Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d8fcfa6d-f27e-3561-a18d-575967aecece.roa
File: d8fcfa6d-f27e-3561-a18d-575967aecece.roa (raw, json)
Hash identifier: m7g0A0+quLLzOElLGmQRtxVOIZhBUyF0kAyKkN4nb4w=
Subject key identifier: 2A:B2:98:CA:EB:AE:37:55:99:D4:55:52:54:E7:49:66:A5:C5:3C:12
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584016EEAB74E8C1CC430E985D80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d8fcfa6d-f27e-3561-a18d-575967aecece.roa
Signing time: Wed 30 Nov 2022 12:00:00 +0000
ROA not before: Wed 30 Nov 2022 12:00:00 +0000
ROA not after: Thu 05 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 136.9.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:16:ee:ab:74:e8:c1:cc:43:0e:98:5d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 30 12:00:00 2022 GMT
Not After : Jan 5 05:00:00 2023 GMT
Subject: CN=19cb2da2-d4e5-4011-8a8e-d58b40026f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:45:e1:cb:05:10:0a:de:4c:8b:db:36:e1:8e:
b7:fa:85:37:e5:37:fe:e3:83:a9:2a:82:9e:ee:fe:
ae:7f:5c:71:7a:c7:94:1b:db:6e:f6:f1:6c:d2:2b:
92:a5:e1:b3:c4:e8:01:2d:a6:e6:6d:23:92:c0:05:
de:d5:29:18:09:43:f6:86:fa:f7:09:76:41:aa:59:
51:a7:8c:4c:bd:86:fe:f2:44:ae:cc:5d:c1:b2:6c:
88:26:94:bd:ff:1d:6f:fa:f3:1e:e6:78:86:75:ab:
8a:bf:69:42:06:cf:40:7b:27:1b:69:8a:76:cb:00:
32:8b:ce:6c:b7:3b:81:00:be:4b:90:4e:36:c5:b2:
c9:3f:8d:70:87:85:84:03:ca:82:1e:c1:e8:11:fc:
72:53:86:29:25:7b:ce:9d:e7:01:8d:b2:3d:f6:f1:
64:39:7e:21:2a:bf:31:ab:d6:54:f7:82:f4:0d:17:
3f:0b:c6:05:59:57:8a:65:f5:69:6d:fa:a6:2d:06:
dd:ef:12:24:13:60:ee:0c:54:8c:04:1c:29:93:dd:
5a:96:b9:92:dc:64:77:46:6c:a7:2f:17:ca:3f:8f:
db:85:f8:c8:75:28:89:98:60:6f:1b:7b:57:28:0f:
a7:9d:6d:cf:8c:fd:24:d9:b0:40:79:c8:f2:08:25:
96:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B2:98:CA:EB:AE:37:55:99:D4:55:52:54:E7:49:66:A5:C5:3C:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d8fcfa6d-f27e-3561-a18d-575967aecece.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.9.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:48:b7:4e:16:04:78:41:5f:74:a4:ff:d0:56:a9:a1:0d:92:
43:2b:8b:e9:ac:aa:2a:80:61:c6:da:dd:52:c3:df:67:a0:55:
98:be:e9:1f:ee:13:94:f0:b2:e0:f6:79:fb:89:14:1b:0a:55:
58:ee:4a:6a:e6:21:81:0f:af:c3:67:e4:41:a5:28:93:67:5b:
16:79:a9:c3:a0:8a:e3:74:86:aa:64:e6:fb:6b:1e:b6:f1:3c:
ad:e0:c3:ea:8a:ee:54:da:f1:c0:37:c4:67:ca:7f:2e:2f:03:
fb:22:6c:d0:92:c6:29:db:54:cb:47:9f:bb:f0:be:65:95:c8:
3e:64:1f:4e:7f:d6:ad:ba:f0:1e:58:bf:e9:42:94:e9:d6:93:
18:d3:bc:a4:73:d8:05:48:3d:a3:0a:44:15:26:40:d5:e6:bf:
bd:3a:1b:57:34:09:0b:35:66:7e:ee:d8:6e:89:91:3d:fa:8f:
44:6d:cb:9e:19:41:7e:0d:45:35:cf:e0:5e:00:a3:a0:2c:1b:
82:84:c7:a5:85:78:38:a3:6f:71:d3:2f:be:c1:c5:87:39:d5:
17:63:b4:7e:cb:e6:c3:57:59:35:52:ec:85:1c:e1:bc:86:2d:
3d:9f:2e:68:1a:23:8b:2b:5c:be:57:a5:a9:76:75:b7:ab:fc:
eb:b4:a8:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:35:30 2025 by rpki-client