Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aed60baf-c001-35ee-a723-b1a0daf81c1e.roa
File: aed60baf-c001-35ee-a723-b1a0daf81c1e.roa (raw, json)
Hash identifier: OKN6mo7VH8UEfgt+N8AOBN0oupecnHeoUSK4jcSFSdQ=
Subject key identifier: 71:A8:9E:BB:59:A8:14:D8:91:A6:0D:40:45:59:5A:37:C3:96:D6:8D
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E8ED6CEFD559A2329AC3B2880
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aed60baf-c001-35ee-a723-b1a0daf81c1e.roa
Signing time: Wed 13 Jul 2022 12:00:00 +0000
ROA not before: Wed 13 Jul 2022 12:00:00 +0000
ROA not after: Thu 18 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 136.18.0.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:8e:d6:ce:fd:55:9a:23:29:ac:3b:28:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 13 12:00:00 2022 GMT
Not After : Aug 18 04:00:00 2022 GMT
Subject: CN=c4dd2bef-b90a-4cf7-83dc-7e5a5467a9d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f1:24:49:a7:33:68:9b:85:e9:9f:3d:18:98:
ac:1d:72:55:84:49:c4:30:13:6f:db:e1:9e:a7:7e:
d4:85:88:66:f4:f1:f9:47:c9:96:61:ab:47:e5:8d:
0e:7c:64:b2:ad:9c:fb:6d:9f:76:fc:71:c5:83:ab:
04:51:e6:52:60:89:c3:6b:f0:34:56:cf:53:87:13:
2f:59:d2:ce:0d:c8:56:70:ff:52:36:97:91:8b:9d:
10:69:73:57:a7:91:84:eb:13:e8:a2:c0:83:c8:48:
ae:3a:b1:25:45:11:db:af:0a:54:d8:cf:31:51:35:
fa:07:4b:95:5a:0f:ac:3e:af:f4:72:47:de:28:ba:
03:92:bd:f2:35:e6:18:3a:b4:22:6a:90:d9:d4:0f:
6e:e2:51:fe:f6:21:23:8e:75:84:71:31:24:a7:c5:
c6:9f:d8:2f:38:8e:52:b7:28:40:cf:50:d3:77:d7:
63:b9:fd:6b:43:7f:9f:47:fd:3b:6c:bf:13:6d:43:
a6:55:d9:a8:9f:9b:88:85:fc:d8:71:e9:47:a8:4b:
27:e0:18:9d:21:4b:d2:82:be:0b:06:20:7b:c3:dc:
47:55:1b:7f:bc:a3:53:19:b0:5a:c9:e9:25:c3:76:
06:36:f4:5d:ea:8e:8b:89:de:b2:70:89:fa:30:a6:
87:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A8:9E:BB:59:A8:14:D8:91:A6:0D:40:45:59:5A:37:C3:96:D6:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aed60baf-c001-35ee-a723-b1a0daf81c1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.18.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:4f:b7:56:43:98:22:54:4a:ec:f2:e4:4a:01:11:f2:72:10:
7a:0c:c5:cd:a4:90:3b:e2:18:e8:dc:ee:ba:2b:e5:cd:9f:b8:
c6:88:a8:95:2c:59:10:42:65:99:3a:0c:c9:f0:3a:74:fa:6f:
9f:a1:d2:90:51:ac:eb:cf:39:a9:b0:41:61:29:74:9f:98:21:
83:85:7d:26:d4:7a:01:b8:d2:2f:db:c7:70:b8:5c:c2:1a:30:
3c:21:e4:52:80:1f:01:53:12:86:f9:71:71:95:76:ad:17:8c:
9d:f3:cb:a4:e9:44:ea:8a:9a:68:b9:15:f9:e5:3d:c1:bb:a9:
0b:77:c1:7a:7c:90:7b:9b:08:e3:ad:76:35:52:91:38:40:0a:
c1:e6:f8:af:43:cb:27:ee:3a:cd:76:40:e1:e3:9f:ba:5a:88:
15:35:02:33:05:34:5f:c5:90:62:01:60:a5:64:5c:cd:15:39:
9a:10:21:aa:f3:d3:3c:23:7e:7f:56:2b:7e:84:60:53:e1:ac:
94:c9:97:4d:66:e6:65:e6:38:8c:d6:f5:6f:4c:51:34:c1:1d:
31:bd:ac:c0:33:c9:2f:f2:ee:d3:97:91:c0:36:fe:c8:f1:62:
50:6c:6a:5f:5a:cc:71:a2:7b:ac:2d:01:44:84:8b:96:d3:c2:
54:3f:21:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:50:21 2025 by rpki-client