Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/4b74f50c-2083-3422-a939-530f6efcad0d.roa
File: 4b74f50c-2083-3422-a939-530f6efcad0d.roa (raw, json)
Hash identifier: 63DKCGNRlbxeKsC4geSuyRVkEzTGRdTrwL4La9TVeqo=
Subject key identifier: D4:F2:82:4F:9A:22:C0:E0:4A:9A:0E:14:17:64:8D:85:1E:D6:A7:99
Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial: 010D0C9F43285848BFEBB59A4D4BF023C64CAF00
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/4b74f50c-2083-3422-a939-530f6efcad0d.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 36040
IP address blocks: 136.22.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:b5:9a:4d:4b:f0:23:c6:4c:af:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=27f90ca2-9ba7-45a5-b8c5-c75050789d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f6:1f:65:21:8f:55:ee:37:12:19:c7:c9:3b:
3c:34:58:d4:9a:76:d8:43:29:c7:da:fd:da:ba:35:
03:a2:b7:1c:e2:e1:ca:6e:ee:3f:6e:84:a0:60:16:
f5:4c:df:0a:61:73:a5:be:34:84:fb:37:eb:e3:43:
61:3e:6c:69:17:a1:18:73:e6:9e:ec:ab:9c:d3:c9:
cb:53:7e:84:b1:63:d8:4a:b7:97:f2:4f:21:da:9c:
89:e9:13:74:58:c6:7c:0a:ea:80:8f:3a:35:9c:c2:
9f:db:28:5b:b8:a3:7e:09:43:03:19:58:b9:f7:0d:
6a:b8:18:c9:cb:9c:21:fb:64:18:44:82:a2:a0:0c:
15:d8:87:a8:71:2f:c7:35:7a:96:83:a6:fa:9f:a9:
a6:e0:12:60:8b:36:9d:df:d2:4a:7b:86:3e:14:e4:
f4:2f:65:62:2c:ed:b0:3b:8d:38:8c:09:3f:3c:25:
ef:4d:bf:03:a0:fc:5e:72:80:9e:82:40:d8:75:a9:
42:e9:39:ba:cd:15:df:3d:11:0a:46:5e:e2:c3:2a:
6f:ab:6b:f9:94:26:10:69:b0:1a:e4:d5:10:1c:0f:
ce:18:0d:e1:ea:a2:ac:36:33:86:46:b2:77:93:78:
ff:1f:e4:d7:1f:20:14:55:e5:70:72:a1:0c:a1:e2:
c0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F2:82:4F:9A:22:C0:E0:4A:9A:0E:14:17:64:8D:85:1E:D6:A7:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/4b74f50c-2083-3422-a939-530f6efcad0d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
X509v3 Authority Key Identifier:
keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.149.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:9e:86:1a:b7:51:50:fe:44:d2:a1:71:b5:95:e4:da:0b:7b:
33:e0:b7:a4:b1:ec:ef:69:86:fc:b7:27:6d:50:98:bf:b0:f7:
b4:20:da:89:82:2d:8c:49:97:08:53:e2:02:87:de:63:1f:c3:
40:36:5d:c3:9f:48:2b:a6:55:3f:55:b1:60:b6:8a:8d:1b:e6:
e1:cc:23:ec:38:15:b2:07:84:48:2f:ad:63:7c:de:ce:5f:bf:
b5:2b:4e:90:d3:65:fd:03:26:b2:54:db:3a:2c:90:e9:ba:69:
85:3c:e4:fe:23:15:77:b9:3f:22:ba:d9:36:b0:00:9b:a7:5d:
50:15:eb:9e:10:80:e7:83:e6:d7:2c:0d:6a:46:72:15:28:29:
d1:2f:42:d3:84:08:a3:38:c7:21:b3:b3:b1:7e:56:30:27:24:
7c:85:2c:7a:0b:67:c0:ea:bc:7a:f4:45:24:3b:01:1f:d8:45:
41:05:a1:91:2e:7c:2d:88:64:44:be:0d:63:32:e3:0f:8c:6e:
2e:c6:71:00:56:7e:ce:53:7c:4b:56:9b:a5:b6:49:06:20:f6:
b6:02:15:62:a8:9e:2a:ba:61:50:bb:4d:8c:38:92:e9:4a:59:
cc:4d:20:6e:52:05:e7:56:08:5c:c2:da:a0:e9:b0:22:7d:d4:
c9:9b:97:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:26:29 2025 by rpki-client