Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cecec684-872f-3bd1-93a6-6d2e2a0e710d.roa
File: cecec684-872f-3bd1-93a6-6d2e2a0e710d.roa (raw, json)
Hash identifier: QTj2SPldiyyDvtM9t4R7b+69SrcB4Gb5rYJS0DkeLkE=
Subject key identifier: FA:66:F5:02:BE:BF:76:65:F8:09:E0:2F:C1:AC:32:9F:D8:93:89:E1
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D2EFE41B6C69B27D38A766180
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cecec684-872f-3bd1-93a6-6d2e2a0e710d.roa
Signing time: Wed 09 Mar 2022 05:00:00 +0000
ROA not before: Wed 09 Mar 2022 05:00:00 +0000
ROA not after: Wed 13 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 136.8.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:2e:fe:41:b6:c6:9b:27:d3:8a:76:61:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 9 05:00:00 2022 GMT
Not After : Apr 13 04:00:00 2022 GMT
Subject: CN=348719ad-f81b-41f5-ad0e-8993b9ef792e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:39:61:6a:9a:69:ba:4e:d9:74:d4:26:85:d6:
ea:31:8e:9b:c6:60:ae:9d:b4:c6:f7:41:a6:47:a1:
30:41:db:5f:fe:e1:c0:10:29:cb:73:4d:e1:bd:67:
7f:ea:89:e9:25:57:3c:62:c6:8b:5c:6c:3f:f0:f8:
fb:a7:03:25:15:4a:82:80:95:88:4b:54:2a:c0:ef:
b8:93:1d:2f:26:9f:7b:10:ef:ee:88:8a:98:06:9c:
10:09:1a:08:2e:79:9d:57:57:72:b6:9f:0c:1a:b7:
51:7a:aa:ba:11:44:82:2a:c8:d0:e5:e9:be:41:e5:
17:b7:06:ed:c7:50:2d:b8:f8:89:aa:b1:40:cf:b1:
13:ad:78:0d:f4:b8:43:52:31:47:73:ba:d8:8b:a0:
90:9e:42:e0:ee:a4:f9:e6:79:23:aa:94:9a:5a:5d:
74:dd:08:66:3c:9d:d0:43:d3:8b:64:54:ef:3c:ae:
e5:83:33:fe:7c:d4:b5:e7:5d:ed:39:99:b9:60:d3:
dd:26:ac:08:c7:4a:6e:6d:b7:cf:dc:6e:41:ed:c0:
30:7e:cd:63:0e:ba:32:ab:c9:09:46:54:64:c3:cd:
56:a0:79:08:0d:fc:3b:e0:26:76:0d:08:1a:f7:b7:
d2:d7:a4:3b:16:bb:01:7b:9f:31:a3:93:5b:15:d5:
d9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:66:F5:02:BE:BF:76:65:F8:09:E0:2F:C1:AC:32:9F:D8:93:89:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cecec684-872f-3bd1-93a6-6d2e2a0e710d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.8.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:92:88:09:d7:52:4e:7e:90:c8:22:f9:4e:cf:ff:fb:57:91:
3c:8a:2a:82:5e:be:b5:dd:7b:06:e5:da:5b:6a:15:43:c0:23:
8d:26:da:34:d4:3f:bf:ed:fc:98:7d:97:7f:9c:d3:d5:96:32:
ae:fa:06:77:32:f7:20:ce:2c:64:d5:2f:2b:ad:be:6b:dc:89:
77:45:11:7a:44:65:f4:f8:c9:5d:14:9d:34:9b:2e:97:d0:dd:
5d:f2:05:e5:ed:93:a4:f6:c9:dc:fa:19:37:8b:37:f0:3e:88:
81:2c:e6:5c:fb:f5:84:ee:57:a0:21:6a:85:11:b1:d6:32:80:
6d:c5:6d:7c:46:bb:2d:99:2e:1d:c1:2f:94:be:de:97:6b:5e:
cb:24:f4:43:26:f0:e7:b7:09:91:bc:d1:c4:6e:d4:20:ad:ca:
ea:63:e3:a7:3d:d9:f1:95:13:38:ef:de:6f:ce:d8:fe:73:25:
7a:e8:ae:3d:13:0f:05:eb:6f:dd:04:c9:48:ec:c4:c0:6a:60:
bf:47:20:e9:5f:e5:02:00:fe:60:be:f2:cc:91:f9:de:03:7b:
26:a8:e2:9e:66:ad:94:21:ed:49:6a:83:6e:00:9f:63:d9:60:
f5:ec:5e:72:9d:2d:a4:6d:34:44:3e:96:15:c5:60:14:92:d1:
ae:2b:f3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:13:25 2025 by rpki-client