Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a0145a1c-36b9-3e2b-8569-1ae3a88fd0e9.roa
File: a0145a1c-36b9-3e2b-8569-1ae3a88fd0e9.roa (raw, json)
Hash identifier: x8hkE9yu/wZ8g6G+sZ3kEXtI1KJJS0mdJa947OAOQmQ=
Subject key identifier: 68:91:24:F3:B8:70:21:FD:DE:0E:87:B9:23:DE:0A:70:37:A6:EF:37
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583C6B40835E1B0A3CC8F8930540
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a0145a1c-36b9-3e2b-8569-1ae3a88fd0e9.roa
Signing time: Wed 29 Dec 2021 05:00:00 +0000
ROA not before: Wed 29 Dec 2021 05:00:00 +0000
ROA not after: Wed 02 Feb 2022 05:00:00 +0000
asID: 14618
IP address blocks: 136.18.0.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:6b:40:83:5e:1b:0a:3c:c8:f8:93:05:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 29 05:00:00 2021 GMT
Not After : Feb 2 05:00:00 2022 GMT
Subject: CN=d8f0f281-8009-441c-88cf-3e7fd301573a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:4e:64:9b:22:55:df:fb:4b:ce:98:da:88:62:
50:da:c4:5f:28:99:e3:92:99:2b:2d:5a:6d:f4:45:
dc:a2:3c:c7:45:81:bd:a4:6f:4f:5c:f8:91:f7:19:
0a:71:cf:ee:37:28:70:31:15:42:5e:3c:d8:10:31:
bc:05:f3:a5:8d:99:d0:04:de:ae:58:59:7e:f8:12:
c5:84:b7:b3:b2:e2:fb:80:24:3b:50:8f:25:b3:c9:
4e:a0:9c:4d:4d:c5:31:c2:ec:55:b2:fd:b9:56:35:
6b:16:33:8f:56:8f:c9:af:ff:42:85:73:12:ef:f2:
dd:7a:32:bd:2e:ec:22:6d:22:bb:5c:05:02:b3:e1:
83:e0:d9:b2:3b:51:fe:0f:14:45:2f:2e:34:4b:22:
5e:10:f9:0f:e2:db:50:a3:55:15:e8:67:69:f9:72:
d1:8a:52:1c:3e:34:08:e5:94:fe:28:44:8a:91:7f:
75:bc:c1:02:04:c2:6d:5c:41:9c:41:f8:f5:1c:df:
a4:eb:10:db:1b:7e:b2:35:e3:cc:96:22:aa:43:7c:
0d:1e:6c:94:73:79:12:2f:e7:54:30:7a:7e:66:ae:
26:d6:28:c6:46:6c:a1:48:e9:91:46:6d:6e:d1:7f:
f9:3a:6c:44:a0:ec:10:6e:f2:ff:49:c7:42:c6:e0:
7c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:91:24:F3:B8:70:21:FD:DE:0E:87:B9:23:DE:0A:70:37:A6:EF:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a0145a1c-36b9-3e2b-8569-1ae3a88fd0e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.18.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:5f:a3:03:0e:11:a9:bd:52:ef:38:a9:10:b0:aa:dc:03:4c:
5d:88:bb:47:c7:01:1b:1b:76:cc:e4:97:e5:1f:71:15:0e:62:
26:8c:d5:8e:63:92:9e:c3:92:40:9a:bd:32:f6:1d:68:44:4b:
8e:23:08:14:fd:61:74:e0:ee:6a:37:02:11:bb:9f:26:4d:37:
eb:79:51:3f:22:af:b5:64:c0:7a:c7:05:7c:f9:5b:16:1b:88:
06:73:29:f3:65:9d:ef:d1:99:61:a5:d5:1a:67:a8:ce:cd:fb:
dc:11:0f:1c:62:77:25:7f:e9:c0:73:db:70:ce:9c:b4:b3:4a:
3b:da:8c:93:bf:d4:4b:28:ea:0f:b9:68:bc:64:86:0a:fd:ac:
eb:2b:b0:54:c5:83:83:f5:95:f4:84:18:86:71:ce:50:78:56:
24:80:65:07:94:29:c1:a2:b7:4f:3c:ca:ce:38:19:2b:41:c3:
92:e2:98:88:5f:74:82:70:2a:15:3c:5f:fc:85:22:77:d0:9f:
c6:c3:6a:87:68:41:26:d0:6c:6c:79:3f:83:1a:14:99:34:77:
2e:61:d1:b9:13:11:26:d6:b5:f6:f6:42:7e:be:93:0e:2d:ee:
96:36:5f:e0:47:62:b3:d3:ea:1e:8e:b4:79:ad:aa:50:05:e7:
78:0d:45:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:39:32 2025 by rpki-client