Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bb541b84-30bb-3be6-bce9-d1a41b617554.roa
File: bb541b84-30bb-3be6-bce9-d1a41b617554.roa (raw, json)
Hash identifier: q7XaroQRH0I2QMoIsrWv61XQTpOsKvejoUh4TGYX0fU=
Subject key identifier: BB:19:02:47:80:0A:52:44:63:56:03:B7:C1:2B:E3:68:24:9D:A0:D0
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858401756E48BADDA643310555900
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bb541b84-30bb-3be6-bce9-d1a41b617554.roa
Signing time: Wed 30 Nov 2022 12:00:00 +0000
ROA not before: Wed 30 Nov 2022 12:00:00 +0000
ROA not after: Thu 05 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 136.10.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:17:56:e4:8b:ad:da:64:33:10:55:59:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 30 12:00:00 2022 GMT
Not After : Jan 5 05:00:00 2023 GMT
Subject: CN=4705dc34-c947-4cc1-9331-1b2aa91baafe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e5:84:99:0e:ee:99:f3:a7:8d:02:93:ed:eb:
e7:d7:00:f1:70:dd:9f:9c:fa:5e:18:8d:59:8d:fe:
b3:e9:c6:df:24:3a:a3:cb:1c:8b:1a:ac:60:8f:38:
a7:49:02:f3:e6:b1:1e:34:ef:81:c2:83:fc:b5:35:
7b:c7:aa:76:e4:92:c2:d5:2d:81:86:9e:c2:8b:9f:
fb:8b:c2:03:2b:ff:42:30:86:53:9a:1b:fe:37:b8:
30:d3:6b:3a:3b:7b:13:b8:0a:68:dd:16:25:15:23:
35:fb:b7:5e:d3:21:80:f6:f0:31:4f:e9:f9:60:72:
bf:8d:ec:81:2c:5b:f3:d2:4f:a6:b0:f5:00:1c:cc:
4e:21:3c:02:57:f3:de:f1:45:6c:43:c8:86:90:6b:
23:57:8e:aa:dd:cd:59:23:cd:af:e2:c9:21:4f:bd:
c6:1b:04:e0:9d:e8:bd:19:9d:b8:01:1b:8c:ca:96:
23:de:0a:9f:ac:e5:e2:1d:66:2a:d5:0c:97:15:03:
3f:48:e1:33:ff:a6:d2:e0:84:8a:8e:00:82:75:87:
0a:7b:77:2d:0b:a7:ca:b5:dd:a4:d0:85:46:a6:31:
51:9b:15:c8:22:3e:40:83:a1:19:92:55:e2:29:13:
89:5e:cc:32:9a:71:15:0a:8b:9a:df:b5:e4:ed:8e:
da:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:19:02:47:80:0A:52:44:63:56:03:B7:C1:2B:E3:68:24:9D:A0:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bb541b84-30bb-3be6-bce9-d1a41b617554.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.10.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:af:55:5e:69:7d:ee:51:e6:34:2f:8a:7b:3a:7c:68:84:a6:
01:eb:ec:63:33:85:8d:e2:91:21:b9:d5:97:90:7a:48:c9:56:
44:85:78:ff:f1:ec:6a:5c:7a:ad:bf:de:91:af:f3:d7:fb:39:
7e:f4:d0:97:69:88:2a:5d:75:39:9c:e9:a1:bf:a6:e8:1e:63:
3d:f8:66:5d:ca:81:c9:ab:21:2d:1a:c9:cf:96:40:40:fa:a5:
1b:ab:73:69:0e:22:5b:21:a2:51:85:cb:fc:d7:92:f3:a9:5f:
39:3d:1a:2c:c9:33:94:7d:bc:79:e8:4b:08:cd:71:50:c3:cf:
97:06:fa:13:c5:78:8d:ad:b4:04:9e:b3:7a:87:2b:18:db:b3:
8f:6d:e1:5a:cf:50:96:5b:1c:4a:df:4f:3d:3f:3c:4f:c6:8b:
d0:de:01:a7:c0:fe:09:5b:3b:28:42:c9:ed:48:68:7a:39:3e:
60:0b:5f:e8:60:f0:4d:ce:59:3f:14:6d:15:bc:d8:dc:6d:3c:
07:10:65:be:c2:c8:f8:15:8c:b2:6f:e5:ef:2b:90:65:40:f3:
22:42:da:7c:95:d9:95:a0:8c:93:42:fc:e2:73:8e:56:35:70:
f8:32:7e:0e:33:ac:8b:6d:de:3b:b4:9e:82:bd:11:61:ee:53:
d3:93:52:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:54:58 2025 by rpki-client