Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/e52ec2c9-cf59-3c7c-a157-b8cb355f885f.roa
File: e52ec2c9-cf59-3c7c-a157-b8cb355f885f.roa (raw, json)
Hash identifier: M0pR6rDpddbhwmozkGxI14GlTEmEDpNMvyIi5F5+bX8=
Subject key identifier: 5A:2E:4A:5D:02:7E:05:51:C0:F2:5B:F4:38:4B:32:01:9C:B6:8C:EF
Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial: 010D0C9F43285848BFEBB645985A7F6692ACC800
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/e52ec2c9-cf59-3c7c-a157-b8cb355f885f.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 36040
IP address blocks: 136.22.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:b6:45:98:5a:7f:66:92:ac:c8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=0c69ffd3-c94c-40ad-9ce8-478aca09341d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bd:d6:72:f2:c7:b2:c0:51:72:61:1c:ff:58:
4a:53:8b:4f:7e:30:67:83:12:14:d0:d2:9b:a1:c0:
8c:43:7e:41:6f:72:5b:df:d9:59:7b:c8:0e:6c:3d:
5d:0b:5c:56:74:ec:f3:36:0d:77:38:3c:83:7b:cb:
e2:85:85:5a:3f:0b:65:a9:7f:8e:b7:f2:d2:19:cc:
39:72:bc:97:2d:0f:c4:44:ae:08:6d:f0:d5:e6:da:
a2:11:91:76:d1:a2:90:ec:8f:97:bb:ca:81:fc:17:
a9:52:0e:d8:2d:65:8c:05:1c:a7:41:e4:4d:65:3b:
4c:65:89:04:ea:40:2f:f2:00:22:ed:de:ce:ab:0f:
20:62:4c:c9:e9:af:6c:c4:62:37:0a:6d:19:59:90:
05:47:a3:3a:45:25:34:91:58:30:00:11:17:3f:c6:
3f:50:7b:7b:67:fe:a5:70:55:e2:13:1b:18:c7:1b:
93:52:ad:b7:ae:ad:c4:22:33:bb:f0:fb:7e:12:17:
c7:74:7e:fa:db:42:65:ff:25:71:bb:5c:a4:56:7c:
f5:2c:3a:a0:b4:00:d6:fc:d8:64:ec:59:38:e5:06:
3a:34:6f:e9:82:fb:67:cf:a4:fd:b8:c9:1a:44:2e:
53:a5:02:b8:be:93:d7:56:c2:59:a1:b8:bd:e9:cf:
29:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2E:4A:5D:02:7E:05:51:C0:F2:5B:F4:38:4B:32:01:9C:B6:8C:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/e52ec2c9-cf59-3c7c-a157-b8cb355f885f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
X509v3 Authority Key Identifier:
keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.138.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:aa:d1:6c:ce:d6:ab:5f:91:57:82:2e:1a:93:ec:6d:05:f5:
d1:1f:cd:08:e0:99:54:47:00:2d:08:06:2f:73:a8:01:db:75:
1b:95:ad:77:9e:09:cb:8c:84:3f:82:af:1c:6c:31:13:cc:74:
e8:dc:b7:88:5a:d2:d5:e8:9c:e8:2d:42:ce:d3:30:10:1d:e0:
7f:e4:f9:33:e0:0c:3c:25:d7:b5:3f:0d:8c:81:30:69:92:c8:
ff:e8:b7:37:4f:e5:67:42:da:c2:3d:a7:29:18:12:15:d7:97:
a9:96:e4:2c:1c:53:2f:34:5d:8a:91:46:ec:75:41:ea:7f:1b:
c4:1d:b9:73:4e:6c:63:02:a0:b6:9c:35:3d:ca:a0:d3:5d:a4:
10:52:a0:67:7e:af:7c:b9:26:f3:66:b0:61:42:96:3c:12:38:
0e:bc:b3:c2:95:e4:28:68:a8:d3:99:88:20:12:12:70:6b:84:
e0:75:99:16:7f:27:21:96:d7:3d:62:9d:2a:94:21:35:8f:ec:
9e:d6:8b:60:1c:34:b6:34:a8:55:63:31:7b:bc:31:db:39:0e:
82:d1:86:2a:c4:ff:d5:3c:ac:ca:ac:c9:68:20:0d:ae:16:89:
d0:82:e7:78:bd:6c:df:9b:c8:13:14:4c:39:24:ac:ae:42:81:
b7:7c:da:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:02:02 2025 by rpki-client