Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d2b87949-dbe7-30ca-bebf-bdd4b5ba8215.roa
File: d2b87949-dbe7-30ca-bebf-bdd4b5ba8215.roa (raw, json)
Hash identifier: 6TqWvVvKj94GDsRrScTxKClRveaGr2VFEg+fVCv69lw=
Subject key identifier: DA:D0:09:5F:40:24:EE:5B:40:78:46:41:BD:35:72:5E:CD:37:D8:25
Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial: 010D0C9F43285848BFEBB88549CE96D547371560
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d2b87949-dbe7-30ca-bebf-bdd4b5ba8215.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 36040
IP address blocks: 136.22.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:b8:85:49:ce:96:d5:47:37:15:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=54a74596-3f9d-4d2e-937c-414ca6fb876f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8a:4c:64:e5:45:87:3b:d5:a5:71:36:a3:7f:
75:ef:68:9f:6f:20:bd:ad:9e:3f:02:c4:ad:c7:21:
4c:2b:8f:6e:0e:9b:c0:27:54:b9:e5:ad:02:e8:5b:
f2:01:4c:b6:a1:3d:94:a8:81:06:14:3a:35:db:b3:
39:27:76:0b:d0:ce:2c:68:9e:3a:49:b1:9c:ad:8d:
ac:7c:9d:f5:c3:b5:4f:19:d0:59:23:3e:ad:07:6f:
10:ef:d4:c1:c9:d5:22:2f:63:a7:39:f0:43:3d:47:
c7:f6:6f:6f:24:ef:f7:64:1a:79:93:9f:e5:31:96:
b7:9f:19:3f:8f:c0:3c:60:dc:7c:d0:46:8c:25:f6:
a9:b0:92:ba:e6:5b:36:f2:bc:2f:d5:7d:d4:96:64:
88:4a:10:f8:12:d9:a3:23:08:15:e9:24:12:d8:c3:
40:96:d1:f4:9d:40:90:a3:75:31:84:b4:b8:aa:3b:
56:b5:62:ba:b5:d5:94:1e:1a:c2:c1:96:4d:ea:08:
a9:a9:a9:3c:41:54:a2:8a:b2:8d:21:3e:17:e7:33:
f1:29:83:88:fd:a6:94:c8:88:2b:e9:6d:c2:0b:5e:
89:90:1a:6b:f0:81:89:31:c6:90:27:5a:fe:1d:03:
8b:b1:f3:11:e9:9a:4e:d5:93:4d:a8:75:d8:13:00:
84:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D0:09:5F:40:24:EE:5B:40:78:46:41:BD:35:72:5E:CD:37:D8:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d2b87949-dbe7-30ca-bebf-bdd4b5ba8215.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
X509v3 Authority Key Identifier:
keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.150.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:1e:e6:b3:50:76:f8:fb:9d:68:18:f2:16:4f:66:ec:a3:18:
92:df:f9:39:46:e7:fa:c1:aa:af:29:27:cd:eb:66:de:af:b6:
57:9c:94:f3:ed:ed:bc:e8:5c:0a:89:78:97:30:e9:8a:4d:98:
29:21:90:65:ce:6b:ff:ef:b0:b6:11:cc:75:dc:ab:1c:05:7e:
25:fe:b5:00:12:ea:47:e6:ef:5b:92:db:37:0a:ee:f9:51:b5:
ff:e3:60:ab:ca:e0:61:42:7f:53:dc:f3:d0:3d:43:7f:dc:48:
4c:d7:aa:3c:f1:35:38:1c:7a:cf:46:c3:0a:de:5c:08:08:1b:
25:49:df:30:13:32:30:e3:e6:7f:b0:06:dc:a3:bf:10:14:dd:
38:7c:87:9c:cc:f3:26:db:ec:81:eb:06:43:98:c2:42:cc:61:
79:71:fc:93:78:eb:05:e9:45:e7:0e:24:2a:82:b4:8a:ad:6d:
9a:be:7e:0f:a5:39:10:dc:3e:d8:0f:17:3f:db:94:69:67:76:
ef:50:d2:c3:c6:2f:07:8d:2b:22:b3:5c:49:32:d0:01:2a:02:
c8:cb:dc:b9:d9:5a:54:65:f8:4a:ba:7c:31:68:a9:39:cf:5c:
19:1a:5c:16:2a:60:5e:64:fa:1d:01:01:3c:88:28:f0:3f:b2:
58:92:ec:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:12:45 2025 by rpki-client