Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aa154cf4-0170-378d-a7c7-21fecac4cf02.roa
File: aa154cf4-0170-378d-a7c7-21fecac4cf02.roa (raw, json)
Hash identifier: fTxqJNImwR/cuhFobdVEL1KeGoqpKEPovaHKSIKKgMA=
Subject key identifier: C5:95:52:70:A3:0F:1D:8D:11:D8:56:DB:B5:D1:F3:32:D9:48:B2:E6
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D5622BC9C84E6744116DA0C00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aa154cf4-0170-378d-a7c7-21fecac4cf02.roa
Signing time: Wed 23 Mar 2022 04:00:00 +0000
ROA not before: Wed 23 Mar 2022 04:00:00 +0000
ROA not after: Wed 27 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 136.17.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:56:22:bc:9c:84:e6:74:41:16:da:0c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 23 04:00:00 2022 GMT
Not After : Apr 27 04:00:00 2022 GMT
Subject: CN=c2709337-1bcc-41a9-b4a6-74d9942dd43c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8d:6c:a7:a4:dd:37:58:bf:96:fe:99:07:f2:
de:c2:5d:6f:1b:ab:a5:79:87:aa:a6:c2:9a:2e:2c:
a5:4c:34:22:38:c9:f0:9c:53:d7:62:a5:0d:8d:d0:
99:02:de:61:e0:df:d2:bf:b6:b9:dd:1e:29:f4:9c:
0f:b3:ec:01:7b:28:6c:e9:51:f0:1a:4a:22:49:7f:
a3:c1:22:bb:41:ad:be:d3:17:00:9d:a8:24:17:58:
4c:92:19:a3:00:8a:d1:a2:97:dd:16:01:45:8c:54:
37:8a:72:5b:db:61:24:94:30:e7:b9:11:98:56:7c:
97:11:3e:d2:48:d9:ff:52:cc:ea:31:c0:6b:32:6e:
9b:f1:e5:bf:f8:36:d6:46:cc:5e:13:cc:d2:a3:bb:
1c:df:8f:3a:04:1e:da:28:ce:25:38:73:33:5a:06:
4f:b2:c9:39:ed:ce:fb:8a:68:af:20:f4:ca:f9:be:
27:17:a7:75:17:f9:07:85:be:b3:83:cd:83:e7:4a:
c5:14:5e:a9:52:78:1a:03:fe:5d:24:57:a8:80:72:
dd:dc:87:07:4b:96:86:07:86:7a:ee:e5:8c:cf:6f:
5f:b8:85:5e:5c:77:ec:b0:1a:73:91:e8:56:e5:9f:
ff:53:5f:73:b1:64:df:fb:9d:96:65:35:6b:df:c1:
df:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:95:52:70:A3:0F:1D:8D:11:D8:56:DB:B5:D1:F3:32:D9:48:B2:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aa154cf4-0170-378d-a7c7-21fecac4cf02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.17.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:55:f0:5d:43:ba:f8:d9:02:03:98:23:38:63:51:6a:a3:0f:
b6:93:45:36:61:0c:66:3a:76:f4:c2:74:81:2c:23:78:f7:99:
61:3c:b5:e7:bc:4e:6e:54:d7:d7:52:69:04:8a:d0:66:a9:89:
0c:61:e3:ba:2e:b0:c5:f8:eb:c5:45:aa:56:9e:24:53:64:de:
e9:01:8d:83:13:34:01:6b:94:11:14:43:44:e8:d1:58:37:cb:
ec:4c:b2:4b:55:a6:7e:0a:3d:63:0c:90:26:9d:c4:ef:ed:e8:
9b:5e:f1:06:03:42:e2:81:40:9b:dd:3c:dd:34:12:97:c8:3c:
1c:01:d5:02:b5:21:0a:b2:6c:11:fa:0c:eb:cc:34:96:dd:71:
37:76:54:f7:40:61:ab:25:d4:06:d0:11:5d:0b:dd:4c:50:7b:
6a:24:c0:6c:f6:c8:34:ac:ce:9a:08:67:99:a2:8e:20:90:7a:
25:8b:12:22:29:8d:ac:4c:de:aa:28:c5:25:04:37:4a:1d:6f:
a1:ee:71:97:0d:a3:f6:b8:39:f4:59:46:bf:dc:b2:05:ea:7a:
49:7f:db:66:06:ed:42:ce:d6:52:89:73:f5:b9:e6:8c:75:60:
15:60:d4:06:1b:47:80:48:4a:d2:1f:85:ed:60:02:f3:a5:38:
eb:56:76:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 18:37:54 2025 by rpki-client