Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/16d32892-c3eb-30da-a6a2-9342916a0080.roa
File: 16d32892-c3eb-30da-a6a2-9342916a0080.roa (raw, json)
Hash identifier: RvsEJb82iyETzwt/djb/2A6/njEtfmY7MaBnLL2+j1w=
Subject key identifier: 3E:AD:55:52:C5:F5:2E:77:9B:93:95:41:FE:5C:9F:58:59:EF:62:3C
Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial: 010D0C9F43285848BFEBD61FDD17E802B5F561D0
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/16d32892-c3eb-30da-a6a2-9342916a0080.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 36040
IP address blocks: 136.22.148.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:d6:1f:dd:17:e8:02:b5:f5:61:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=528eaf4f-ee40-4ae6-b375-6c4da97e58bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:15:d7:67:f4:6f:66:7f:d9:d2:87:20:8c:27:
e9:3f:fc:6d:19:41:35:41:bc:39:cc:c1:4a:08:7b:
9a:9e:55:a8:a3:66:4e:a8:58:91:12:f8:0d:85:02:
6b:94:d4:56:af:53:50:7c:83:d0:f4:20:94:18:ea:
c7:32:bf:e7:c8:18:72:51:f4:39:4a:7a:c8:13:5e:
c1:75:65:b0:4d:b3:a9:12:a4:b4:d1:89:b9:8b:04:
55:26:3e:5f:d7:8b:ce:17:f1:15:1c:fe:89:13:6e:
b9:79:91:85:20:6a:5f:4c:8f:92:66:c7:d0:3d:2d:
10:0c:09:47:69:2d:95:ca:a1:57:57:ef:c4:c6:43:
6f:fd:cd:60:c1:9c:f3:cf:c4:3a:70:b4:f8:20:33:
36:98:f0:1f:91:20:7c:fb:55:7e:f3:88:40:69:69:
93:26:95:5b:a2:b0:02:7c:d2:ed:4c:a4:81:5d:c5:
af:48:8f:cf:92:15:4a:d1:f4:40:f9:1e:b8:8c:b2:
63:89:3c:16:bb:3d:a6:8e:2f:01:26:85:07:c7:28:
42:58:b6:34:00:f4:11:f2:41:11:0e:36:9b:24:c8:
eb:59:a8:cf:32:1d:80:f0:30:f4:e4:8d:40:ec:e6:
5c:ec:00:54:d8:50:16:86:27:e5:30:5d:11:95:99:
db:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:AD:55:52:C5:F5:2E:77:9B:93:95:41:FE:5C:9F:58:59:EF:62:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/16d32892-c3eb-30da-a6a2-9342916a0080.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
X509v3 Authority Key Identifier:
keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.148.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:c8:05:30:41:98:bd:8d:92:b0:75:9e:95:77:e2:f6:8c:ab:
76:37:e9:0b:b6:f7:cc:e0:52:9a:5c:18:f4:56:81:1a:0e:7d:
2a:39:b4:63:41:01:bd:9e:ad:88:9d:fe:7c:db:9a:82:69:0d:
95:f5:89:88:29:88:a1:aa:87:44:ff:ed:cb:6b:3b:ff:39:ee:
38:fb:20:e2:42:68:f3:5a:de:be:26:fc:e1:97:df:dc:56:9d:
8f:9c:33:16:f1:f8:f0:83:a2:51:9b:38:62:46:e9:7e:8c:de:
a9:13:ee:20:45:fc:00:8f:24:85:9e:1b:17:3a:66:ae:bb:f0:
98:51:10:2e:a0:06:d4:26:f2:84:5f:40:77:ac:36:3f:1c:fb:
5c:c4:70:b4:d6:ad:cc:a4:e8:59:9a:23:66:79:f0:cd:a9:0d:
92:ba:c1:10:47:6e:16:3d:e1:07:bf:a7:db:e4:01:6a:d1:06:
cc:70:73:71:4b:ca:dd:dd:10:ff:f3:dc:7d:e6:3e:d5:57:8b:
fa:a1:09:0f:a8:13:ee:2b:cb:ac:84:41:9d:c5:3d:31:09:36:
65:ea:ec:3e:93:b2:ff:34:d7:80:c5:6b:7e:ea:dc:e6:6d:ce:
e4:df:55:3f:76:05:46:38:05:4b:e4:08:35:9b:8b:5b:fa:d7:
f0:54:3c:e6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/69Yf3RfoArX1YdAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh
ZWEyMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk
NTI4ZWFmNGYtZWU0MC00YWU2LWIzNzUtNmM0ZGE5N2U1OGJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRXXZ/RvZn/Z0ocgjCfpP/xtGUE1Qbw5zMFK
CHuanlWoo2ZOqFiREvgNhQJrlNRWr1NQfIPQ9CCUGOrHMr/nyBhyUfQ5SnrIE17B
dWWwTbOpEqS00Ym5iwRVJj5f14vOF/EVHP6JE265eZGFIGpfTI+SZsfQPS0QDAlH
aS2VyqFXV+/ExkNv/c1gwZzzz8Q6cLT4IDM2mPAfkSB8+1V+84hAaWmTJpVborAC
fNLtTKSBXcWvSI/PkhVK0fRA+R64jLJjiTwWuz2mji8BJoUHxyhCWLY0APQR8kER
DjabJMjrWajPMh2A8DD05I1A7OZc7ABU2FAWhiflMF0RlZnbgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD6tVVLF9S53m5OVQf5cn1hZ72I8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2
Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvMTZkMzI4OTItYzNlYi0z
MGRhLWE2YTItOTM0MjkxNmEwMDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4
ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh
YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2
MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBaUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAnIBTBBmL2NkrB1npV34vaMq3Y36Qu298zgUppcGPRWgRoOfSo5tGNB
Ab2erYid/nzbmoJpDZX1iYgpiKGqh0T/7ctrO/857jj7IOJCaPNa3r4m/OGX39xW
nY+cMxbx+PCDolGbOGJG6X6M3qkT7iBF/ACPJIWeGxc6Zq678JhREC6gBtQm8oRf
QHesNj8c+1zEcLTWrcyk6FmaI2Z58M2pDZK6wRBHbhY94Qe/p9vkAWrRBsxwc3FL
yt3dEP/z3H3mPtVXi/qhCQ+oE+4ry6yEQZ3FPTEJNmXq7D6Tsv8014DFa37q3OZt
zuTfVT92BUY4BUvkCDWbi1v61/BUPOY=
-----END CERTIFICATE-----
Generated at Mon Apr 7 07:10:16 2025 by rpki-client