Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/f529b062-9b30-3398-84a5-e7d5fad5abf1.roa
File: f529b062-9b30-3398-84a5-e7d5fad5abf1.roa (raw, json)
Hash identifier: ZAopcG6o03f5pXu8xNEtWJczrsY9YgnMHLws2V+K1bM=
Subject key identifier: 1A:AE:F9:A2:C8:71:D2:23:EC:B8:25:7C:4A:99:7D:6C:21:38:8E:D6
Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial: 010D0C9F43285848BFEBD294F2B1B9904CDC8C40
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/f529b062-9b30-3398-84a5-e7d5fad5abf1.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 36040
IP address blocks: 136.22.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:d2:94:f2:b1:b9:90:4c:dc:8c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=3ab7be13-9dbd-4786-8c9a-1d436005c4d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b3:1e:5c:23:03:94:00:a3:d0:31:a0:87:c9:
ce:8c:e7:9f:b3:cc:65:5a:6b:32:95:5a:ca:2b:78:
65:d0:00:2c:8c:a8:fb:42:ee:f3:2e:95:9f:8e:5a:
27:fd:c0:ab:3c:7e:3f:13:b5:ee:f2:a3:65:85:5b:
03:c9:47:46:6d:b6:75:02:60:74:dc:a9:76:b5:b3:
ca:54:27:65:02:4d:16:28:35:58:5f:7a:8b:cc:1b:
6c:f4:a0:89:80:a3:55:3f:fd:8a:d7:aa:57:b5:32:
e5:92:aa:17:8e:06:49:0f:8b:1e:d5:4a:f9:93:b8:
2d:55:96:6a:5a:01:9a:5a:56:17:55:6c:b4:f6:08:
8f:2c:d7:3d:c3:a0:c6:5a:a3:ee:32:73:27:3f:6c:
aa:1e:88:58:36:68:eb:dc:7f:6f:aa:f6:49:6d:39:
ce:a4:c0:c3:a4:15:51:e1:7c:32:4c:60:f0:14:6e:
9c:ec:d3:47:b6:a0:f4:62:5b:b6:c7:f4:2f:01:8f:
db:10:55:91:43:7b:13:56:40:f6:32:c1:79:d8:12:
a2:65:27:8a:c3:3a:1e:db:13:5b:a0:bf:1c:95:ee:
f7:5b:e6:91:98:4e:cf:4b:e9:ab:13:c7:0e:ba:b3:
bb:a9:e3:6f:30:fd:7d:da:24:6e:ad:f5:6b:2b:80:
b4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:AE:F9:A2:C8:71:D2:23:EC:B8:25:7C:4A:99:7D:6C:21:38:8E:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/f529b062-9b30-3398-84a5-e7d5fad5abf1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
X509v3 Authority Key Identifier:
keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:80:13:2e:26:f0:bd:c3:15:06:ce:fd:12:83:aa:6f:6e:12:
cc:3c:89:bf:69:98:6d:48:f0:3b:93:e1:96:04:4c:29:96:1d:
4a:97:14:2d:e9:64:83:f1:cd:cc:cf:01:c1:9a:7c:19:35:1d:
3d:da:49:8d:5b:65:79:31:93:16:5b:1f:68:46:1d:47:c7:b9:
72:26:36:84:27:1b:d3:a4:8f:44:2f:f8:5a:8f:f0:00:2e:99:
5c:df:d5:42:09:6c:d6:9e:2e:37:6e:68:1d:36:ed:f3:3c:a6:
93:87:7a:f9:2e:e7:a6:57:03:bc:47:ca:5f:3d:a8:5c:f4:f4:
a4:ff:ff:d1:7c:0b:78:11:7e:23:ac:e2:68:db:74:ec:d6:67:
3e:9b:bf:e0:46:54:9a:83:cc:dc:1b:5f:96:a3:15:08:0d:da:
0e:63:51:23:eb:e7:a8:e1:9b:47:b5:0c:e4:93:51:77:2e:9a:
b6:48:d5:a7:e0:81:f4:49:63:4e:52:24:be:36:3e:68:c3:76:
ca:d6:0b:c2:5a:35:17:78:b3:aa:34:05:8c:33:c0:5f:d6:84:
2a:d1:82:45:d1:74:ce:2e:5b:b7:82:a5:33:1a:e8:20:b7:43:
2d:8b:e6:aa:b0:8e:3d:c9:3f:f5:40:7e:9d:0f:dc:16:a5:a4:
27:df:30:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:12:48 2025 by rpki-client