Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/7ed79959-9461-30e2-9940-e1c17e8114f2.roa
File: 7ed79959-9461-30e2-9940-e1c17e8114f2.roa (raw, json)
Hash identifier: Cr6ZJb8vmkF5isDWo/IB13C1Tx+S3CUZXPeVV59rjo4=
Subject key identifier: 74:06:12:1A:CD:EA:D6:8C:17:89:B9:74:B5:44:9E:D4:14:F7:85:FB
Certificate issuer: /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial: 010D0C9F43285848C581843EDE68B159409E3528
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/7ed79959-9461-30e2-9940-e1c17e8114f2.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 36492
IP address blocks: 136.22.28.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:84:3e:de:68:b1:59:40:9e:35:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=fd0ed70c-0eaa-4133-8ea9-6111f31f9099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:70:94:ee:dc:1a:02:a9:b2:26:ea:74:cd:78:
03:12:21:74:27:d8:c3:4d:56:f0:64:44:c5:ae:04:
94:51:e7:72:a5:dc:13:07:fd:50:fa:e3:da:bc:49:
c2:8d:a7:88:db:a6:31:19:0c:40:a7:df:13:01:8e:
5e:fb:0e:03:94:0d:5f:c2:1e:b4:0c:9a:56:3d:e2:
17:b7:67:49:b3:12:de:f3:1d:88:93:d2:cd:46:0a:
7e:eb:c8:7b:1f:31:53:9c:64:05:95:40:cf:fc:25:
81:ef:a3:bf:0a:14:e7:01:a4:45:87:de:39:64:3b:
41:41:30:15:1d:50:ba:31:bc:52:ba:fb:71:8e:83:
b0:bf:4a:ea:95:13:fc:be:73:7d:74:d0:4b:34:b3:
82:6f:4f:13:ad:f4:1e:ae:ba:7d:57:5a:a9:55:a4:
3f:ca:c0:7d:a7:ab:0e:5c:38:12:a7:13:d0:34:54:
59:84:43:90:e3:48:06:64:8d:5c:44:16:d3:94:07:
6a:7a:b5:58:92:f3:4d:d3:71:7e:04:5b:5d:88:ad:
6d:4f:d4:2a:39:d3:e3:e7:f5:ad:65:7b:34:c5:2a:
87:d3:e6:54:76:0d:45:a6:60:b5:d9:64:c4:bb:e4:
54:52:9e:4a:a7:d7:2b:e4:0e:14:d1:94:38:82:81:
c1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:06:12:1A:CD:EA:D6:8C:17:89:B9:74:B5:44:9E:D4:14:F7:85:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/7ed79959-9461-30e2-9940-e1c17e8114f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
X509v3 Authority Key Identifier:
keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.28.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:96:e6:2e:25:84:7a:2c:57:6e:b7:02:57:e6:68:fd:82:c1:
27:09:2d:04:ba:87:b3:4b:05:1f:ca:a0:6c:da:17:6f:52:fe:
a1:04:b7:37:69:ea:45:dc:ba:79:33:79:5b:4f:4a:61:4e:ec:
b7:10:5b:83:2e:5b:72:6e:fa:28:52:8d:ef:4c:f4:89:f3:25:
d4:13:ad:38:94:b4:e3:cd:57:ad:8e:c7:df:3b:e1:8d:d1:74:
0e:b6:5b:20:29:bd:19:94:1b:93:90:39:d6:a3:04:a4:3c:2d:
cc:2d:35:70:cf:73:98:78:84:af:0b:0a:de:1a:3e:e2:4b:a1:
03:a4:17:66:fc:fe:b6:e4:ec:65:a6:f4:b8:b6:4e:8c:be:6a:
8f:74:81:af:51:24:a7:37:99:24:07:44:4f:f2:f1:93:88:48:
38:81:57:99:c9:c1:f3:d9:bd:87:39:79:fe:12:52:0f:f9:cb:
56:9c:a7:28:0c:8a:d8:64:2a:0b:15:5c:11:ff:07:1e:35:ab:
3d:cb:f1:32:f4:06:3c:cf:cc:cd:24:0c:07:4c:15:3d:90:df:
e1:f4:4c:dc:a0:2c:91:e0:9f:84:02:e1:ad:3f:59:94:1a:de:
d8:2d:f7:bb:46:de:57:e2:ee:21:d6:f4:76:5a:f6:e5:73:de:
21:2c:94:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:18:16 2025 by rpki-client