Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a86373dd-c0e6-3c4a-b59e-61fa4e6c6daf.roa
File: a86373dd-c0e6-3c4a-b59e-61fa4e6c6daf.roa (raw, json)
Hash identifier: rpDckdLM5ntX2nN6477ScfMMbyVgM7z+A5ZjYgXqFA0=
Subject key identifier: D9:A3:80:52:5A:4F:0C:53:B2:C5:1A:7B:27:DF:F7:F7:33:C8:03:98
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583EDD3D8E0082B221BC1942F580
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a86373dd-c0e6-3c4a-b59e-61fa4e6c6daf.roa
Signing time: Wed 10 Aug 2022 12:00:00 +0000
ROA not before: Wed 10 Aug 2022 12:00:00 +0000
ROA not after: Thu 15 Sep 2022 04:00:00 +0000
asID: 8987
IP address blocks: 136.2.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:dd:3d:8e:00:82:b2:21:bc:19:42:f5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Aug 10 12:00:00 2022 GMT
Not After : Sep 15 04:00:00 2022 GMT
Subject: CN=161b89db-791e-4280-a7d7-cc413b62478e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9d:e2:9b:6f:f1:c4:d1:af:32:01:d5:9e:be:
7c:a0:0b:78:6d:43:e4:32:bb:a2:ed:0d:23:d7:11:
58:c7:0b:23:67:cf:37:b4:93:c2:a1:33:c4:8b:ff:
3e:be:db:d3:52:d3:ca:cb:56:66:76:66:bc:b5:92:
43:ab:ad:04:99:cf:e4:7f:ac:80:39:13:d3:ba:03:
18:c9:e7:8f:18:d7:de:e0:ae:30:f9:fb:1e:de:82:
88:d0:e0:0c:25:24:05:b0:d1:0d:5d:4f:e9:ff:05:
02:da:4c:ec:ca:30:b2:75:60:cc:21:68:5b:9d:80:
e9:82:3c:ed:6b:b1:44:fc:57:1b:51:57:d1:ad:b0:
76:c4:a8:65:31:72:6a:0f:e9:94:cc:f0:96:46:d7:
92:18:e6:c5:36:c2:ce:db:f6:dc:05:1b:0e:ba:d4:
95:20:3b:e4:be:be:c6:83:2c:6a:c0:a8:d2:55:d3:
1d:04:b4:aa:86:c0:03:05:82:c7:ec:f4:50:a8:d5:
75:3c:64:7d:82:a7:04:7a:20:82:15:56:56:8c:81:
bb:4a:cf:9f:08:21:ad:37:e5:b7:c6:58:c2:f0:af:
22:d8:8f:06:33:8a:a6:2e:17:63:ad:3f:5c:e4:6c:
1d:94:b2:21:41:ad:90:31:d7:08:c5:4c:45:e2:b0:
5c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A3:80:52:5A:4F:0C:53:B2:C5:1A:7B:27:DF:F7:F7:33:C8:03:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a86373dd-c0e6-3c4a-b59e-61fa4e6c6daf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.2.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:68:73:ba:6b:fa:5e:3c:0b:3b:96:11:4e:87:63:5f:c0:2e:
f6:30:aa:1a:63:54:e6:6f:47:36:42:53:48:3a:45:6a:b2:42:
86:90:8a:cc:86:77:2f:ec:0c:46:20:f2:96:64:43:09:f8:8a:
04:d4:6d:79:c4:9f:56:bc:5e:a1:33:12:aa:73:00:6a:7a:f1:
99:db:64:09:a9:19:b0:54:af:df:81:d3:fb:e6:ad:50:2f:84:
91:9c:01:c9:86:7f:23:a8:6f:14:6a:53:44:1a:1d:9c:f3:b3:
ea:08:e0:db:76:97:6e:ea:01:53:83:d3:9c:d7:6b:0d:d6:b4:
06:db:cd:2f:f6:36:2f:e6:4a:b2:3e:1f:b4:1d:b6:44:b0:b1:
99:7f:46:2f:14:8d:15:23:89:38:f2:4e:87:3c:21:c7:6f:3a:
fd:44:47:78:b1:7e:bc:6f:8a:7e:95:09:cc:e4:a5:6c:94:b2:
6e:19:23:b1:f5:0d:f1:84:de:8a:49:7c:6d:c4:6f:26:fd:4e:
ed:61:dd:a9:52:f4:82:5e:25:3f:8e:a0:c0:76:e2:01:97:a9:
b2:3f:06:1b:39:d4:74:a0:fd:bc:28:57:f6:ea:e4:fc:02:93:
fa:0f:df:81:d0:34:5a:5b:74:93:32:c2:59:79:30:68:76:64:
b5:43:99:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:58:48 2025 by rpki-client