Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/3f70c066-2334-345c-8e8d-a890ceb66284.roa
File: 3f70c066-2334-345c-8e8d-a890ceb66284.roa (raw, json)
Hash identifier: Frf+uWaizOq6D3HEE8ES1WWuRFDU8yfVNBHFnLuDg/I=
Subject key identifier: CC:5C:D2:B6:15:6F:DA:64:D0:84:07:7C:28:75:00:D1:71:EC:07:24
Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial: 010D0C9F43285848BFEBB097B3E16D5E25498180
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/3f70c066-2334-345c-8e8d-a890ceb66284.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 36040
IP address blocks: 136.22.128.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:b0:97:b3:e1:6d:5e:25:49:81:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=3d0e0f30-2f50-4c91-b5ff-ba9a7ca47793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2b:10:85:5f:ce:bf:4c:09:93:b1:85:66:73:
3a:70:a4:47:15:14:29:45:8b:ff:b6:40:48:b3:f0:
63:9e:71:ad:24:dc:01:8e:9a:54:a9:f0:91:13:dd:
4c:13:85:50:2f:b6:a2:ce:61:01:6c:f0:e1:f5:18:
00:fb:e0:40:1a:01:ae:87:0a:55:b1:c4:90:4f:62:
22:63:46:d5:b9:01:86:27:ca:6d:a8:e5:35:16:57:
f5:ea:78:ac:b1:cd:c1:f8:23:ab:f6:02:98:2d:3a:
b3:86:05:3a:ec:7f:84:6f:b9:03:11:7c:e6:56:2f:
4f:93:96:7a:8c:2b:94:29:5b:dc:44:69:27:a3:7d:
45:35:ec:66:4f:c5:b8:95:8c:7d:73:19:a7:b2:a7:
52:b2:d9:b8:7e:76:04:24:8f:c5:cb:67:7f:54:64:
72:48:4f:68:84:ce:e3:bb:32:63:6c:5b:24:52:a4:
f0:e2:d4:f7:bd:9b:5a:85:9f:27:8a:e0:22:52:c6:
f2:24:b8:fe:0d:9f:7d:f4:4f:39:0a:b4:23:09:2b:
04:60:73:42:e2:eb:da:6a:f8:c7:96:ec:7d:2a:b5:
be:2d:c0:6f:e2:31:70:fa:93:90:40:1b:d3:80:9d:
6e:e6:d6:95:98:d9:4f:e5:99:3f:e8:18:24:8a:29:
0c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:5C:D2:B6:15:6F:DA:64:D0:84:07:7C:28:75:00:D1:71:EC:07:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/3f70c066-2334-345c-8e8d-a890ceb66284.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
X509v3 Authority Key Identifier:
keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:e1:27:1f:dc:02:cb:26:a5:32:2d:06:2e:40:cc:b3:f0:1e:
26:4b:5e:44:8f:04:d1:09:98:9f:03:c9:18:5b:cc:e1:0c:ea:
b1:1a:2b:70:67:ab:32:f6:2d:17:ac:3f:43:53:c8:e9:ff:80:
3a:22:69:e5:94:96:c1:64:37:17:40:ce:b3:a4:5b:1b:9a:9c:
b8:0f:99:d2:ce:23:d9:14:4f:63:77:b9:bd:48:3c:9a:aa:80:
07:35:f0:a0:5c:5d:b3:f4:e5:60:04:cf:05:eb:ca:2f:6b:4b:
cc:da:9f:76:df:e3:ee:fb:85:06:d8:82:43:e3:20:3c:f0:08:
62:52:da:6c:ee:a7:69:7c:05:73:44:71:1d:52:b1:7e:31:6c:
39:84:85:ec:07:75:a8:2c:80:02:f2:8e:d4:3e:9a:a7:f7:78:
5b:0c:e4:89:46:c6:4b:f9:89:77:87:9c:da:16:de:c6:5c:37:
fe:1e:0f:ed:c8:16:4c:b9:34:ed:ce:35:a0:6e:84:cb:fe:61:
03:f5:19:80:95:45:64:cc:3f:c0:fc:c5:c6:0c:4a:a9:72:ed:
05:77:68:ab:af:02:65:31:69:2f:fb:d2:72:b8:fd:79:ec:97:
15:2d:6b:d5:61:4c:22:e8:62:a1:e1:8d:3d:06:9b:d2:52:f5:
b8:c4:36:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:25:45 2025 by rpki-client