Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/7c73910d-5c54-3833-9531-ce70a04da00f.roa
File: 7c73910d-5c54-3833-9531-ce70a04da00f.roa (raw, json)
Hash identifier: gF9HnVxcNqJy2qGvGQFOCnUUzm6mkU6eXOz8YGH/XiU=
Subject key identifier: 32:34:5F:DA:53:15:D8:54:14:0A:3B:6D:37:8B:E1:D0:CF:7C:D9:6F
Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial: 010D0C9F43285848BFEBB35CC18525A4B28EF500
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/7c73910d-5c54-3833-9531-ce70a04da00f.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 36040
IP address blocks: 136.22.130.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:b3:5c:c1:85:25:a4:b2:8e:f5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=4d7efeb3-e8ad-4dcf-b7c6-a1871ded2bbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:db:79:d3:bc:1c:2a:dd:c6:7f:9b:34:fd:ff:
8a:d7:50:1f:83:29:ca:69:8b:1b:97:7e:4d:ce:f1:
3c:f8:0f:ad:a0:22:6a:fb:40:ab:9a:8e:ff:fd:88:
9c:98:13:95:5a:20:ea:65:f9:41:77:1e:78:de:11:
9b:b4:7a:e5:ca:ea:33:af:40:6e:5a:99:23:f9:9e:
3e:9a:e8:bf:c1:1a:53:d8:30:5a:c8:d4:57:bc:60:
e3:c3:ca:28:be:04:53:5b:03:66:86:ca:1a:29:ad:
8a:80:84:52:2e:d8:99:89:56:77:7e:8b:a9:02:77:
a1:41:4a:33:64:a4:ed:f4:73:7d:07:6f:24:07:39:
7e:e1:94:5d:9d:2f:95:9d:95:e6:a1:8e:0f:07:64:
f3:bd:f5:dd:a4:7e:b8:19:f4:34:0f:54:44:6c:99:
15:4c:ec:6e:a6:db:78:3d:bd:ee:ef:8f:c4:3c:ee:
6b:0c:77:4b:b8:fa:c2:be:93:da:bc:3d:37:fb:b6:
6e:8d:9f:8c:76:d1:b5:ef:0e:7f:a3:ca:d3:a2:b0:
29:29:1c:70:2a:d2:b9:06:32:f4:b5:49:31:a0:37:
7c:65:e6:64:5e:38:b3:44:49:49:c9:95:44:e4:9b:
86:f9:e6:c4:88:76:f0:89:3f:2c:30:45:4f:ac:d2:
79:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:34:5F:DA:53:15:D8:54:14:0A:3B:6D:37:8B:E1:D0:CF:7C:D9:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/7c73910d-5c54-3833-9531-ce70a04da00f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
X509v3 Authority Key Identifier:
keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.130.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:2e:75:b0:c5:25:75:8c:b9:fb:1f:b3:4c:e2:ed:7c:2a:f1:
4f:fa:9b:f8:6a:d4:af:22:c7:c6:43:04:c9:4b:04:aa:a3:c8:
08:38:c0:0a:ec:f8:57:a1:b9:67:c9:f6:26:7b:2f:14:fe:05:
aa:01:b2:9e:5c:6f:07:58:cc:fc:5f:61:2c:e4:f0:bc:fb:4e:
26:b2:b7:bd:29:bd:fe:66:15:03:65:a4:fb:35:0b:1d:ce:8b:
9b:26:c5:05:d4:a6:25:3b:d3:2d:31:36:61:88:4f:13:dc:2e:
b8:48:34:26:0d:c0:f0:6d:76:88:27:77:f2:0f:66:98:a9:26:
14:5f:f9:aa:94:d6:48:9c:16:3d:68:61:79:fa:74:b4:62:04:
c0:02:64:70:c0:4d:7b:c9:f0:3e:8c:3d:13:c9:d2:f1:29:55:
c4:2a:6c:f1:15:a2:d9:e9:cb:59:7d:ef:35:e2:d9:8d:bd:e7:
3f:bd:37:a1:5c:df:d6:fd:71:66:d7:30:ae:09:14:cb:99:42:
ab:f4:82:b2:25:b8:8b:d2:d9:c1:44:98:32:7c:60:95:46:04:
a8:b3:e5:a7:39:93:0d:ce:91:f5:62:33:75:81:4a:95:34:fc:
46:de:b4:26:38:75:8b:e5:6c:55:eb:64:5e:ff:58:f9:77:e2:
5e:ae:88:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:24:37 2025 by rpki-client