Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fafa5dd3-a7ca-3dbc-b246-f6af699d9f70.roa
File: fafa5dd3-a7ca-3dbc-b246-f6af699d9f70.roa (raw, json)
Hash identifier: Qh8xfXXXMrzGrdpltLozyb+U8aFAjzNbuU444kMGGWw=
Subject key identifier: EB:63:BB:6F:DC:58:95:64:C9:3A:A8:86:E2:C9:42:EE:97:33:C6:62
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D07CAE6E1D671BC2FCAF8A4A0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fafa5dd3-a7ca-3dbc-b246-f6af699d9f70.roa
Signing time: Wed 23 Feb 2022 05:00:00 +0000
ROA not before: Wed 23 Feb 2022 05:00:00 +0000
ROA not after: Wed 30 Mar 2022 04:00:00 +0000
asID: 14618
IP address blocks: 136.1.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:07:ca:e6:e1:d6:71:bc:2f:ca:f8:a4:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 23 05:00:00 2022 GMT
Not After : Mar 30 04:00:00 2022 GMT
Subject: CN=6c84d4ec-7118-4fe7-84b5-4bab086e9166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:12:0b:78:2d:03:23:3a:d4:79:c9:07:1b:2b:
ad:88:17:a8:44:70:9f:8b:ec:9c:41:fb:a9:6f:1e:
47:a9:1c:7a:8e:75:0c:e9:71:96:7b:90:a0:97:12:
8f:07:6b:0e:85:85:83:bd:02:40:46:da:7b:84:c4:
be:00:7d:e1:d6:8b:40:30:4a:96:fd:e9:a6:2a:ff:
ad:6a:32:52:29:77:de:41:39:d2:9a:1e:b3:4c:63:
b4:0e:d7:e0:ca:d0:86:f8:53:ef:a5:7d:43:9d:dc:
08:88:dc:d2:9d:c9:6b:68:eb:cf:56:df:89:69:1d:
bf:1a:3f:82:d3:9e:42:27:44:fe:9a:dc:a1:82:69:
0c:5f:7e:ca:08:1e:95:48:27:40:e9:a0:44:80:8c:
1d:1d:93:aa:17:f7:58:b9:04:ac:29:0f:07:2a:f4:
de:21:23:8b:84:ae:88:dd:df:c8:f4:ca:67:26:8f:
b0:4b:bd:86:a0:84:38:95:2d:5f:e3:54:27:bd:ed:
88:e8:e3:95:f2:46:5a:18:b4:76:cf:92:51:88:44:
6f:27:af:80:5d:42:75:a3:0e:58:bb:7c:39:01:0e:
6b:28:53:a8:b3:1b:63:24:37:ea:ec:74:19:2a:e6:
98:2c:e1:2b:5f:05:db:f3:21:63:8e:de:01:4e:e1:
83:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:63:BB:6F:DC:58:95:64:C9:3A:A8:86:E2:C9:42:EE:97:33:C6:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fafa5dd3-a7ca-3dbc-b246-f6af699d9f70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.1.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:66:ab:cc:69:2c:ee:b0:12:24:83:05:26:3c:3a:a8:a2:a4:
29:5b:8e:ed:a0:a8:d8:9e:e4:e2:d2:0b:05:c5:1f:77:87:74:
eb:11:24:6d:a9:ce:4e:32:67:3d:5f:24:8b:31:e4:26:90:2d:
23:27:6e:ce:2e:3b:0f:0e:3b:5e:aa:e5:cd:43:91:60:86:d5:
94:8b:16:3e:d7:1b:a8:44:0c:c9:cd:04:70:20:e4:67:2b:f5:
c4:d3:6e:8e:f7:8e:77:ef:fc:e0:02:57:50:94:3a:65:9c:d0:
87:88:5e:61:b0:76:fb:05:20:13:3c:64:51:42:1a:bd:4a:86:
39:f9:71:ca:e8:4b:a9:4d:48:09:37:85:ea:42:97:95:e0:b6:
0c:95:c6:28:31:17:21:da:b3:59:72:69:ad:02:7a:cb:4a:85:
84:83:56:fc:65:ec:be:1e:cd:14:3a:fc:00:6e:f8:0f:49:c9:
21:da:19:ea:1b:bc:55:7f:8b:55:e3:47:40:7a:69:94:4e:e4:
6f:c0:86:aa:5c:46:3f:1c:ee:37:66:ca:f7:10:06:51:a6:f8:
ea:e6:d3:51:2d:7e:d9:b9:f6:28:b1:95:40:81:e6:3c:82:03:
db:ff:44:dd:1c:80:2f:e5:6b:8e:db:c7:ae:13:5d:ef:68:69:
01:29:2b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:05:46 2025 by rpki-client