Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c7e529f9-e066-38ff-9a95-26ecf24ba2d6.roa
File: c7e529f9-e066-38ff-9a95-26ecf24ba2d6.roa (raw, json)
Hash identifier: zjXX3icgNqCpNpRYS3KLFW0O9+7vxQjW0OsXVlDY7/E=
Subject key identifier: 30:AD:CB:86:63:EF:9B:45:B9:FA:03:2D:33:28:55:5C:96:0A:1F:D8
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CE0BCDCA50CEFD4EC2AE5AE00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c7e529f9-e066-38ff-9a95-26ecf24ba2d6.roa
Signing time: Wed 09 Feb 2022 05:00:00 +0000
ROA not before: Wed 09 Feb 2022 05:00:00 +0000
ROA not after: Wed 16 Mar 2022 04:00:00 +0000
asID: 16509
IP address blocks: 136.18.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e0:bc:dc:a5:0c:ef:d4:ec:2a:e5:ae:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 9 05:00:00 2022 GMT
Not After : Mar 16 04:00:00 2022 GMT
Subject: CN=5ed4b1a3-fab2-4fd6-8c3a-cea8dd4285bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e2:79:c3:cd:63:e9:3b:f5:6c:bb:2d:ae:cb:
44:80:9f:a8:7b:1f:11:f9:0b:e0:c3:e8:04:48:5a:
1f:98:84:10:ac:72:eb:e5:5d:80:2e:da:ff:10:05:
19:cb:88:d1:e7:99:86:8a:cf:f4:21:36:08:a8:3e:
4b:f8:ef:68:6f:48:72:20:a4:18:9c:3f:d7:c3:84:
bb:7b:c7:27:fb:ca:03:58:77:44:e2:a4:d5:86:68:
4e:77:78:c2:ee:01:48:0d:e5:ba:ac:30:2c:ef:1d:
e7:42:68:0e:3f:7a:d8:37:f3:df:0a:46:b9:9c:07:
5d:84:90:5a:94:ed:db:9c:e9:64:6c:8d:5f:e2:31:
93:dd:44:42:3a:fd:f9:92:51:77:c7:e2:f4:34:69:
3e:0d:44:63:aa:50:19:3c:27:b7:c8:58:49:fd:cd:
52:ee:14:f3:70:cf:85:70:b0:2c:4a:f5:31:ef:79:
82:67:13:f7:95:a5:30:7b:b3:44:c7:4b:4c:4c:0e:
37:ca:69:0d:dd:68:8d:f6:1b:14:19:1f:2f:f7:93:
a1:6b:61:c0:52:2f:30:c3:e8:24:da:47:5a:02:8d:
45:51:86:dc:61:d9:b3:c7:2c:f3:fb:c1:cf:44:b0:
2f:b9:e3:7a:fb:95:33:70:84:3f:e8:fb:61:c6:cb:
bc:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:AD:CB:86:63:EF:9B:45:B9:FA:03:2D:33:28:55:5C:96:0A:1F:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c7e529f9-e066-38ff-9a95-26ecf24ba2d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.18.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:01:5e:e1:c7:e8:6a:73:27:f2:e0:c9:46:ca:48:02:3b:27:
dc:d2:ab:d2:27:cb:67:17:e3:36:4f:20:4c:73:9c:db:1c:2a:
ce:95:30:76:b0:c6:57:c0:22:9e:96:0b:f0:de:e5:1e:64:2f:
f9:25:62:d8:58:d7:9e:50:61:7b:7c:10:a5:e7:b5:5f:c8:cb:
a0:1e:1e:88:30:d7:e9:e9:0b:2b:3e:1e:68:ef:57:4e:37:0a:
de:d4:fc:82:4f:7e:9f:87:da:35:e4:b0:60:ec:25:b3:4f:4a:
79:62:ab:16:8f:f6:65:be:3a:0c:4b:33:c4:4b:bc:6b:31:58:
f1:66:37:99:2a:d0:c0:3a:91:8b:a5:6a:5e:75:ce:fd:f7:81:
85:ea:a6:12:ce:f4:a5:88:16:70:c8:5c:ef:d7:15:37:c0:71:
b0:6e:33:44:cc:39:06:2b:5d:3e:5f:fa:40:51:4e:c4:c8:a6:
6d:3a:80:ad:6d:63:49:7a:e2:50:89:30:45:06:3a:00:89:bf:
00:a7:3f:59:a6:3d:0d:50:ef:0f:a9:83:6a:a1:78:39:98:fd:
88:6e:d9:66:59:3f:9f:d4:3c:90:a9:20:3a:b0:c4:34:84:e3:
d0:8b:1d:b8:75:c0:d9:aa:c3:3e:33:4d:c8:4b:a9:50:8a:a6:
f3:66:ff:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:03:41 2025 by rpki-client