Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/cbf61d04-006b-3dbe-ae48-90aeaa9b6aa0.roa
File: cbf61d04-006b-3dbe-ae48-90aeaa9b6aa0.roa (raw, json)
Hash identifier: cL5eEyWsx3rNWCv5T9SGVszWIDRXdqONAdFwNW2H2lY=
Subject key identifier: 87:2A:D9:51:52:70:1D:2F:6A:AB:B1:0A:95:CD:0D:7E:DB:D5:52:20
Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial: 010D0C9F43285848BFEBBCB367E95172F2CD3620
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/cbf61d04-006b-3dbe-ae48-90aeaa9b6aa0.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 36040
IP address blocks: 136.22.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:bc:b3:67:e9:51:72:f2:cd:36:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=76094c99-9daf-43ec-bbd1-c58bee9515f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:11:03:33:64:f2:a4:07:fb:96:d6:3c:73:fd:
d6:2c:ea:f3:de:ef:4a:f7:52:d3:35:e1:56:43:91:
11:85:71:92:dc:57:10:bd:6c:2d:4b:a8:f6:79:a5:
d5:0c:60:37:7c:3a:42:85:e1:5c:c5:99:00:97:67:
03:10:14:83:68:4c:5e:72:88:ee:de:22:67:af:f8:
a4:40:a8:a9:e0:f1:4a:b6:c3:e4:0d:fe:40:66:16:
10:03:ed:d9:a3:e9:ec:bf:d7:55:24:ef:0e:84:16:
15:e0:31:a4:d8:84:2f:95:de:02:fc:95:b0:69:a7:
f5:17:e5:52:6a:5a:e4:4b:61:b0:e4:9c:4c:7e:12:
8d:98:ca:a4:b9:aa:50:30:60:aa:f4:87:12:5a:65:
f1:a1:f9:1e:55:c6:39:48:a7:85:cb:69:96:f1:e4:
6d:ab:93:0e:e3:ec:24:a4:b7:59:2c:22:34:51:d4:
87:82:f1:d9:5a:56:38:c5:5f:e7:5a:df:bd:5e:86:
8c:85:0d:6a:9e:dc:2e:eb:25:5a:2b:b4:48:e3:9e:
02:b9:e2:ba:e8:d8:f8:6d:33:cd:1a:34:8b:01:4b:
cc:bc:fe:21:d4:8d:4e:cc:81:e7:31:de:57:d7:e5:
b2:57:48:4a:de:c0:cb:ad:7b:99:2c:43:f1:74:6b:
4f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:2A:D9:51:52:70:1D:2F:6A:AB:B1:0A:95:CD:0D:7E:DB:D5:52:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/cbf61d04-006b-3dbe-ae48-90aeaa9b6aa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
X509v3 Authority Key Identifier:
keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.147.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:62:bd:9d:dd:bd:c4:32:3e:16:4a:1b:b5:1c:a0:25:64:53:
a1:01:80:3e:e5:eb:f8:a0:8a:2a:87:4d:9b:0c:1f:15:24:31:
ae:34:61:78:1e:0d:8d:90:50:c9:58:59:9e:23:ed:7d:30:75:
b6:73:16:9c:75:ee:66:4b:d0:ba:1f:fc:c3:2b:12:30:a5:e8:
50:36:ff:87:52:84:ad:cb:9b:26:db:8f:92:80:d1:c1:8a:93:
86:d2:c7:b0:b2:58:e2:e6:f6:14:0b:b5:51:ea:e1:97:a7:5b:
41:55:40:99:91:6f:88:d4:d9:dc:ad:9d:24:35:30:bc:a7:32:
50:9c:ce:a0:74:ca:66:b4:e5:34:7e:f2:3a:14:41:c9:f0:36:
96:0f:71:08:7c:c0:a1:45:74:ac:3f:04:cb:08:68:a6:95:91:
04:cc:3b:c0:eb:7b:b1:85:2a:c3:7a:7b:cd:80:6f:26:f1:f8:
cf:b1:7b:11:ec:0b:2a:bc:77:67:76:46:05:38:f7:c2:c0:52:
1c:a5:10:a6:ec:6c:c8:99:63:ba:a5:4e:3b:ac:e8:f3:b5:f3:
75:06:09:60:da:a4:fd:1b:89:4f:57:a7:7c:18:fc:29:22:02:
7a:22:17:42:9a:e1:07:39:21:0a:f2:17:26:d5:24:1d:bd:d2:
3a:ba:4c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:01:33 2025 by rpki-client