Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/f8f00d94-fff7-3852-9bfb-af96e4ab06f6.roa
File: f8f00d94-fff7-3852-9bfb-af96e4ab06f6.roa (raw, json)
Hash identifier: gaO6rADxNtMabmWNpKWMzx7ySl6TDr1A459MbAczU3U=
Subject key identifier: 20:FB:53:52:F8:25:38:96:4D:70:3C:05:D6:92:A9:67:52:44:7A:F9
Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial: 010D0C9F43285848BFEBCF38A22512AD1574F380
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/f8f00d94-fff7-3852-9bfb-af96e4ab06f6.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 36040
IP address blocks: 136.22.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:cf:38:a2:25:12:ad:15:74:f3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=6daf7ab2-60db-47d1-af83-f0ccbe7e87d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:20:0c:24:b0:e4:e7:95:ea:cf:a9:6b:d3:3d:
0c:24:42:98:3b:04:09:ba:78:59:b7:8e:49:30:a4:
96:e7:f0:64:f3:82:cf:4c:f9:c6:3e:9a:aa:f0:e0:
62:fc:4a:66:83:72:2d:3a:b0:4d:8c:fb:ab:de:87:
81:e3:aa:11:fc:4b:97:ac:30:b2:48:4a:8e:4f:41:
68:d0:f4:f2:b8:07:4f:1d:3f:a5:b9:a2:ca:4e:2d:
13:23:b6:55:04:ef:e5:56:7f:64:07:6a:ad:07:ff:
2c:3a:a9:e5:2f:34:cb:08:e6:93:53:9f:9a:c4:96:
fa:06:e0:77:bc:91:b3:c8:dc:4f:53:b7:cb:b8:da:
f5:f7:dc:a6:2a:cb:53:5c:d3:b1:a5:80:0b:e1:db:
b7:67:ee:92:ca:8e:92:07:ff:d9:f9:17:d4:e5:0b:
06:c5:48:f7:28:2a:03:c0:b5:dc:b1:2e:7b:ff:29:
47:41:e5:eb:47:cf:44:89:88:2e:67:ac:68:b3:04:
f7:3d:e0:bc:34:d0:d5:c7:d2:98:3d:04:a5:1c:20:
47:67:5b:03:b9:84:a9:b5:0b:5b:09:33:da:00:48:
f4:48:1c:50:bc:40:5d:83:34:15:7a:b4:d2:6b:26:
e1:3d:92:a4:44:0b:8d:48:ec:2a:79:c7:dd:33:9b:
be:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:FB:53:52:F8:25:38:96:4D:70:3C:05:D6:92:A9:67:52:44:7A:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/f8f00d94-fff7-3852-9bfb-af96e4ab06f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
X509v3 Authority Key Identifier:
keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.151.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:57:4a:13:bd:ce:33:e6:41:7f:04:2f:0c:f9:66:b7:f9:23:
e3:5e:49:dc:70:66:da:db:fc:73:39:b0:c3:50:87:d1:89:31:
d0:8d:18:68:bb:38:2b:18:42:60:9a:36:92:74:f9:3e:c9:81:
fa:be:09:af:9a:be:b3:fa:0c:1c:9a:cf:a2:68:97:83:bd:b6:
29:d4:24:ca:06:fc:86:73:b0:3c:c8:b7:84:db:49:25:8e:fb:
80:56:b3:c3:cb:e7:67:0a:44:be:12:63:83:66:b3:1e:a7:b7:
1a:12:ee:d2:38:09:58:dd:ac:d1:f6:06:e6:85:08:8a:cb:31:
fd:d1:15:00:33:5d:b3:12:c2:6f:40:5d:04:2a:f9:2d:d9:99:
49:c1:9f:0a:d0:18:5b:2e:94:2e:64:9d:f2:ac:43:3b:a8:b6:
85:b5:44:66:96:10:a6:a9:70:a8:83:21:dd:c5:c8:78:e9:22:
7a:3f:95:f5:c0:c9:e2:9a:32:fd:4d:31:ab:52:bb:34:3a:a3:
a9:8a:38:36:ad:40:c6:bd:7c:c0:48:3a:cf:cf:6d:68:21:08:
09:c0:d3:83:ec:ce:79:1c:62:46:08:b9:29:3a:4f:6f:6a:31:
0a:b2:53:7e:62:0b:ee:58:ab:e6:15:6a:56:9c:f9:c1:0c:fa:
18:7e:db:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:27:39 2025 by rpki-client