Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a87e54c1-d19f-3821-9476-1f5b59174513.roa
File: a87e54c1-d19f-3821-9476-1f5b59174513.roa (raw, json)
Hash identifier: kXFb1XMQ7hoHHrQpjxowQlom20Y3MAOwbSrgJfkcHls=
Subject key identifier: 8D:B9:20:F7:8C:14:31:F4:FB:77:C2:DB:CC:D3:08:C8:FE:9C:37:26
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840648C60CEFA3A784F49C86D80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a87e54c1-d19f-3821-9476-1f5b59174513.roa
Signing time: Wed 28 Dec 2022 12:00:00 +0000
ROA not before: Wed 28 Dec 2022 12:00:00 +0000
ROA not after: Thu 02 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 136.8.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:64:8c:60:ce:fa:3a:78:4f:49:c8:6d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 28 12:00:00 2022 GMT
Not After : Feb 2 05:00:00 2023 GMT
Subject: CN=2a1ca6c1-bf5e-4dd8-bcf7-b33e990c0d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:51:7b:b7:47:61:45:b1:ae:e7:5d:3d:16:3f:
74:9d:9c:53:00:d2:14:bb:9c:eb:95:20:3a:84:b3:
12:a8:07:f9:1b:31:25:b5:6d:7b:87:a8:ee:aa:6d:
63:6f:8d:09:90:e1:58:ce:1a:57:6a:5d:8d:e6:0e:
8e:00:ea:77:f5:ee:87:b6:dc:c1:19:4a:41:5a:f1:
06:f0:18:8e:c0:b6:9c:eb:44:0b:83:bc:82:37:b2:
bd:6a:e0:b8:65:ac:b6:20:2b:5a:7f:9d:1b:bc:fa:
56:a4:c2:79:14:a7:92:a5:0e:39:64:4a:66:32:07:
e4:49:02:68:fe:2e:54:7b:99:f2:5b:d4:73:af:9d:
f8:b0:00:9a:75:b0:37:c9:c2:c0:38:d5:d3:cc:d9:
c6:13:09:48:e6:69:7d:24:e9:d7:a2:fb:d1:b2:38:
21:56:7b:8a:1e:e6:c6:02:43:ce:31:0f:de:8e:85:
53:d7:d8:67:16:66:d2:fe:95:76:de:f1:1c:01:f1:
b5:c1:45:05:44:ba:95:3a:0e:a4:23:c7:df:9e:51:
a6:b9:f2:09:21:71:bc:d6:a7:f7:66:26:c0:7f:2f:
31:de:39:28:e6:5e:5d:f4:3c:00:3e:07:96:17:d1:
1a:7d:c9:b2:23:88:97:dd:51:ed:cc:1e:5c:b2:c5:
a1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B9:20:F7:8C:14:31:F4:FB:77:C2:DB:CC:D3:08:C8:FE:9C:37:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a87e54c1-d19f-3821-9476-1f5b59174513.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.8.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:23:72:97:b6:42:ef:0c:38:30:18:22:30:d5:4c:53:bd:4e:
49:6b:37:62:d8:ae:73:60:65:76:be:98:8a:e9:89:03:5d:77:
40:37:02:86:29:df:22:1b:f9:97:3d:48:aa:c4:27:43:37:b2:
40:69:9d:3c:44:de:01:cc:19:31:8f:62:47:ff:ca:24:66:12:
d0:1d:83:94:76:85:c2:c7:09:3d:c5:29:b4:ee:01:36:aa:d4:
43:7e:c7:ff:b2:cb:a1:49:9d:1f:3a:c7:d7:6e:cf:64:18:14:
01:ef:b9:49:29:b6:81:b7:d9:0f:4c:e1:b1:32:70:1e:53:1f:
64:93:af:fb:be:77:e8:82:29:f9:1b:06:bf:f7:ae:7b:10:dd:
0a:b9:89:78:3a:ac:dd:bd:76:60:15:89:2f:e4:f5:c7:81:da:
3f:ca:62:e1:c6:39:51:2a:5c:4a:f2:07:9c:31:08:61:1f:bb:
63:b1:ba:b5:1a:b6:6d:6d:7b:d7:84:b6:b7:d4:b2:69:51:02:
5d:24:ee:76:3b:d0:70:c6:c0:4a:17:64:47:13:44:35:72:03:
8d:92:21:54:96:a9:0f:21:49:99:95:01:5a:b9:54:87:67:3c:
fa:37:73:da:ea:f2:8a:aa:07:5f:d3:df:5b:e1:bc:ac:e1:af:
35:4e:72:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:25:20 2025 by rpki-client