Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e3471c77-be9e-3f19-a920-36bc45c53a63.roa
File: e3471c77-be9e-3f19-a920-36bc45c53a63.roa (raw, json)
Hash identifier: zxmRo/MwsOgJnWvOZFRg8JXKXxiZ5g6XLVR8aUxA5eY=
Subject key identifier: 70:40:2F:B6:D2:EA:58:15:37:E0:97:F6:B9:4C:10:C7:36:76:1C:EC
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E8EE5A2A5E781FEEAABEABF00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e3471c77-be9e-3f19-a920-36bc45c53a63.roa
Signing time: Wed 13 Jul 2022 12:00:00 +0000
ROA not before: Wed 13 Jul 2022 12:00:00 +0000
ROA not after: Thu 18 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 136.9.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:8e:e5:a2:a5:e7:81:fe:ea:ab:ea:bf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 13 12:00:00 2022 GMT
Not After : Aug 18 04:00:00 2022 GMT
Subject: CN=b0f1c30b-c5c6-48ce-84c5-d9a7498cb41e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ca:a5:1c:54:50:ec:62:e6:f6:ca:17:6f:2d:
d3:3c:5c:af:42:88:df:f6:a0:2c:43:ea:66:52:6c:
ba:fe:a9:7c:d1:f3:7b:81:7c:27:be:01:e5:9e:91:
aa:04:f6:59:e3:31:f4:9b:95:18:f3:97:a5:75:48:
4a:24:a2:49:f2:3c:1e:91:f9:ce:30:b0:af:2d:d4:
e2:c9:71:cd:b0:1e:d5:22:95:84:9b:56:65:ce:0c:
0c:dd:7a:d2:3d:46:71:33:97:7d:59:fc:98:5e:9b:
bb:66:8a:63:5d:30:6a:92:9b:51:1b:39:f2:e7:4b:
3e:25:7f:48:4f:fa:ab:64:b6:6d:70:da:98:b2:31:
b8:58:e3:2f:c2:fc:2c:16:a4:61:2a:0e:ff:b6:12:
75:02:85:fc:85:0e:83:d2:24:7c:aa:4b:1c:9d:68:
bd:d1:17:8f:6e:f5:84:a3:0c:86:35:ff:08:7b:3f:
da:ec:d0:26:64:7a:9e:e9:9d:40:d4:90:91:e9:a9:
df:80:f4:73:be:80:c6:63:59:7c:f2:ce:c5:1b:4b:
ea:db:53:ed:da:74:1f:e0:76:15:1d:84:ad:bf:85:
fc:52:34:19:33:e8:92:4d:7f:e0:00:b3:93:22:12:
0b:ac:15:c9:e8:aa:6b:15:fd:d8:76:f0:d6:c7:4c:
2e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:40:2F:B6:D2:EA:58:15:37:E0:97:F6:B9:4C:10:C7:36:76:1C:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e3471c77-be9e-3f19-a920-36bc45c53a63.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.9.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:b2:f0:7d:ee:a4:df:cb:ed:5d:65:0a:ff:c8:18:2c:a4:92:
6f:04:bc:0e:3b:7b:dd:71:71:b0:0a:7a:c5:ef:f9:70:cf:9f:
f3:ae:8e:8c:c2:f2:20:6f:af:30:e0:7a:69:c5:bf:44:b6:7c:
10:cd:d3:4e:25:67:64:7d:b0:3e:68:8f:fc:13:9d:8d:4d:bf:
e8:27:c1:66:d3:b1:39:2a:78:18:f7:1a:9f:5d:90:46:13:4d:
d4:0f:f0:ca:de:9e:de:f9:64:f7:15:a5:86:09:fd:56:e7:03:
0d:1a:12:c8:9a:91:a9:a4:1f:69:cf:20:02:a0:55:38:c2:06:
59:a6:0e:a4:a4:9e:4b:9f:bd:22:af:b1:02:53:07:00:55:9b:
e8:b1:d2:07:20:2f:a8:56:ee:38:68:37:ef:3c:8a:c2:66:24:
ae:dd:c5:19:33:02:bb:53:dc:96:32:cb:85:a1:1e:7b:ee:36:
98:ef:2a:95:e7:c0:20:30:d3:69:75:30:a4:ba:56:00:56:05:
22:77:cc:aa:26:ab:6b:f2:5f:65:25:d1:7f:dc:59:86:c1:c9:
37:4c:95:65:be:23:e1:57:d6:02:9a:44:c0:53:b8:40:0c:17:
57:44:dc:27:24:f3:38:c6:cd:34:97:e2:5f:b6:ca:7c:35:cb:
c3:14:6e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:18:58 2025 by rpki-client