Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/db2ef791-714f-3952-9014-1b2d7808e2b4.roa
File: db2ef791-714f-3952-9014-1b2d7808e2b4.roa (raw, json)
Hash identifier: vrBLzm7eG2Vi2bqTsDCF1zOfthCFBTmGrOUQBQ2JLfU=
Subject key identifier: 40:45:7B:B4:BE:F1:31:83:EF:DD:3B:70:21:36:FF:7F:28:0F:7C:5A
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584064AA0B82E3D562C2F7EB0540
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/db2ef791-714f-3952-9014-1b2d7808e2b4.roa
Signing time: Wed 28 Dec 2022 12:00:00 +0000
ROA not before: Wed 28 Dec 2022 12:00:00 +0000
ROA not after: Thu 02 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 136.18.56.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:64:aa:0b:82:e3:d5:62:c2:f7:eb:05:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 28 12:00:00 2022 GMT
Not After : Feb 2 05:00:00 2023 GMT
Subject: CN=79b942b5-8901-43b1-abf5-e38757874b1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e1:39:6a:16:22:6a:39:a0:eb:10:cf:37:5c:
93:72:2c:7d:b9:bd:bc:a5:16:e1:17:3e:8c:a2:c1:
a6:79:17:14:0b:23:82:50:1d:7e:f6:f8:90:38:24:
4c:e9:ce:d0:17:c5:40:ca:81:a1:fb:3e:ce:88:ae:
8d:99:92:bb:57:da:5d:87:30:0a:1a:40:3d:60:0d:
4d:ca:47:5a:90:2a:03:d9:ca:35:15:8e:3a:8b:ff:
32:d1:bc:7e:48:96:5a:35:f5:d2:12:a4:9f:e3:f9:
1a:00:e8:f9:31:c5:57:12:b3:ac:22:4b:fb:fa:03:
b1:41:4e:a8:f7:82:5b:9c:5e:02:d7:33:05:48:1f:
49:04:6f:71:1b:25:a8:e8:a4:07:61:4d:38:83:91:
b5:ca:53:8c:36:fb:49:17:46:c7:46:46:a4:34:a4:
ab:4c:c7:38:4c:6f:a8:f1:69:7e:40:05:ea:d9:37:
b2:69:fe:e1:30:73:9d:c8:33:cf:40:7e:8a:b0:c2:
69:08:37:f7:bf:f1:4c:9f:89:a4:b5:09:6b:82:d1:
64:99:90:bd:73:2b:63:b4:f9:da:1b:4b:3d:8a:56:
a7:64:49:d7:b2:03:a5:0b:49:0f:c6:39:2d:96:8b:
df:ed:99:7d:28:1f:8e:28:6d:56:53:d8:b4:fa:54:
ed:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:45:7B:B4:BE:F1:31:83:EF:DD:3B:70:21:36:FF:7F:28:0F:7C:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/db2ef791-714f-3952-9014-1b2d7808e2b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.18.56.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:56:45:f3:ad:1c:2f:50:a2:90:a0:05:66:aa:0e:18:83:4a:
73:87:73:37:1a:27:66:0b:6a:e7:ec:a1:98:bf:4b:00:97:db:
8e:1a:01:a9:5e:79:fe:3d:92:58:5d:8a:91:9a:d0:e3:25:65:
fe:3e:18:fd:fc:2d:92:a2:0f:5e:9a:d1:10:aa:b2:93:3d:47:
4e:58:1c:f7:f8:bb:c3:a4:62:b9:eb:64:8c:8e:39:01:16:e8:
e8:bf:7e:fa:3b:e7:4f:a3:7e:b4:cb:84:cf:b3:88:bb:e0:b3:
24:b0:38:b6:db:34:66:5e:cb:7b:f0:fd:29:a4:df:a0:4a:7f:
f2:0b:d9:28:51:04:ce:7f:7b:ed:dd:d5:b0:c3:80:4b:eb:4b:
5e:78:30:64:e4:6d:19:31:34:b1:e8:f7:80:ac:b7:2c:53:96:
84:43:f9:a2:aa:0c:86:c2:57:fb:2c:fb:95:68:8f:86:b0:d0:
ef:89:ef:aa:b3:d6:2b:cb:20:c4:ad:85:d3:91:c7:8a:fb:27:
d8:d4:bb:6a:67:88:72:89:75:17:02:c8:12:eb:c8:3f:e2:e1:
63:3d:a0:5b:f8:4c:5f:5c:cb:32:a7:5b:b0:33:08:0e:fb:a0:
92:69:6a:54:7a:e3:c7:05:19:e1:fb:c8:90:27:48:7d:94:19:
a6:ea:d3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:44:42 2025 by rpki-client