Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/619e354c-81d0-3a65-8f58-b153e3edfc38.roa
File: 619e354c-81d0-3a65-8f58-b153e3edfc38.roa (raw, json)
Hash identifier: xz2BkX9cAKEOxjSuHQKqREvET+OW/rHkcNYR3C4JYZw=
Subject key identifier: 51:CE:CA:90:13:B8:99:E5:B0:2C:1D:6C:97:58:31:30:EB:78:85:C5
Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial: 010D0C9F43285848BFEBD7C1DA00A8803CEAA700
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/619e354c-81d0-3a65-8f58-b153e3edfc38.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 36040
IP address blocks: 136.22.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:d7:c1:da:00:a8:80:3c:ea:a7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=1ddc0f13-f5b7-4bdf-b343-f5272ed06a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:27:35:f9:da:e6:7e:99:8d:31:67:99:cc:2e:
73:d6:96:04:52:a7:80:92:91:ef:f5:8d:b2:07:c2:
0a:6c:9c:3e:1f:ce:a0:d1:86:fc:f6:65:02:c6:31:
cb:ea:38:12:7d:a3:c1:d2:c0:5f:19:50:df:8d:27:
10:d7:8c:22:54:78:32:f1:cd:b3:2c:f6:0f:d4:fa:
56:d5:b5:3d:f5:2f:6e:0a:9d:bd:2e:f1:34:8b:23:
a5:4a:03:50:3e:a6:df:b3:cb:ee:82:c0:fa:c5:4d:
df:08:f3:0e:4c:20:bf:80:c5:7d:7d:bf:a6:08:6b:
90:4e:7e:d9:0a:18:07:61:18:3d:a3:e9:12:68:79:
bf:4d:5c:07:4e:04:dd:a0:a9:4b:87:c8:5b:11:bf:
cb:ca:2b:d0:de:62:f4:0a:5c:5f:d7:12:ef:f0:91:
4b:85:d9:e4:4c:53:70:ea:6e:ac:04:b5:49:93:33:
d1:17:6e:a5:0c:ac:56:de:d1:90:17:bd:60:74:09:
20:d6:83:4f:1e:f0:08:3b:46:e7:aa:16:75:9c:1e:
2f:88:c6:e7:0f:b8:d1:48:00:5e:12:f4:d1:8a:01:
a7:d5:e5:6f:4d:cc:ed:5a:fc:ac:d4:17:10:58:e1:
9e:6a:0a:05:55:f1:1e:5f:78:9a:46:2f:3f:2e:57:
b0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:CE:CA:90:13:B8:99:E5:B0:2C:1D:6C:97:58:31:30:EB:78:85:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/619e354c-81d0-3a65-8f58-b153e3edfc38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
X509v3 Authority Key Identifier:
keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:8a:90:4f:61:07:8e:17:98:f5:28:1c:6f:27:5f:4c:68:55:
a7:4b:dc:6d:3c:54:b3:b6:d6:6b:2b:ec:cf:e9:11:b6:53:1c:
f5:af:5c:ed:c8:b5:be:b6:dc:0a:ce:3e:1b:a4:4e:50:1c:49:
40:b7:f6:9c:7c:cd:9f:3d:e6:27:c0:28:9f:51:6a:64:a3:3d:
14:5d:23:c0:a5:4c:12:7f:06:67:fc:bb:13:08:7c:54:1e:c8:
8f:1e:fd:3c:c7:1b:a1:d8:1e:b0:65:c8:00:4a:cd:c2:59:e1:
82:d9:5f:e7:46:be:20:52:aa:9e:f8:d8:dc:01:e8:4d:47:13:
01:df:3a:11:93:43:45:a9:69:23:36:5a:dc:3a:10:7f:3c:0f:
f0:e4:d1:d7:01:c0:c1:e8:86:b5:ca:64:fb:58:a7:d6:ba:18:
97:43:73:a8:8a:6c:85:c6:6f:2a:6e:bd:9c:2b:b5:d8:2f:fb:
98:d2:b4:0e:d9:a9:d4:48:bb:4e:e1:a8:81:99:c9:7f:01:43:
ad:1c:85:a7:54:a6:ef:b8:f1:3c:76:16:65:11:98:ee:2c:74:
54:de:93:ce:9a:c2:fe:7b:85:2f:c8:c6:6e:ca:3e:71:31:e0:
81:6f:ae:e2:0b:6a:8f:c9:89:dc:25:82:49:96:c4:7e:97:04:
6b:b1:8b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:27:40 2025 by rpki-client