Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/68c8938b-8a4f-3d3c-b66e-b6f3c395b406.roa
File: 68c8938b-8a4f-3d3c-b66e-b6f3c395b406.roa (raw, json)
Hash identifier: gO5GNI0RsGgQKy8h//8RM4izOLB2rIe7zTLvM9+pqYk=
Subject key identifier: 94:13:45:45:E4:5B:A6:58:4B:8E:42:40:A0:7B:3B:7D:90:A6:C2:EC
Certificate issuer: /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial: 010D0C9F43285848C58183D301296D11AB708A00
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/68c8938b-8a4f-3d3c-b66e-b6f3c395b406.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 36492
IP address blocks: 136.22.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:83:d3:01:29:6d:11:ab:70:8a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=e818e764-ee91-41d6-a4f9-2a75e5110f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:28:4a:3e:1d:5a:7a:c1:9e:80:26:53:87:fa:
d9:07:53:4f:ef:11:27:02:8d:57:53:bb:f1:3b:2a:
44:c5:3c:87:26:92:1e:b6:12:53:bc:44:d5:2b:a8:
6c:c1:5d:da:0b:d0:1e:70:d7:6f:1e:db:95:5b:69:
1b:5d:ed:27:f5:0b:8b:82:11:60:f5:7f:18:cf:fe:
47:f1:ef:ae:23:b8:b2:40:5b:39:37:04:7a:c7:4f:
52:3a:5f:d8:7e:81:9c:fd:e8:89:4e:5d:00:8a:93:
80:48:10:ac:7d:30:5c:97:94:9c:0b:ed:e9:d9:db:
cd:2d:1a:57:0c:69:ce:07:8f:9e:be:cd:12:9a:87:
d5:b9:fa:3c:05:15:7a:8f:98:b5:65:cb:34:f4:1b:
f8:76:ef:6c:3c:27:1a:e2:6f:e7:24:c4:b4:8f:06:
57:48:b7:28:1a:ac:db:99:86:da:01:79:d6:3f:85:
61:87:ec:ee:b1:fb:28:b4:5c:f7:40:5f:68:6d:8b:
f2:85:60:05:28:a9:10:0a:80:37:be:32:d3:bc:73:
4e:a3:5f:86:ba:f4:e5:16:54:95:92:e1:47:63:b9:
9d:86:42:78:25:68:c7:08:76:8e:f9:c0:fc:75:81:
a4:7f:01:e1:b1:a8:03:b1:10:0a:4c:61:e5:69:0f:
ce:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:13:45:45:E4:5B:A6:58:4B:8E:42:40:A0:7B:3B:7D:90:A6:C2:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/68c8938b-8a4f-3d3c-b66e-b6f3c395b406.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
X509v3 Authority Key Identifier:
keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.24.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d8:04:70:80:1a:37:c8:63:00:6d:a3:6a:54:01:50:d3:ca:9a:
86:59:69:3d:ce:d0:96:7b:d8:98:90:86:59:4c:28:21:3a:4c:
fa:8d:ad:a5:8e:92:9b:ed:c1:d1:12:60:15:42:0c:02:d3:b3:
b2:4a:5a:5b:3c:64:e8:9e:d8:6a:25:c9:7e:17:6a:d7:ab:be:
01:9b:bd:64:5f:0e:65:3f:b8:79:dc:3c:4f:2d:d7:7b:dd:0d:
b0:39:2c:a1:a9:19:64:ea:0b:af:54:60:94:23:a5:dd:97:ae:
0f:b8:dc:20:6d:b0:75:3a:9b:6e:82:02:96:35:c6:da:e0:03:
83:da:af:7a:b8:0c:51:32:4f:72:d1:72:83:e2:f4:20:71:75:
49:fa:e1:ce:8e:a4:e2:f2:54:14:10:58:bd:55:c8:fd:e9:95:
57:c1:cd:f2:eb:21:97:d5:59:0e:ed:fa:b6:60:ba:bf:8f:25:
7f:ac:3f:b7:97:c8:32:65:5b:a3:6b:ea:17:cf:df:9e:37:48:
36:20:53:c3:ce:ff:db:b6:1f:39:de:8e:8d:5d:4e:aa:33:79:
ef:fa:ff:aa:c3:de:a6:b5:d2:26:8f:40:8c:52:f6:9d:87:9a:
a6:00:4e:cb:f8:2d:80:46:99:dd:4d:ad:29:8f:d4:df:b9:21:
6a:a9:00:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:40:57 2025 by rpki-client