Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/7e0eb996-095b-3e20-a9bb-cb5d44ac6368.roa
File: 7e0eb996-095b-3e20-a9bb-cb5d44ac6368.roa (raw, json)
Hash identifier: iz77roWeZo1QQ951c5oomxxZ+/uXFzaHCWkOpC1c6KA=
Subject key identifier: 75:2F:22:C0:41:87:D8:11:FC:A0:59:59:7B:4B:FB:5A:6C:D1:CF:57
Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial: 010D0C9F43285848BFEBD3C74031C2CFEA4C3F00
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/7e0eb996-095b-3e20-a9bb-cb5d44ac6368.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 36040
IP address blocks: 136.22.128.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:d3:c7:40:31:c2:cf:ea:4c:3f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=cdcce9f9-70aa-44df-8ba1-ddc943e0a3d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:20:52:5a:a2:90:80:9a:83:29:a9:2e:68:db:
48:fc:91:6e:54:8a:cf:22:ef:89:f1:19:37:fe:3e:
a7:95:cb:6f:a9:a4:54:c8:dc:2f:79:53:51:9d:13:
23:c1:2a:94:57:78:32:a5:41:cc:0b:44:72:ba:8b:
80:be:e4:7d:ff:4e:fb:52:26:12:ee:20:ef:1a:d8:
35:cf:1c:75:af:ae:c0:ae:b3:37:f8:a8:b9:8f:de:
e6:76:33:d1:b7:5b:e7:6c:9d:fb:7d:57:7d:31:81:
22:dc:c8:e5:e5:02:af:86:c1:0e:0a:dd:77:8a:4d:
be:13:3a:65:6b:d8:80:76:08:95:2c:7b:09:95:9b:
36:6e:ea:cd:11:0c:a9:74:f3:4b:3a:0b:9d:03:ba:
c2:33:ca:21:f3:80:76:97:63:f5:02:a8:7e:7c:98:
ad:6f:6c:ed:2a:55:1d:1f:31:65:99:76:46:38:3b:
a8:3f:94:04:2c:d6:4f:eb:6c:ec:9f:73:23:a1:fb:
0f:e7:14:a8:4a:12:5f:4c:11:5f:e7:be:a9:ac:0a:
32:93:5f:c8:62:94:44:0c:a0:31:20:50:db:96:12:
86:9c:a8:b5:1f:9f:f7:44:4e:8b:c0:37:af:43:b6:
fd:16:f1:99:34:90:dc:a8:58:9a:a4:51:21:6a:f6:
74:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:2F:22:C0:41:87:D8:11:FC:A0:59:59:7B:4B:FB:5A:6C:D1:CF:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/7e0eb996-095b-3e20-a9bb-cb5d44ac6368.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
X509v3 Authority Key Identifier:
keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.128.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:e9:8a:34:d1:56:d4:ab:8d:d6:ff:47:80:ef:8c:d9:ce:7f:
0d:49:0c:02:c9:48:2c:b7:00:20:fa:61:b7:77:5c:a3:a3:ed:
90:35:8c:0f:59:37:7e:8b:2f:42:39:1e:37:d8:e8:e6:79:a8:
67:04:f1:83:1b:ae:a1:95:2d:df:62:8c:7a:da:b9:6f:be:05:
97:41:b1:74:38:73:a3:2d:7c:74:ac:90:c3:15:46:77:3e:fc:
7a:84:a0:72:a8:ef:2b:1d:36:2e:ac:0a:c6:fe:d0:e9:f8:cd:
a1:5b:b0:5c:33:ca:59:b3:8e:da:fa:d6:ab:97:d9:f7:f8:b1:
b1:44:a8:0d:60:f6:20:2e:bf:0b:3b:d4:1b:fe:d9:30:7f:ad:
c6:1d:e9:4b:ea:42:bf:87:61:2a:bd:cb:96:08:04:1d:0f:5e:
ef:2a:25:73:87:f7:7b:13:4d:4f:02:09:51:ac:f4:1f:c7:ed:
ee:b3:bf:10:bc:27:d9:eb:23:da:e2:44:7e:f5:92:39:95:d6:
05:36:de:dc:e4:a3:a9:38:10:41:27:e7:4b:10:70:30:47:c5:
49:0c:85:ad:30:da:be:12:db:a8:48:d1:5b:74:b6:76:b8:82:
71:ff:79:64:45:a5:89:0a:03:0b:a3:98:eb:0e:85:ba:95:91:
ca:f4:59:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:10:16 2025 by rpki-client