Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/a17f9178-2181-3c31-b39b-7aa6b91f0dfd.roa
File: a17f9178-2181-3c31-b39b-7aa6b91f0dfd.roa (raw, json)
Hash identifier: j8yARJ5Fohg6fkEUQ0nIWjE++vnnuTtGJgFZnqVAsOw=
Subject key identifier: 6A:74:FB:93:F0:7B:0C:17:98:05:FC:FB:E2:82:EB:4D:63:BA:FD:B8
Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial: 010D0C9F43285848BFEBD92119F9DED444CBA728
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/a17f9178-2181-3c31-b39b-7aa6b91f0dfd.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 36040
IP address blocks: 136.22.132.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:d9:21:19:f9:de:d4:44:cb:a7:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=ba273bcb-e0a4-4e3e-9f7a-39f69faa7729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:cb:7f:c3:ec:cc:f1:3b:9e:57:2a:c9:5f:11:
60:8a:ce:41:4f:c2:65:de:79:70:96:3c:1a:76:2e:
90:bc:81:97:90:c9:87:90:7c:99:3d:17:8c:42:02:
f3:76:c3:78:68:e8:cd:48:e0:06:7e:87:78:a8:d1:
74:f4:67:e1:d5:f6:00:b3:8e:b0:db:aa:23:2a:3d:
39:c8:26:74:e1:89:c6:f5:f0:3b:37:9b:f9:41:62:
69:2f:d2:18:dd:18:60:21:86:5d:20:91:18:6b:57:
e0:e9:23:ba:97:22:e4:39:89:dd:c8:d8:7a:d4:f5:
a8:c7:57:d2:8e:32:83:c4:f1:2f:7c:10:c7:e2:24:
4d:36:5d:f8:c7:7b:48:8a:cb:28:99:6f:d6:02:de:
3a:53:74:ec:e4:25:ba:2f:b9:35:e3:d4:d8:e6:be:
5c:8c:e4:34:5b:82:df:28:52:33:61:c4:aa:41:40:
37:eb:b1:f3:ec:73:21:df:14:ed:c8:03:81:c3:3d:
7f:89:48:db:46:aa:bd:8c:02:ee:69:57:a5:af:7b:
40:53:8b:f6:f6:d0:e0:d1:fa:5e:77:79:50:4f:d2:
27:d5:0b:17:67:27:ae:f4:08:c6:d0:a7:55:e9:17:
3f:57:36:04:29:c3:bf:98:b0:b6:d9:e8:60:65:ee:
06:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:74:FB:93:F0:7B:0C:17:98:05:FC:FB:E2:82:EB:4D:63:BA:FD:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/a17f9178-2181-3c31-b39b-7aa6b91f0dfd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
X509v3 Authority Key Identifier:
keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.132.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:5c:76:a5:5c:e2:0f:68:39:12:f2:91:f2:ac:1d:69:56:9c:
8a:68:e9:c6:1d:e9:fe:70:8a:3d:b5:44:84:72:f4:3c:d3:ac:
1e:32:8c:89:27:16:e2:15:39:39:c6:29:ed:10:78:34:85:a7:
78:2a:06:1c:bc:47:95:5c:04:4a:97:a7:a6:01:cc:2e:12:fb:
3d:7d:03:94:52:84:93:95:83:b4:aa:c4:54:38:84:e0:bc:72:
86:08:45:e2:17:a7:7d:9e:96:08:1b:82:1b:a7:0d:30:39:c2:
1f:78:32:3c:e8:25:4d:18:fc:13:00:d6:e0:f0:92:72:c0:9e:
3f:8c:9a:ed:52:72:a3:d7:fd:e4:c4:31:7b:33:73:8c:7b:9d:
a6:e0:7f:5b:56:c3:4d:3a:4c:65:78:aa:b9:ee:70:19:a4:d8:
c9:e7:94:4d:29:44:84:63:7c:1f:49:ee:c6:c0:ed:af:de:42:
65:31:ab:66:8f:c7:00:94:16:a5:88:0c:e9:84:a5:b0:7d:9a:
1a:27:1e:72:12:c5:13:56:59:76:88:7b:e1:8f:f3:01:a0:a9:
7a:46:cb:36:76:26:a6:c3:5e:0d:ab:df:4b:a0:bb:05:12:f5:
47:fc:4d:d1:75:be:5f:16:8f:eb:bf:19:87:88:fb:63:c4:7b:
db:d7:2e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:41:35 2025 by rpki-client