Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bbfdc10c-0994-3f48-80f5-af47f798e74f.roa
File: bbfdc10c-0994-3f48-80f5-af47f798e74f.roa (raw, json)
Hash identifier: 8kjJ1mKBvGXI3qDHQmYxuG3J129dKBkU2G6g7Ie0ys4=
Subject key identifier: 70:D2:D5:5B:50:42:AD:D3:CF:A1:FB:BF:71:C5:02:A5:E4:E8:08:81
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DF287B71864EB7746E292EF00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bbfdc10c-0994-3f48-80f5-af47f798e74f.roa
Signing time: Wed 18 May 2022 12:00:00 +0000
ROA not before: Wed 18 May 2022 12:00:00 +0000
ROA not after: Thu 23 Jun 2022 04:00:00 +0000
asID: 14618
IP address blocks: 136.18.56.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:f2:87:b7:18:64:eb:77:46:e2:92:ef:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 18 12:00:00 2022 GMT
Not After : Jun 23 04:00:00 2022 GMT
Subject: CN=233e67d5-184c-44bf-8f79-24a3280929d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8f:ab:2c:2c:25:0f:93:d0:fc:3b:df:a4:96:
2e:0d:2f:ba:1c:05:5d:ae:cb:52:2f:41:ba:0f:57:
8b:58:df:07:06:8a:ab:1f:10:90:a3:78:d1:69:05:
5e:cd:5a:67:7a:be:9e:69:a1:a6:02:c7:d3:d6:de:
b6:4b:33:28:7d:64:da:c9:43:0a:0f:ad:6e:9f:ad:
ed:af:cb:d2:c4:6f:37:da:42:3a:18:02:83:a6:0e:
94:78:b4:35:81:cb:db:13:49:74:9c:e8:17:43:33:
51:df:59:c6:af:5d:e2:a8:37:0f:aa:15:8b:4b:7f:
9a:80:4f:ea:ac:fc:dc:5f:2f:63:d1:b8:a1:e1:2f:
95:a2:b5:0c:73:eb:c5:fa:f5:1c:9e:59:42:c1:c5:
94:f1:bb:98:e7:70:90:b0:89:fd:9b:1c:35:40:1a:
25:a3:fe:02:87:26:3d:f0:d0:dd:ba:1a:82:0b:78:
d0:84:2d:39:dc:84:01:b1:a5:06:f4:67:12:56:52:
49:54:c8:65:09:ef:9e:0e:e5:4b:56:0c:50:03:22:
ee:ea:5e:c7:ee:dc:f1:88:1c:5c:42:1d:e2:17:51:
a1:6c:cd:e7:31:0e:3e:d6:87:d2:da:af:f0:90:62:
95:b1:ac:3b:c1:e3:4a:45:db:e8:cf:91:dd:1d:ba:
b0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D2:D5:5B:50:42:AD:D3:CF:A1:FB:BF:71:C5:02:A5:E4:E8:08:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bbfdc10c-0994-3f48-80f5-af47f798e74f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.18.56.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:a4:be:c8:77:c9:6a:9a:ee:71:07:7f:3d:62:40:f8:e3:71:
14:dd:11:e9:e7:cc:33:3d:97:bb:b8:9b:04:7b:88:d9:1c:c1:
ca:cb:c6:d4:b7:43:03:6e:22:e6:e5:da:f8:40:0b:03:f3:75:
f0:d9:eb:ea:80:07:da:61:27:29:88:72:55:7f:65:01:63:3c:
67:1d:14:6e:42:8a:8d:b7:eb:c6:c2:c6:86:0e:d6:15:2f:5d:
d6:35:1f:77:b7:1d:b2:b0:9a:ee:bc:cd:f2:54:4f:2b:a5:8f:
83:12:fb:b4:53:26:19:ba:1a:e7:0b:f9:94:92:57:41:91:f2:
f1:5c:11:09:de:9e:c7:17:51:04:48:4a:4e:6e:9f:7e:76:a7:
aa:80:e5:80:e2:f4:d5:d5:0e:4b:fd:30:df:d9:49:2b:12:90:
af:a8:48:d5:ed:b4:0f:7f:7a:c6:b3:30:f4:f9:05:93:8a:63:
0d:f3:ea:0e:18:a7:e1:a2:ed:25:50:0e:16:75:69:d0:48:a2:
14:a7:6e:e7:cc:8c:91:4c:88:e0:6b:76:37:cf:b7:d3:e6:37:
82:3a:2c:7b:d9:a8:73:c5:dd:37:ce:98:bf:4c:1a:d5:d0:a8:
27:c5:42:85:f5:8a:19:03:b0:07:b0:07:f2:d7:54:16:41:4e:
ec:c8:aa:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:49:58 2025 by rpki-client