Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/82a8acc1-ac50-3342-a8f8-0775e8e5a19b.roa
File: 82a8acc1-ac50-3342-a8f8-0775e8e5a19b.roa (raw, json)
Hash identifier: fYxNvU6vjfR0ujvyfyx4GBcmol3Dn65OCqNl4b+e+S0=
Subject key identifier: C5:CE:A1:66:DF:44:E1:81:3B:20:EB:53:52:57:FB:E9:58:F5:12:C4
Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial: 010D0C9F43285848BFEBD509C555425D739BC4A0
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/82a8acc1-ac50-3342-a8f8-0775e8e5a19b.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 36040
IP address blocks: 136.22.154.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:d5:09:c5:55:42:5d:73:9b:c4:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=ed656fa3-0601-4f9d-9d8b-c159efc0a094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:59:1d:6e:e4:fa:66:ae:01:6b:f7:27:bf:6c:
65:e8:46:65:21:2b:9e:ca:e8:fc:d8:6b:27:fc:7c:
40:7c:c4:d0:f4:fe:7c:9b:91:f3:33:c0:7d:3e:14:
d8:ba:ef:42:c6:f0:30:19:6a:d7:41:29:6d:6f:ab:
c9:8a:d5:f9:ec:b9:08:f8:7c:a8:a4:fe:45:af:96:
52:6a:66:20:d5:fa:79:7a:01:30:19:ef:c0:a3:78:
ef:24:3a:98:3f:a9:18:85:6b:6e:f6:e3:e7:24:44:
71:33:ff:4b:28:3a:48:7a:c5:db:b5:9f:29:e7:07:
54:69:c9:b7:5f:b0:ca:9c:5c:25:73:8e:a7:47:a2:
d7:5a:af:7a:40:78:be:0a:9d:54:1d:be:00:c1:55:
b5:eb:7b:98:52:24:49:2f:68:4c:be:68:92:e0:0a:
77:4d:64:95:30:47:50:80:50:a0:22:79:0f:11:b2:
40:3f:0c:d0:1c:c6:41:91:68:2d:c3:3c:53:86:ea:
82:bd:c9:2f:8c:a8:02:77:4b:fe:6a:61:8e:10:84:
62:00:12:be:64:f2:1d:a7:b5:1a:91:a3:08:35:91:
c3:fa:79:d6:21:d2:cb:d2:39:79:41:eb:e9:dd:c4:
ba:1a:4f:c3:28:44:24:e6:30:b0:82:0b:4c:a0:c0:
0d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:CE:A1:66:DF:44:E1:81:3B:20:EB:53:52:57:FB:E9:58:F5:12:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/82a8acc1-ac50-3342-a8f8-0775e8e5a19b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
X509v3 Authority Key Identifier:
keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.154.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:8d:97:70:fd:cd:8b:9c:91:1d:3a:2b:6e:e5:b6:6f:2b:97:
82:cc:b7:9e:79:68:19:f3:61:7c:a5:be:bd:1c:bc:b2:20:1c:
d3:77:fa:62:ab:59:b2:1c:8d:7b:41:91:a3:85:f8:d9:a5:a9:
2b:ca:1c:96:25:31:d3:38:2e:69:0c:c1:7a:18:89:4f:d0:fe:
72:2e:7b:ba:24:14:8e:3d:46:d2:b5:10:38:9c:4a:48:3d:09:
e5:80:93:b4:07:8e:a7:f5:8d:71:c9:fb:68:f4:d8:05:a6:20:
3c:81:4c:a0:31:9f:26:b8:31:a7:ed:89:d2:a4:fe:50:be:be:
e3:a6:27:e6:de:9c:4f:29:73:dc:5b:b4:0d:7f:22:fb:02:69:
9c:bd:fc:35:bc:a9:52:aa:08:3b:85:75:ed:97:35:6b:4d:14:
11:f7:07:5a:92:ee:62:99:a6:d1:4f:30:ab:45:94:d6:a2:41:
49:13:ed:62:01:ff:a7:bb:b4:ed:a1:ac:ac:cb:37:30:20:18:
fd:69:c5:ba:5b:7a:1e:ad:59:0d:16:6f:df:c2:03:5a:ba:fa:
58:ea:cb:1f:fd:07:85:58:d6:b8:fe:c4:d1:60:ab:b1:c3:61:
33:87:d4:63:19:84:cf:53:73:36:c4:17:2a:06:c5:36:8a:e8:
15:f1:49:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:27:42 2025 by rpki-client