Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f5dcab80-ee68-3589-af74-627f3bf4c6f4.roa
File: f5dcab80-ee68-3589-af74-627f3bf4c6f4.roa (raw, json)
Hash identifier: 3vZ7S0Nab+xAXttxeS7a2+Cyh2kAb3oCEbJFj8hZWqM=
Subject key identifier: B4:0E:DF:1C:AB:2A:AF:FD:13:9B:AD:D1:C1:24:44:DC:68:FE:E9:DE
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FEFBB26D7D17ED77B2A1E7780
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f5dcab80-ee68-3589-af74-627f3bf4c6f4.roa
Signing time: Wed 16 Nov 2022 12:00:00 +0000
ROA not before: Wed 16 Nov 2022 12:00:00 +0000
ROA not after: Thu 22 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 136.9.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:ef:bb:26:d7:d1:7e:d7:7b:2a:1e:77:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 16 12:00:00 2022 GMT
Not After : Dec 22 05:00:00 2022 GMT
Subject: CN=470da790-dcdc-43ac-ba22-f4c73815ab6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c1:3b:82:08:bf:71:e3:b6:b1:e0:a0:4f:76:
c4:dd:2c:94:b3:7e:4c:03:cf:ea:10:e2:6d:c2:e1:
bb:62:66:be:7b:6d:ab:c4:3c:d1:0c:d4:49:29:09:
3e:5d:62:4f:62:13:1a:bf:f6:3d:22:f7:7b:56:27:
ff:eb:11:c3:ac:33:f0:ca:77:2c:b2:5d:f3:73:7c:
9d:94:0a:b2:4f:94:04:d7:89:ed:b1:5d:db:22:8e:
62:3e:66:5f:42:e8:17:80:62:fa:97:60:7b:c4:5b:
d9:68:f7:32:26:9a:33:d9:68:81:90:a6:97:ba:0e:
e8:48:b6:b5:7b:8d:79:50:85:36:e8:de:84:70:1a:
11:b9:be:f5:de:fb:d9:fc:be:8b:88:9a:fb:c7:10:
46:2b:22:89:8d:30:9c:66:c1:ff:a2:1a:16:f9:89:
44:ed:51:fc:d3:54:66:ae:d6:db:12:97:6d:84:2a:
52:fb:4f:f5:55:05:8e:b2:57:d4:ce:b6:fc:b2:94:
e8:87:ae:b5:89:05:fa:18:9f:49:92:16:60:c8:63:
38:4d:77:08:14:e5:6b:6f:86:cf:a3:d1:a7:bf:82:
0b:52:a5:b2:1c:51:24:85:55:23:34:58:f4:60:08:
a8:10:7f:09:9d:5c:03:44:46:93:03:a1:f0:55:7a:
d9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:0E:DF:1C:AB:2A:AF:FD:13:9B:AD:D1:C1:24:44:DC:68:FE:E9:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f5dcab80-ee68-3589-af74-627f3bf4c6f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.9.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:7b:c8:da:46:a1:1b:72:1d:3a:c5:a0:33:b6:fc:77:c0:56:
ca:aa:23:ab:a1:cf:73:71:94:96:f5:7b:c3:16:47:ee:c0:7a:
cf:3e:e2:7a:54:83:9f:a1:e2:4c:75:16:82:cb:cc:d8:3a:64:
29:e1:d6:ae:b4:9d:4e:81:52:84:b2:63:e3:d5:90:c3:6d:1a:
87:bc:04:ef:d3:e4:8c:9c:9c:a3:45:cc:fc:73:47:e9:da:bf:
80:56:fc:15:16:5e:c1:d4:ab:c5:80:f7:40:dc:5e:3a:ca:b5:
96:f5:29:e1:e9:68:7f:96:17:da:e4:47:55:fd:62:7e:10:76:
33:45:3a:9c:21:5c:cc:41:9b:9d:25:2d:af:fa:e3:3a:da:ce:
75:24:58:4c:33:38:e9:79:33:9f:05:8b:e7:fc:38:27:c6:91:
ba:c1:fe:bc:c6:69:e3:46:77:c1:40:d8:04:25:c8:d7:8d:35:
ad:51:0c:16:7c:95:25:69:6f:1b:88:1e:9c:3f:b8:3a:0d:d1:
1f:4e:9e:67:21:e0:2a:c2:f6:19:f2:b0:fc:68:6c:d1:02:da:
b4:b0:ef:87:cf:1d:73:8a:1c:6c:ad:03:e1:20:b6:a2:4d:02:
57:71:a8:0c:36:78:70:12:11:a9:dd:92:9f:7f:8f:6e:ee:1d:
a1:fc:46:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:00:27 2025 by rpki-client