Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ed8db8fc-be3b-3fe0-a806-a3c5e5242f8d.roa
File: ed8db8fc-be3b-3fe0-a806-a3c5e5242f8d.roa (raw, json)
Hash identifier: nqTgJfOxU67I2cQJzyuuI8xZ/8Q4m2y3fg/hXvFBWGs=
Subject key identifier: 85:B7:F4:B1:65:43:30:74:A9:65:02:1A:59:B7:0A:4F:6F:24:56:E1
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DF271ACD16B20B921F11CC470
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ed8db8fc-be3b-3fe0-a806-a3c5e5242f8d.roa
Signing time: Tue 17 May 2022 12:00:00 +0000
ROA not before: Tue 17 May 2022 12:00:00 +0000
ROA not after: Wed 22 Jun 2022 04:00:00 +0000
asID: 8987
IP address blocks: 136.18.52.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:f2:71:ac:d1:6b:20:b9:21:f1:1c:c4:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 17 12:00:00 2022 GMT
Not After : Jun 22 04:00:00 2022 GMT
Subject: CN=b42b5ec2-cfaf-4485-a5bd-d05fefaefe54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e7:1b:99:98:02:e1:89:89:54:ce:43:d5:92:
86:3e:75:93:1a:f5:b1:06:27:e3:f9:40:22:5e:c3:
a3:39:a0:ca:28:3b:1f:af:87:dc:05:38:b3:5c:1c:
60:88:68:8c:5b:83:d1:61:8b:87:8d:db:8a:83:9c:
7e:f7:79:ee:af:cb:66:59:3f:bb:b6:f7:cc:2e:56:
85:2f:ff:b8:bc:6f:2a:d7:b1:15:c7:bc:16:11:5c:
15:87:85:84:5e:28:a5:b2:a2:6d:fd:9a:05:9a:e2:
f8:28:c3:67:36:42:69:5e:15:f6:52:0b:4c:ac:e6:
ac:d1:5a:88:54:63:d3:df:cd:fa:b6:9e:df:8f:bb:
27:57:af:46:46:97:8e:24:22:56:93:d5:ca:37:c5:
64:12:51:34:08:eb:17:44:56:1d:b5:3d:ef:02:5a:
f6:eb:49:4a:ae:83:20:41:f1:15:e0:f4:41:5a:57:
97:31:0c:ab:16:a1:02:86:e9:aa:dd:37:62:05:7e:
23:fa:11:2a:c3:05:87:b7:60:47:8d:5a:b1:b4:28:
14:71:aa:b0:9c:13:0d:35:c8:21:4a:d1:3e:c9:7f:
df:df:d9:d6:d1:71:d7:75:20:90:77:24:40:55:b7:
18:a6:14:0a:6c:d6:2c:ae:d7:ac:3b:37:23:78:e1:
5e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B7:F4:B1:65:43:30:74:A9:65:02:1A:59:B7:0A:4F:6F:24:56:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ed8db8fc-be3b-3fe0-a806-a3c5e5242f8d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.18.52.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:74:f8:e7:d8:7e:a6:46:4a:3e:78:6c:42:cc:66:65:53:db:
e5:a1:bb:f1:03:01:fe:44:ec:7f:a5:ed:fb:1f:c9:5a:d2:08:
dd:bc:9d:6d:b6:5a:25:59:e4:2e:19:cf:ec:74:96:38:73:98:
44:57:3e:53:c1:0b:2c:72:4d:9e:36:5f:75:91:c5:c2:65:5d:
8c:14:6d:1d:b0:5f:67:18:7a:a4:dc:c8:90:7c:97:98:4b:db:
7e:d8:3b:27:62:2e:20:73:e9:60:d2:11:04:19:70:d5:af:ff:
70:7e:93:5c:da:28:64:0a:0e:cd:6d:7d:dc:22:f7:c4:0a:39:
98:3c:51:c5:f6:e6:ae:bf:fa:b6:2e:74:78:94:fd:23:5c:79:
fb:e8:15:9f:bd:63:12:19:e0:80:1c:61:5c:8b:f7:5e:4c:58:
5d:62:0f:cb:14:c9:ce:97:ae:2c:b8:58:4e:a5:2b:33:e5:54:
bb:16:9d:7e:d2:06:8c:68:18:c7:ff:50:82:08:39:ed:26:8e:
1c:a5:8f:5a:9d:3b:41:25:e7:dc:50:10:4d:06:9d:9d:14:34:
50:17:64:1c:24:f6:a8:b6:d9:69:25:e6:ab:cd:c4:39:3c:59:
22:62:46:4a:ca:54:09:05:3a:1c:61:71:ce:8d:0f:f5:8c:9d:
58:59:f4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:18:16 2025 by rpki-client