Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d5484774-eb8f-39d2-8274-6adf0b0a3536.roa
File: d5484774-eb8f-39d2-8274-6adf0b0a3536.roa (raw, json)
Hash identifier: xv3SVVGXdlU9Hbv0Hq2KZHqpkutUdgm1/Y5DeUxBDn8=
Subject key identifier: BF:60:F6:8A:1B:1B:01:1F:C7:B0:B7:F0:49:22:F8:A5:8D:C1:6B:78
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F045A5A10CE95A72C7F580720
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d5484774-eb8f-39d2-8274-6adf0b0a3536.roa
Signing time: Wed 24 Aug 2022 12:00:00 +0000
ROA not before: Wed 24 Aug 2022 12:00:00 +0000
ROA not after: Thu 29 Sep 2022 04:00:00 +0000
asID: 8987
IP address blocks: 136.8.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:04:5a:5a:10:ce:95:a7:2c:7f:58:07:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Aug 24 12:00:00 2022 GMT
Not After : Sep 29 04:00:00 2022 GMT
Subject: CN=31aee5b8-8458-4180-837b-64f53496d556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:76:53:0a:66:09:7c:ff:8f:2c:b4:c5:a9:e4:
10:0e:24:c4:a5:87:6d:08:07:84:8d:7d:3b:b1:86:
b7:ce:c3:7a:ee:4f:59:0f:71:07:6c:fe:f1:c9:ac:
19:62:87:b8:d7:85:24:82:32:a1:78:1f:38:43:00:
6b:d1:c5:f9:dd:ce:90:76:60:bb:00:89:bb:b6:1d:
00:95:67:bd:66:c3:9e:d2:90:90:57:a0:10:8c:b5:
a3:72:53:9e:31:9f:e3:11:f9:7c:dc:95:48:8c:8d:
bd:2f:21:92:7c:24:33:c7:b8:ca:0b:44:17:3e:c3:
be:6e:03:e7:4c:83:a4:ab:f3:21:ac:51:ef:02:1d:
ef:18:52:04:0c:48:ee:42:5f:ff:0e:78:03:71:49:
09:75:4b:53:0d:c3:82:13:2b:78:95:96:32:91:b1:
06:a1:13:0c:af:d7:29:ad:7d:f0:4c:8f:82:1f:51:
a8:8a:4c:dd:82:a5:df:c9:a9:55:6a:18:5b:bb:24:
67:e9:f0:21:31:a2:85:4c:1a:34:1d:25:13:f4:32:
4a:0d:12:28:2f:34:88:1d:4d:dc:0f:40:79:cb:56:
e7:f1:9d:2e:e3:d1:ff:67:e4:4a:48:91:7b:a7:f0:
33:0e:be:e5:96:b1:22:5d:92:7e:d9:92:4b:6c:b8:
f4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:60:F6:8A:1B:1B:01:1F:C7:B0:B7:F0:49:22:F8:A5:8D:C1:6B:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d5484774-eb8f-39d2-8274-6adf0b0a3536.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.8.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:45:aa:7c:7c:36:b9:66:dc:d1:03:37:41:1b:cf:aa:c1:25:
e0:77:ac:a5:0a:33:70:1a:21:90:89:15:c9:30:4d:c5:5b:45:
56:83:8b:82:07:b4:1c:25:80:ba:d6:4b:21:e9:2d:e8:02:d7:
c7:c0:6b:43:aa:59:c3:39:a0:a6:af:82:e7:d4:8a:22:ab:d6:
26:8e:b6:86:2b:7e:d9:d7:54:9c:b5:d8:f7:66:ba:96:cc:59:
ca:2f:82:f0:3c:19:d0:15:67:98:22:d7:29:eb:75:35:d7:de:
ff:81:62:75:82:ca:c2:7e:f1:23:cd:c8:fe:29:9f:ad:07:18:
8b:36:85:41:2c:33:c3:7d:c5:7d:e8:9a:6c:c4:be:dd:1f:b2:
30:15:dc:81:02:1c:86:02:01:24:39:d6:42:40:f6:77:0c:da:
99:bb:28:b6:6e:6f:90:c6:7f:f7:01:74:9f:4b:96:85:05:e2:
8c:0d:29:41:df:49:b9:0b:10:28:7b:c4:d8:88:60:cc:d0:0c:
49:cd:5b:93:d3:57:2b:37:e1:ff:79:24:f8:01:c0:08:4e:05:
bb:cf:1c:ab:17:34:b2:71:93:2b:78:d8:38:1b:23:9d:9d:db:
7c:c1:77:58:b4:ae:7b:51:69:b7:91:a3:80:41:e9:70:cb:97:
79:44:76:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:36:04 2025 by rpki-client