Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a09aa409-e683-3893-ac55-51c48cfdd1e2.roa
File: a09aa409-e683-3893-ac55-51c48cfdd1e2.roa (raw, json)
Hash identifier: RooxM0lw0Nt3Ue1dYBK0rapOJw+mCDh/8fnB4gn7AxA=
Subject key identifier: 39:9A:95:6C:16:D7:07:4B:A8:CF:50:AC:53:CE:E1:C9:AC:4D:93:A1
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DA4302F1CF378371DB336B300
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a09aa409-e683-3893-ac55-51c48cfdd1e2.roa
Signing time: Tue 19 Apr 2022 12:00:00 +0000
ROA not before: Tue 19 Apr 2022 12:00:00 +0000
ROA not after: Wed 25 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 136.18.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:a4:30:2f:1c:f3:78:37:1d:b3:36:b3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 19 12:00:00 2022 GMT
Not After : May 25 04:00:00 2022 GMT
Subject: CN=046747e8-0555-4301-a132-fa58fdb1aab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:bd:c8:9a:ca:44:7a:22:4b:74:1b:8a:e0:c3:
1a:a8:39:10:88:c6:e7:9a:61:dc:27:68:36:be:28:
0b:ec:87:3f:cc:fc:cd:ae:8d:4c:37:62:0a:83:b5:
7a:d0:eb:f6:1b:bf:56:1e:0c:c2:c9:2e:15:93:7f:
7b:6e:45:20:43:b4:19:79:62:32:eb:4f:4c:16:0a:
ce:f7:a3:b2:48:01:8d:10:f4:ea:0a:f9:e5:be:6a:
0c:99:b7:a4:f8:a9:f9:72:04:29:c2:43:54:33:93:
ef:18:48:30:14:a2:8c:5e:b7:04:29:72:b7:74:6f:
df:3f:39:ab:0c:21:48:85:bf:a7:c6:6a:c9:40:bd:
cf:5b:54:23:b4:30:8f:1f:c7:44:42:7a:24:50:be:
bd:fc:42:5e:ed:15:9a:c6:b1:bb:ad:4a:bd:71:f5:
33:2b:ad:b0:ce:74:c7:f8:4d:79:b8:86:2f:41:54:
24:59:7a:87:a5:8f:6d:5f:54:26:d7:ca:9d:35:2f:
e1:04:6f:e6:68:03:96:9a:e5:c6:a1:72:bf:04:59:
e3:a2:fe:1a:6c:64:4c:3a:71:6d:f4:4e:1b:34:23:
c3:16:f4:e4:44:2c:37:c9:15:16:d6:17:4b:11:bd:
4d:9b:d0:d7:c4:e4:55:02:25:cc:36:b5:ec:9a:51:
57:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:9A:95:6C:16:D7:07:4B:A8:CF:50:AC:53:CE:E1:C9:AC:4D:93:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a09aa409-e683-3893-ac55-51c48cfdd1e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.18.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:2f:3b:df:44:49:1c:88:09:ad:8c:93:7c:2c:bf:05:04:1c:
6d:72:e1:0e:a1:0c:80:43:20:fc:43:e7:87:c9:9d:90:96:70:
2a:b6:75:56:31:74:8b:86:f8:b4:92:87:99:a5:dc:fe:3a:2c:
08:9a:91:3c:e1:6d:36:9b:5f:8b:3a:cd:2a:4a:d7:93:55:07:
bb:e5:ec:0e:59:1a:2d:e4:48:73:e1:83:c0:37:4b:0e:ac:7b:
1e:cd:7d:fc:3d:76:a4:70:a8:b5:40:14:3b:8c:2c:6e:5a:fd:
87:70:7e:b3:bf:a4:ce:ea:78:7f:46:9d:54:c3:44:8c:c3:c6:
fb:3d:ea:40:80:e6:25:c5:47:f9:19:64:5f:7f:c1:9b:65:60:
95:dc:6a:92:ee:93:23:db:a9:ba:7d:51:99:c6:c5:3b:30:59:
0d:80:34:f0:b8:c7:7a:dd:be:40:95:fe:16:5d:d5:86:61:69:
a5:a4:f5:ca:18:cf:47:de:92:e3:91:36:89:e2:c7:19:ea:d8:
d8:07:65:69:d0:93:bf:48:d8:9e:16:a7:de:b7:72:27:b3:f5:
ab:a0:f6:a5:ea:d3:57:10:e9:5c:84:bd:81:7c:a3:55:fc:91:
6f:65:d9:15:ec:20:ab:5c:62:b3:c4:e9:2b:c9:bf:dd:ec:21:
cc:7e:f6:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:58:38 2025 by rpki-client