Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c5211ee2-4d29-3520-8240-81d8e58e033f.roa
File: c5211ee2-4d29-3520-8240-81d8e58e033f.roa (raw, json)
Hash identifier: A9uDSulsDQDNE3Uz1DJ/49GilYvhMsDtE7v3FMYMwuc=
Subject key identifier: 50:98:C4:6E:89:0B:BA:3A:27:00:0B:77:01:B2:5E:E8:EE:AA:88:89
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E19AC5AF6B72A6B1C598D6F00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c5211ee2-4d29-3520-8240-81d8e58e033f.roa
Signing time: Wed 01 Jun 2022 12:00:00 +0000
ROA not before: Wed 01 Jun 2022 12:00:00 +0000
ROA not after: Thu 07 Jul 2022 04:00:00 +0000
asID: 16509
IP address blocks: 136.8.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:19:ac:5a:f6:b7:2a:6b:1c:59:8d:6f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jun 1 12:00:00 2022 GMT
Not After : Jul 7 04:00:00 2022 GMT
Subject: CN=71d8aac6-2063-476f-b083-3fc1019accae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:40:86:7e:2c:83:21:ae:81:88:37:6c:ee:bf:
c2:5d:5e:11:26:57:6f:93:cb:5a:22:0d:2d:c1:2f:
66:9e:f3:2b:a7:62:38:a5:f2:4b:fb:d6:22:7f:fd:
3b:e1:ab:ef:e2:d6:a5:b8:23:fe:e9:1e:72:e6:b9:
bd:de:e8:00:67:37:3e:36:42:e7:de:35:56:4c:47:
8e:af:10:ea:07:68:29:d2:de:6f:9d:07:9c:65:fa:
06:b1:ed:aa:e5:46:b2:60:a6:38:85:e3:bd:12:f1:
3f:ac:ab:b3:ae:b2:82:62:95:76:2d:99:50:cd:70:
2f:cb:08:a1:48:9c:dc:ce:ab:5b:20:3f:33:19:11:
10:20:23:34:be:b6:2f:12:cf:7a:0b:54:bf:2d:52:
06:2c:40:9a:e9:5e:46:70:f2:a6:2f:41:27:45:d2:
fa:93:56:04:35:4c:12:58:92:62:d9:5f:ee:30:64:
ae:81:2c:26:4c:cb:a8:2e:ae:d9:8a:ae:6c:b9:2a:
65:12:46:51:f9:af:bf:bc:7b:00:70:b9:75:49:89:
3c:98:72:54:2f:98:7e:39:7b:9e:d8:1d:57:66:09:
49:61:94:99:a6:bc:64:0c:1d:4c:bd:32:63:0c:ec:
14:e3:d5:e5:d4:15:ed:c9:e0:ca:45:cb:d1:0a:d6:
d8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:98:C4:6E:89:0B:BA:3A:27:00:0B:77:01:B2:5E:E8:EE:AA:88:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c5211ee2-4d29-3520-8240-81d8e58e033f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.8.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:d4:ab:1a:07:a4:a7:22:9b:e8:14:59:ae:31:2f:ff:c4:6b:
3a:5e:36:d2:3c:fc:96:75:00:dd:30:c8:a9:f5:42:9e:6d:d6:
78:a2:5f:79:97:dd:0d:be:bd:be:a1:0e:e2:f2:d9:67:93:96:
bb:c5:40:21:13:e6:6d:e1:3d:93:fc:2a:b8:80:88:fb:be:95:
df:8d:a4:a6:1d:78:ac:bf:4f:e0:e1:14:ca:19:60:76:e1:fc:
e9:26:3d:ae:71:d5:d8:14:f7:d7:c5:44:db:0b:46:51:a8:bb:
b7:88:11:c8:d5:dd:a0:0e:73:34:ff:54:53:3b:ec:94:3a:76:
f4:7e:bb:d7:67:3c:a1:ff:18:de:81:96:a8:84:d0:67:9e:4d:
92:de:4c:44:9c:e1:a0:99:fb:d2:8d:45:18:c3:47:57:b6:fd:
63:84:61:b3:ba:c1:f2:c6:d0:66:ad:96:64:60:79:2a:e6:1c:
7c:f2:b7:0f:7a:97:c9:a9:d1:9e:c5:c0:6f:8a:b8:d8:c4:00:
58:09:ae:25:f0:11:9e:8f:b6:43:2b:28:9c:76:ab:db:89:86:
82:ca:6a:6f:f2:21:99:d3:f9:bd:ef:e4:24:ba:14:68:70:78:
e5:88:fe:b3:6f:76:2e:c6:19:43:87:61:96:49:59:05:54:21:
d3:99:ab:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:59:59 2025 by rpki-client