Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/ecf5042d-a001-3491-a272-514979cae084.roa
File: ecf5042d-a001-3491-a272-514979cae084.roa (raw, json)
Hash identifier: i1TbJBTHJjilw3+4KxiY5pu7jJ/T7szqqtfr+KqHub0=
Subject key identifier: E0:27:31:C0:06:82:3F:9B:43:D6:D5:95:5C:DB:6B:9D:7C:A3:B6:EE
Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial: 010D0C9F43285848BFEBCEDD09508EADF7629200
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/ecf5042d-a001-3491-a272-514979cae084.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 36040
IP address blocks: 136.22.152.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:ce:dd:09:50:8e:ad:f7:62:92:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=0fc7e101-f059-4825-aa7c-f441ca300579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9a:4f:b7:24:2c:3b:f6:d2:0f:ca:32:c0:30:
59:43:11:aa:a6:20:2e:41:a2:96:24:7d:bd:3c:05:
92:a3:74:b1:fd:66:6b:a3:95:41:2c:e8:31:17:75:
9b:fc:7c:43:c7:0e:93:2d:47:99:1a:d5:3e:4b:1e:
3f:2b:fa:b9:72:a9:61:40:01:97:84:b8:2e:e2:91:
00:ae:e3:c2:98:03:4d:8b:8c:78:de:1b:96:4d:72:
94:97:06:6d:d8:59:57:51:3d:19:63:15:bd:30:e0:
30:bb:ce:a4:87:1a:cb:aa:41:ed:cb:3c:f1:7a:1f:
26:3c:f6:e2:10:d1:0b:97:43:2b:81:3d:0c:68:58:
61:0e:62:14:ec:9f:4a:c7:64:77:56:b5:36:d6:13:
8a:d4:0f:a8:01:ad:d0:ff:1a:00:e2:51:3d:73:16:
1f:0b:95:2a:1c:f7:74:79:cf:25:d5:fd:80:e9:89:
b3:22:ed:ef:b0:e9:d7:db:8a:4e:29:88:9c:ab:c2:
00:8f:27:d6:83:bb:d3:ae:5e:c6:62:cf:e4:0c:14:
a6:a5:83:f5:04:d6:31:9b:3a:a2:f6:92:6b:53:47:
84:0a:d4:ed:3f:36:b6:17:45:ba:09:18:ae:9f:7d:
61:29:83:d3:0d:4b:2d:45:b9:d1:cd:2a:ec:8f:22:
34:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:27:31:C0:06:82:3F:9B:43:D6:D5:95:5C:DB:6B:9D:7C:A3:B6:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/ecf5042d-a001-3491-a272-514979cae084.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
X509v3 Authority Key Identifier:
keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.152.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:22:0c:3e:e2:4a:d1:de:b3:d4:a4:4f:77:a8:43:c5:05:9c:
48:c6:9d:d1:92:ab:b7:73:ab:a9:0a:e1:47:35:00:9f:74:7f:
73:c9:75:ac:f6:59:02:fb:64:12:c2:33:39:d4:5e:41:88:ce:
4c:c8:65:31:12:dd:3a:3c:84:dd:be:3a:b7:37:a5:b0:75:5e:
1c:30:1e:60:b3:bf:72:48:ca:20:ba:18:d6:95:d4:9d:f8:5d:
a1:e1:da:a3:01:cc:14:dc:63:d5:c8:86:f0:75:df:b8:89:c2:
01:18:89:dd:6d:5b:f8:9e:9a:17:80:5f:d9:55:e3:ea:af:09:
16:49:68:80:af:61:fe:c1:00:37:c1:86:42:7a:d9:dc:42:a1:
10:f1:c4:e1:7e:aa:91:5a:18:38:76:62:6d:11:29:04:9f:ca:
60:83:d1:7e:3d:0d:5c:8e:63:59:13:de:94:49:4f:d3:98:03:
07:0b:1b:b8:9a:7a:cb:85:c2:43:ec:c1:11:b6:d5:df:9d:f2:
fd:23:c1:16:1a:5c:bf:27:1a:e1:0b:9e:c7:dc:b0:54:6b:b2:
08:54:16:09:ec:1d:ed:d4:94:27:38:80:b2:6d:f6:f6:2b:46:
f1:92:2f:be:24:e9:eb:c3:97:3a:1e:68:d6:29:c9:c8:80:e1:
1b:0e:de:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:08:21 2025 by rpki-client