:ab:7c:6d:84:f4:4f:71:07:3f:51:
e0:67:69:7f:9e:05:a3:95:85:06:df:75:fd:8f:60:ab:ec:8b:
e7:78:7f:67:1d:de:c0:0a:aa:60:df:2b:66:a1:00:75:1b:b9:
e4:ca:ef:38:42:d2:16:c9:01:9d:1b:a9:25:9c:92:3f:f4:6a:
c1:73:6a:af:96:bc:96:30:98:8c:a0:e3:a4:f3:7b:da:b5:58:
fa:6e:4c:30:ea:a3:f8:6c:57:80:f3:a0:aa:42:7f:f2:46:6c:
f1:11:81:cb:9a:d4:81:43:d8:f3:d2:ec:50:28:53:bf:48:94:
15:e7:2d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:28:15 2025 by rpki-client