Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/75bcbd78-4640-3856-8f93-24ae6f3712f4.roa
File: 75bcbd78-4640-3856-8f93-24ae6f3712f4.roa (raw, json)
Hash identifier: CsVXsbDGDnUN5o4BrfQsm/oMq6gIrsGkOmmgFrAyWRQ=
Subject key identifier: A3:00:BA:61:27:59:84:5F:54:BE:30:7B:43:41:3E:F5:3D:A9:DA:D9
Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial: 010D0C9F43285848BFEBA8DBEF741A0A4D7781C0
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/75bcbd78-4640-3856-8f93-24ae6f3712f4.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 36040
IP address blocks: 136.22.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:a8:db:ef:74:1a:0a:4d:77:81:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=749cec2f-d85e-4aa4-bb28-0c48e6aea01b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:62:7a:da:29:aa:d4:d8:b5:39:38:d6:79:3a:
36:06:67:e8:e8:e5:64:0d:6f:eb:f1:4c:8d:a3:f4:
d4:85:21:76:c4:d7:c2:0f:67:bd:d7:77:fc:d6:d2:
0d:e6:38:9a:f6:07:74:3c:43:6f:a9:0b:68:47:67:
7a:80:62:ce:f7:72:e7:2c:2b:84:4e:b2:af:57:98:
94:3e:29:bd:f7:b2:51:e6:02:70:e8:08:36:61:c9:
65:14:fd:08:9c:c2:f1:79:1d:9a:a1:25:e6:28:2b:
72:fa:1c:f7:9a:d7:67:fc:e4:c2:cc:9e:b1:52:76:
66:a0:78:32:25:38:27:80:7f:7d:66:fd:c4:e5:4a:
ad:62:8d:d3:87:b8:5d:2b:2f:e0:fb:6d:82:02:09:
e4:71:5b:90:75:68:00:e5:2b:6a:09:35:0a:00:40:
13:1a:0b:1a:82:d1:5d:97:ee:f0:22:f3:0c:81:9a:
7d:fe:9c:c0:e2:ba:89:35:0a:7e:28:e3:ae:87:e4:
02:92:ce:fe:be:76:23:d1:44:05:70:8c:99:dc:19:
4f:46:ab:ae:0d:dd:5a:a7:61:55:70:a5:d2:6d:af:
a1:94:95:fa:f9:b0:88:da:2f:c1:19:8f:3e:e5:4f:
79:ef:7c:cd:6c:85:0c:c3:33:5c:4e:54:1c:fe:16:
8c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:00:BA:61:27:59:84:5F:54:BE:30:7B:43:41:3E:F5:3D:A9:DA:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/75bcbd78-4640-3856-8f93-24ae6f3712f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
X509v3 Authority Key Identifier:
keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.154.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:9b:f9:40:4e:1b:5c:cd:77:be:53:85:65:61:a0:51:16:1a:
df:94:71:c9:27:00:8c:7f:58:c1:cc:d2:26:87:72:36:1a:a7:
1b:c9:75:f2:f3:d2:1a:ef:28:24:3d:e6:79:c4:8a:9a:89:f1:
64:3c:f4:c5:54:75:5a:75:e0:ef:bb:dc:3f:d9:fe:9b:f8:ee:
8a:92:b4:b4:62:1a:b6:d5:ca:4d:2b:4d:a8:a0:f2:b4:c0:ff:
4d:ee:0a:a6:96:26:bf:47:7a:11:7b:b3:bc:92:b9:b1:2e:25:
cb:a7:df:52:78:6d:4b:39:ce:ea:0a:47:35:13:2b:01:1d:c8:
2a:dd:03:de:31:31:a9:5e:aa:b7:f5:d7:d4:6a:dd:e9:7f:f8:
9b:02:30:2d:5e:e1:92:b8:a8:fd:9c:2b:bb:8a:7d:21:71:6f:
1c:2c:b8:bb:6c:ff:9c:a5:c0:d9:9e:9f:03:0e:ef:58:f4:30:
e1:0a:d9:4a:20:24:22:01:a3:89:bf:e1:20:a6:02:8f:55:36:
1d:fb:55:3a:13:19:24:c1:36:d9:8e:f5:a1:54:3b:da:27:5c:
dd:f4:02:d9:e0:f5:16:73:a0:11:9f:11:c4:ea:c5:36:b1:28:
b2:a1:c1:cc:cf:85:be:82:9a:de:ac:f3:0a:e5:4b:12:90:2b:
72:df:b1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:26:53 2025 by rpki-client