Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/8dc45127-fc54-3776-8b82-d5251dafaa2b.roa
File: 8dc45127-fc54-3776-8b82-d5251dafaa2b.roa (raw, json)
Hash identifier: Do+vANzFHbg0yPgV4AphTdH0Kr0Q4Si6DzWcgrD5xcI=
Subject key identifier: 88:14:69:78:FA:05:AB:FA:42:25:8D:9F:81:58:53:A0:47:7B:90:40
Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial: 010D0C9F43285848BFEBC86D0D9688D36D7C1680
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/8dc45127-fc54-3776-8b82-d5251dafaa2b.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 36040
IP address blocks: 136.22.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:c8:6d:0d:96:88:d3:6d:7c:16:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=e6d01453-2554-4df1-901d-ad3eed286ee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:da:78:89:29:7b:17:bf:36:3d:e8:2e:12:a1:
67:e4:64:79:60:39:2c:a9:cc:e7:52:0d:f7:58:cf:
32:d7:a1:10:1a:77:a3:2b:c7:3a:8b:9a:62:b4:1c:
30:9e:2e:23:cf:4b:5b:f5:53:3d:47:3d:a6:7d:08:
63:15:d6:64:ad:e3:86:9e:02:a1:0b:65:a9:98:e9:
7d:17:ee:38:e3:16:78:d2:c2:63:bd:51:88:7e:15:
ea:0c:94:50:3b:20:4d:7f:df:36:78:9b:ed:93:6e:
11:71:c0:ea:01:8c:4e:2f:60:88:72:e4:cc:b0:fa:
20:0f:19:03:5f:16:dc:57:73:95:59:ec:a6:ae:3c:
89:24:b3:6a:17:97:e3:ed:ab:45:40:5c:99:5d:a0:
0f:6c:11:94:c7:a1:3e:97:6a:27:2f:b7:c4:e8:80:
45:72:c1:e3:80:cb:db:df:64:a9:25:02:95:f9:81:
a7:36:ec:65:42:9c:52:56:59:8e:6b:20:6d:9b:36:
48:df:97:66:51:0f:aa:c5:e1:67:1c:f2:dc:97:fd:
40:20:7e:da:a3:1d:d8:31:6c:80:c5:70:99:96:dc:
b4:55:c9:b9:21:7f:ec:e4:6a:36:79:f0:6d:47:d0:
1a:a0:65:4c:00:b6:05:ee:07:43:29:dd:35:35:fc:
5c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:14:69:78:FA:05:AB:FA:42:25:8D:9F:81:58:53:A0:47:7B:90:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/8dc45127-fc54-3776-8b82-d5251dafaa2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
X509v3 Authority Key Identifier:
keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.141.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:83:30:0f:a7:69:fd:9c:51:79:87:a6:98:12:8e:2e:26:84:
e2:75:af:1c:0c:f1:ea:eb:13:fc:8f:23:1f:3a:7c:eb:b7:a3:
f0:51:17:db:23:6b:c9:73:70:11:9f:11:a2:f0:9d:d7:b1:7d:
89:6a:8e:88:d7:70:73:e3:8e:7a:51:a2:41:91:b6:a7:0a:8c:
ef:94:eb:46:ae:f1:00:64:2d:fd:36:5c:8d:b0:44:9a:d6:6a:
92:f8:62:00:2e:36:30:91:ef:ba:64:60:c8:b7:5f:42:d7:50:
5d:d7:2c:01:c7:87:b4:d5:5b:5b:71:2f:0b:d0:83:ca:ab:59:
e9:94:de:29:22:5c:06:5a:ec:4a:f8:3d:54:15:99:82:da:98:
4f:97:eb:6e:12:88:5b:fc:cb:1e:5e:87:df:1b:b3:34:13:99:
b7:57:a3:bf:20:54:17:fb:34:d9:a6:b0:2e:09:73:92:ac:0c:
d7:2c:6b:04:88:42:57:dd:0e:f2:ca:e4:e0:15:09:d7:28:72:
8b:25:58:7b:88:7f:52:f7:d1:98:fe:eb:ad:e2:23:d3:a7:f5:
02:15:85:49:8f:11:ee:50:1b:26:6f:e1:e8:ce:88:7e:e1:5c:
31:1f:50:4c:82:b1:2c:9b:35:37:b5:32:0e:07:f5:fc:6c:5a:
c7:c1:4d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:10:14 2025 by rpki-client