Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/2defbbc0-3484-3cc4-b4a9-8e9d4c14125c.roa
File: 2defbbc0-3484-3cc4-b4a9-8e9d4c14125c.roa (raw, json)
Hash identifier: q/nISdwaIna6744+3XDukj/bG6hyVkNmQ9JyKAuxGsM=
Subject key identifier: 95:55:76:E5:41:D7:AC:5E:4B:B9:88:AF:B4:D7:43:D1:92:1B:59:D0
Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial: 010D0C9F43285848BFEBC766AB0B00E16F921180
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/2defbbc0-3484-3cc4-b4a9-8e9d4c14125c.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 36040
IP address blocks: 136.22.128.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:c7:66:ab:0b:00:e1:6f:92:11:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=d5052626-c871-4458-a4b4-db7562d326f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:68:73:4e:3a:6b:ae:37:6e:f0:ab:fb:ca:a0:
1f:cc:3c:27:55:83:c5:fa:2e:92:df:f7:f2:f3:ce:
6b:0c:76:56:c3:5a:5b:3f:9e:1a:e3:06:60:60:15:
15:6e:5f:ed:a0:87:0c:d3:13:42:16:c1:1b:af:91:
a6:74:66:93:81:03:12:7d:36:8c:60:16:bb:e6:da:
e2:6f:03:84:75:5e:1a:ad:77:e7:cf:ca:d4:13:1a:
5e:12:26:93:a7:f0:05:73:75:a3:5d:f3:7c:34:bc:
ed:ef:9e:34:c4:c6:50:f7:4f:96:bb:38:be:fa:96:
8f:0a:2c:74:84:05:ca:6c:e4:cf:14:8b:f3:7d:94:
92:98:72:89:2c:54:6a:05:f6:11:2b:cc:3a:a1:f4:
e1:e1:84:1b:b8:9a:66:08:1e:53:e0:62:e9:db:8f:
64:bc:f4:49:58:de:da:18:c7:13:c4:ae:07:6b:3b:
ac:3e:d6:36:fb:b2:10:c6:de:e5:45:4e:45:fc:f4:
36:4f:a1:83:1f:f7:92:ff:ae:6a:38:08:14:4c:a7:
7d:e8:f6:5d:7d:3b:4b:e9:97:78:b4:91:ed:94:5b:
b7:1e:a2:66:5b:92:c5:80:01:df:6b:51:6e:43:0b:
fa:0a:ec:c1:fe:98:8e:42:21:25:b3:b9:d8:4e:a3:
34:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:55:76:E5:41:D7:AC:5E:4B:B9:88:AF:B4:D7:43:D1:92:1B:59:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/2defbbc0-3484-3cc4-b4a9-8e9d4c14125c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
X509v3 Authority Key Identifier:
keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.128.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:99:92:61:cd:dc:be:e6:ce:39:43:63:a3:f1:4c:16:a2:7d:
eb:09:e2:db:ed:ca:e1:65:82:a2:11:24:0e:e8:c3:2a:a5:fc:
64:a4:4d:c6:4b:9a:c2:03:81:28:6f:c6:4e:d5:47:c7:f1:c7:
f6:f7:77:c1:c9:83:da:e1:1c:a6:30:c1:8c:91:5e:23:22:7f:
5e:f4:c4:28:1b:c6:cf:82:5e:38:b9:a9:f4:66:e5:9b:73:17:
da:7b:11:42:64:b0:69:86:cc:6c:1b:12:9e:25:e3:ea:fa:cd:
2d:5d:c2:f8:df:38:57:61:fa:d4:48:c5:53:5d:cb:de:e3:e6:
39:57:ef:b4:90:89:0b:c6:58:8b:02:c0:77:0f:ce:32:c5:a4:
d7:9e:d9:ba:ec:68:22:38:93:2a:c9:e5:74:63:c0:6d:60:ce:
eb:71:12:69:74:50:5c:de:b6:19:79:73:02:f7:65:a0:71:4b:
4e:dc:0a:56:27:a5:e6:f7:1e:ab:5b:18:32:ac:9b:ca:2c:9e:
c3:dd:4c:99:b6:30:79:71:d2:46:27:31:ee:06:74:c4:19:c9:
e0:9e:5f:b1:9c:f5:80:29:e9:2c:df:a2:4c:fd:71:07:3f:d3:
87:61:1a:b7:3f:1a:5d:05:d6:05:f4:4e:d4:72:83:57:80:05:
dd:91:bc:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:08:23 2025 by rpki-client