Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ec3a9012-6698-33c1-8f66-b8d1f0b08728.roa
File: ec3a9012-6698-33c1-8f66-b8d1f0b08728.roa (raw, json)
Hash identifier: AZ9L60+WDXQ8XNfp0pIPG49wwaxwuzD+/laEzrjg26M=
Subject key identifier: 9D:CE:48:6E:68:FF:A1:B7:EC:8F:97:8C:0C:C0:B7:36:68:8C:89:49
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E67D77666EEC08375BFB61D80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ec3a9012-6698-33c1-8f66-b8d1f0b08728.roa
Signing time: Wed 29 Jun 2022 15:27:08 +0000
ROA not before: Wed 29 Jun 2022 15:27:08 +0000
ROA not after: Thu 04 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 136.18.24.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:67:d7:76:66:ee:c0:83:75:bf:b6:1d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jun 29 15:27:08 2022 GMT
Not After : Aug 4 04:00:00 2022 GMT
Subject: CN=ce0fc0bc-969f-4bf1-9add-7501e9d60ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c2:9d:d0:b1:6f:a0:a3:ff:6c:4d:5f:f7:5c:
05:05:fe:11:8e:ff:3e:fb:1a:3f:05:bd:fd:e3:23:
8d:e0:45:25:5e:87:c0:0c:b6:06:fd:b4:7e:75:f6:
01:26:38:57:fb:ec:9e:57:87:11:cb:a3:c5:53:f8:
bc:bc:59:d3:91:da:d1:f8:e9:71:0a:df:fa:92:aa:
00:3d:14:78:6f:91:91:3c:31:5f:0c:e8:18:d8:79:
1f:8b:72:2a:f6:e0:b3:1b:1b:49:ee:d3:13:b5:45:
60:ba:0b:1d:6b:e6:b2:08:21:30:8d:ce:51:c4:73:
9d:1f:64:b7:14:b5:12:78:5d:5d:da:25:18:a0:cd:
74:90:ab:4d:1c:f8:14:71:f6:12:06:5d:62:07:bd:
d8:c7:87:74:a5:d2:40:48:50:c2:d4:ec:18:4d:82:
f2:ff:c6:bb:a5:14:91:69:80:af:a8:06:60:dc:4d:
d5:7d:bc:f6:cb:18:02:37:ad:88:95:dc:76:f1:4a:
e4:f4:53:c5:dc:ff:98:17:55:b6:03:f8:ef:fb:e2:
c1:3b:29:bd:07:34:e0:2a:cd:63:d6:bc:cb:65:d3:
c5:05:97:e7:46:e0:a5:22:fc:cc:74:80:c5:90:70:
b9:59:2d:00:8f:51:ae:dc:cb:1f:d9:33:70:ac:d4:
90:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:CE:48:6E:68:FF:A1:B7:EC:8F:97:8C:0C:C0:B7:36:68:8C:89:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ec3a9012-6698-33c1-8f66-b8d1f0b08728.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.18.24.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:93:ae:6d:42:fb:dd:23:08:36:68:6a:b4:49:ad:6e:29:c3:
d2:18:b6:74:d0:f2:66:ec:42:e7:75:91:0b:ad:98:60:f3:fe:
bd:2c:9f:5c:8a:e2:09:8e:94:a1:41:5e:93:68:c6:d3:03:5d:
0c:8b:df:66:b1:4e:dc:57:94:2c:ff:d5:93:7c:66:a1:b7:15:
5b:20:28:70:f9:e9:34:81:9c:59:3e:d1:b8:01:0f:19:02:c0:
27:6f:16:09:98:0e:7c:d4:2d:bc:09:ff:c0:19:98:78:fa:95:
1a:13:60:f0:88:96:6a:99:8c:a8:52:ae:ea:33:bb:33:22:e7:
2b:fc:9c:a8:80:61:5a:e4:aa:17:8f:95:ea:05:4f:04:36:82:
a0:8f:fc:49:58:5a:1d:47:48:49:ef:5d:36:5a:c2:a1:6a:27:
e2:90:5a:8d:13:b4:72:d6:95:7d:9a:c6:52:28:a6:bf:0a:c0:
bd:e6:f3:4c:c6:1b:83:ef:42:da:f3:af:14:e2:2d:de:2d:c5:
6a:c0:a4:80:93:10:11:1d:44:ff:4e:3b:d6:49:98:3d:7b:df:
9e:fc:49:2c:47:aa:5e:9e:fb:e8:f3:a8:1d:af:af:dc:83:c6:
49:00:5e:64:40:7e:50:9a:4e:3d:e3:e0:b9:32:b3:26:11:e0:
e5:4f:a5:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:03:02 2025 by rpki-client