Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/33af6a38-02b6-3f92-bf22-40f73c436cc1.roa
File: 33af6a38-02b6-3f92-bf22-40f73c436cc1.roa (raw, json)
Hash identifier: 0m2rF7vMN9eJ6V27q2v7D3nVCQZ3r49b07HXC02ojwc=
Subject key identifier: 68:AA:0A:1E:BF:47:93:C5:91:7D:54:16:13:FB:01:37:4F:4F:74:09
Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial: 010D0C9F43285848BFEBBBBDD8535F964F5FDB80
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/33af6a38-02b6-3f92-bf22-40f73c436cc1.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 36040
IP address blocks: 136.22.136.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:bb:bd:d8:53:5f:96:4f:5f:db:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=4cc383ca-d1e5-434b-9c37-4616921f9702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d4:4d:fd:5d:7d:ea:cd:94:4c:42:58:b2:80:
26:95:96:93:55:10:93:45:38:de:0e:e9:c1:41:e5:
42:1e:bf:1d:4d:d1:07:17:9d:62:52:92:be:e4:ba:
eb:b0:2f:97:40:bc:33:95:a8:c1:d1:1d:0d:69:60:
1b:a2:1d:15:2f:4a:51:85:b0:c5:43:5b:76:1a:d4:
55:1d:d2:51:25:65:b2:e6:0b:d2:06:de:69:7a:b0:
21:22:67:af:49:a4:35:ab:b9:2e:2d:a6:c6:f4:70:
ba:09:58:25:eb:89:55:89:38:d6:b9:58:4e:7c:65:
93:c6:84:3a:3e:d3:8e:0a:c1:75:2e:7e:17:fc:c3:
c0:c4:4d:20:21:69:74:ab:7c:f5:87:f5:ba:61:e3:
5c:a4:82:bc:3a:08:b8:11:12:97:7d:16:1e:8b:e3:
72:fd:43:a0:38:83:65:6f:91:a5:73:77:47:3d:e3:
e9:ee:8a:92:bc:8b:ea:d4:c9:06:10:46:52:7e:37:
0c:75:26:34:1a:18:17:6d:59:91:1e:7c:31:0e:b0:
5a:91:1c:94:43:2f:18:0a:45:32:99:c8:d2:d2:32:
88:78:e2:3c:70:66:94:84:98:c9:46:e4:5c:d4:4a:
0b:44:1c:6b:5c:e2:82:cb:46:61:88:74:d4:c9:02:
eb:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:AA:0A:1E:BF:47:93:C5:91:7D:54:16:13:FB:01:37:4F:4F:74:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/33af6a38-02b6-3f92-bf22-40f73c436cc1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
X509v3 Authority Key Identifier:
keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.136.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:64:53:fd:59:5f:72:b2:e6:4f:0a:90:7b:10:66:89:4b:f5:
73:b4:e3:e0:2b:9b:ea:23:06:54:c7:54:4b:8c:fa:8a:59:e2:
d5:23:ab:89:ba:0d:1d:37:16:0c:8c:21:ce:87:3e:91:e4:f8:
74:05:99:4b:8d:e7:be:69:f5:a0:5a:eb:71:53:ce:e4:48:44:
64:84:08:af:ea:76:1b:fa:17:00:21:8d:c8:5f:92:f0:df:52:
4f:b1:ee:7d:ba:26:bb:b8:97:44:e1:d5:b8:49:4c:9f:b1:97:
b8:ec:47:06:eb:12:18:85:97:5a:36:79:cc:8f:c3:16:dd:1a:
19:4d:4e:35:d9:ac:7f:4d:91:c1:7c:fe:46:8f:78:39:59:4f:
bf:63:4c:c3:6d:a5:ca:06:ab:c2:fd:31:19:b4:11:67:74:14:
7f:e7:b4:b7:47:44:73:37:29:c0:68:a5:25:b9:7a:64:9f:d4:
d3:85:92:7e:f5:48:da:33:e3:3a:f1:6b:e9:a6:92:25:bc:49:
2a:b8:37:4f:fa:4b:81:2c:a5:16:93:ac:4c:92:b6:7e:c6:dd:
54:ad:fa:79:2d:db:d3:9b:37:8e:55:7d:5f:4c:2b:25:b6:50:
90:df:29:3c:dc:01:e8:2f:e0:c1:33:ac:19:f6:16:f9:f0:a1:
71:f0:2b:c4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/67u92FNflk9f24AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh
ZWEyMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk
NGNjMzgzY2EtZDFlNS00MzRiLTljMzctNDYxNjkyMWY5NzAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9RN/V196s2UTEJYsoAmlZaTVRCTRTjeDunB
QeVCHr8dTdEHF51iUpK+5LrrsC+XQLwzlajB0R0NaWAboh0VL0pRhbDFQ1t2GtRV
HdJRJWWy5gvSBt5perAhImevSaQ1q7kuLabG9HC6CVgl64lViTjWuVhOfGWTxoQ6
PtOOCsF1Ln4X/MPAxE0gIWl0q3z1h/W6YeNcpIK8Ogi4ERKXfRYei+Ny/UOgOINl
b5Glc3dHPePp7oqSvIvq1MkGEEZSfjcMdSY0GhgXbVmRHnwxDrBakRyUQy8YCkUy
mcjS0jKIeOI8cGaUhJjJRuRc1EoLRBxrXOKCy0ZhiHTUyQLrEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGiqCh6/R5PFkX1UFhP7ATdPT3QJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2
Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvMzNhZjZhMzgtMDJiNi0z
ZjkyLWJmMjItNDBmNzNjNDM2Y2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4
ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh
YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2
MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBaIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJRkU/1ZX3Ky5k8KkHsQZolL9XO04+Arm+ojBlTHVEuM+opZ4tUjq4m6
DR03FgyMIc6HPpHk+HQFmUuN575p9aBa63FTzuRIRGSECK/qdhv6FwAhjchfkvDf
Uk+x7n26Jru4l0Th1bhJTJ+xl7jsRwbrEhiFl1o2ecyPwxbdGhlNTjXZrH9NkcF8
/kaPeDlZT79jTMNtpcoGq8L9MRm0EWd0FH/ntLdHRHM3KcBopSW5emSf1NOFkn71
SNoz4zrxa+mmkiW8SSq4N0/6S4EspRaTrEyStn7G3VSt+nkt29ObN45VfV9MKyW2
UJDfKTzcAegv4MEzrBn2FvnwoXHwK8Q=
-----END CERTIFICATE-----
Generated at Mon Apr 7 09:27:44 2025 by rpki-client