Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aca219ca-51fa-3025-81af-1e94b5f257d3.roa
File: aca219ca-51fa-3025-81af-1e94b5f257d3.roa (raw, json)
Hash identifier: R82k+z6Kn7lZNsLOSBI6pXmf/h4uASeuzz3pQIi/DeU=
Subject key identifier: A4:22:BA:6C:E0:6A:A8:95:FD:3A:00:5F:10:70:2B:87:0C:53:B3:09
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583C9264EBC27422D568FD5016C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aca219ca-51fa-3025-81af-1e94b5f257d3.roa
Signing time: Wed 12 Jan 2022 05:00:00 +0000
ROA not before: Wed 12 Jan 2022 05:00:00 +0000
ROA not after: Wed 16 Feb 2022 05:00:00 +0000
asID: 16509
IP address blocks: 136.18.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:92:64:eb:c2:74:22:d5:68:fd:50:16:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 12 05:00:00 2022 GMT
Not After : Feb 16 05:00:00 2022 GMT
Subject: CN=a704f29c-85d9-4476-800a-96760f1bd6c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:85:1a:ec:e9:9d:37:3c:86:a6:d2:92:ef:06:
9a:9e:8a:94:ff:f6:9c:50:0f:51:61:da:79:56:fb:
ae:22:03:f7:9b:20:95:25:c3:7d:18:7b:6e:f9:d9:
13:eb:f2:12:e6:ec:b6:ea:67:44:03:f0:07:6d:43:
9a:9f:d0:0f:09:89:2e:47:1f:ef:3d:21:b2:bc:30:
8d:c8:14:37:29:d5:e2:3e:52:c0:53:76:91:eb:f8:
6d:a3:d2:75:de:36:fd:31:a8:61:0f:b1:db:21:9f:
09:c8:a3:1f:cf:6b:f7:da:6b:de:ac:76:03:d5:0c:
c6:d2:37:f5:f4:d6:17:4e:2d:ed:22:3f:9c:3b:e3:
a3:7a:d1:58:aa:df:df:ec:61:32:d5:d1:4b:24:2b:
f8:93:e6:68:0f:3c:b5:fa:c6:15:6d:88:01:de:5a:
86:05:d6:f7:dd:be:f7:2f:07:31:bc:38:b3:12:ed:
5a:6e:2f:36:ea:b9:b9:52:a6:3e:b6:3d:54:1e:e8:
cb:9f:46:59:f4:71:cb:80:33:5c:6a:d9:11:8b:78:
16:12:2f:d3:24:03:54:d1:68:23:1d:41:c3:f6:9e:
f0:8c:cd:5f:7c:f6:6f:d2:10:79:26:22:bf:c3:e4:
25:35:54:13:17:50:91:46:0b:bd:ba:74:7d:5f:09:
36:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:22:BA:6C:E0:6A:A8:95:FD:3A:00:5F:10:70:2B:87:0C:53:B3:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aca219ca-51fa-3025-81af-1e94b5f257d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.18.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:58:be:f1:6c:ed:8d:9a:50:97:aa:92:f3:44:6e:99:98:ab:
87:b4:92:41:09:dd:39:6d:be:ff:d8:d4:59:17:01:19:0d:aa:
aa:52:fb:29:ed:0a:9e:76:12:17:0b:74:2a:14:d0:da:0c:bd:
bf:20:7b:15:b1:57:86:be:19:77:df:65:f2:9d:29:81:58:58:
40:7a:43:7a:e6:0c:3f:04:61:59:15:14:51:bf:45:61:5e:1e:
2c:c7:e1:b0:f1:d9:36:c4:36:dd:9c:8d:fd:0b:98:ae:ef:54:
bd:13:0e:cb:26:91:e6:99:05:63:05:e7:e6:7d:f6:25:af:a2:
db:d3:2c:75:58:cf:f5:17:88:e7:6a:f2:8f:41:1d:c2:91:44:
b7:13:db:39:60:ed:0d:66:9c:3f:38:ff:c3:e5:f8:83:a4:97:
cf:e6:36:15:fc:d0:2f:de:52:fa:c5:5f:16:c2:01:b9:cf:3b:
43:a3:82:5c:f3:7e:cf:46:6c:0e:84:31:a2:82:0a:02:8c:02:
ba:fd:1c:3c:5a:78:fa:99:84:9c:ca:a9:b3:53:8c:53:b0:f1:
a2:62:97:82:3b:5d:71:11:c6:5a:45:b0:03:f4:65:13:4f:5a:
19:72:f7:26:0e:fc:25:77:96:20:e4:c6:bb:9c:94:8e:44:39:
9d:eb:44:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:16:27 2025 by rpki-client