Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/c41680db-0e4a-354a-abc3-5ac849f71877.roa
File: c41680db-0e4a-354a-abc3-5ac849f71877.roa (raw, json)
Hash identifier: UCqVWcAM3uZUPE3Mrnyi5NGNCrRac6D/AlyvZawC9u0=
Subject key identifier: B5:D5:56:19:C5:55:FF:8D:61:32:9C:3B:46:B8:72:83:5F:5D:F9:78
Certificate issuer: /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial: 010D0C9F43285848C58201A253102694300C0840
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/c41680db-0e4a-354a-abc3-5ac849f71877.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 36492
IP address blocks: 136.23.32.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:82:01:a2:53:10:26:94:30:0c:08:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=f6781666-dc5d-4b76-ba40-26aae721cc0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:cd:fe:d7:19:c1:3b:74:1f:a3:5a:c8:f7:e1:
42:02:2d:66:1c:87:f9:33:05:48:b9:c3:25:09:f1:
05:93:3b:52:6c:b4:f0:54:19:fc:a1:30:7f:fd:56:
d2:e2:e9:0b:1c:e1:1a:75:f3:1e:98:6f:91:29:d3:
6f:36:b0:f6:e4:17:a3:c8:1f:dd:1d:9c:72:6f:fd:
c6:79:86:50:51:ab:04:75:24:81:04:6a:8f:79:f8:
2d:c1:0d:82:51:09:e5:4f:3d:ee:9d:88:04:e9:e9:
5f:3c:f7:f2:8e:0c:51:61:9d:dd:78:55:c2:c2:64:
37:fe:79:b9:fb:1c:b7:a5:8d:be:65:9e:52:1e:48:
65:ac:ca:a9:9d:95:8d:33:77:56:16:4a:8f:0a:56:
fc:fe:05:24:83:4e:a7:f6:80:1a:52:e0:83:f6:e0:
3a:da:39:06:69:5f:8b:53:41:cf:02:e2:b0:7b:d5:
bc:95:27:58:19:04:31:a7:fd:9f:bd:3e:5c:06:44:
fa:68:8b:20:a5:fe:e9:32:11:1f:62:98:f6:a8:f1:
c2:98:00:fb:b1:d7:83:a4:9d:57:6a:63:5a:f1:7b:
a8:6f:d9:af:f9:77:c8:e7:5f:7b:33:a1:46:a8:a4:
ae:70:34:32:9a:1f:bd:24:6b:83:53:79:b1:56:fe:
09:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D5:56:19:C5:55:FF:8D:61:32:9C:3B:46:B8:72:83:5F:5D:F9:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/c41680db-0e4a-354a-abc3-5ac849f71877.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
X509v3 Authority Key Identifier:
keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
sbgp-ipAddrBlock: critical
IPv4:
136.23.32.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:8f:a9:50:65:f2:03:b8:75:93:42:23:fe:31:26:90:9b:83:
cd:94:fb:48:4e:38:3e:11:a1:0d:3a:02:be:e6:84:4e:30:5c:
4b:85:3c:99:81:a9:18:7e:08:26:7c:92:3b:0d:07:6e:41:32:
d2:a4:aa:6b:da:11:65:06:b4:8b:05:ea:db:6f:02:9d:78:c7:
91:2d:36:22:64:93:97:39:b5:0d:2f:95:ac:a5:0b:87:a0:de:
1a:03:19:7d:2c:18:7b:31:70:dc:c3:e2:a7:f7:91:3c:4c:ca:
19:eb:51:48:5f:04:18:5a:26:1b:a6:01:c0:ab:99:5e:49:e0:
0c:f6:ef:6d:ae:66:c1:0a:1a:6f:ad:6a:52:6b:3c:82:36:44:
a5:08:05:b0:55:0d:98:fa:42:44:5f:5b:8e:2f:f4:23:5e:0d:
78:6d:05:07:dd:26:8a:cb:84:a4:60:bc:de:d0:97:93:5d:cb:
f5:bd:91:a4:d8:db:79:ed:7a:72:f7:57:2c:04:d5:77:0d:94:
9b:5c:2e:d2:06:5c:77:f8:11:7d:d6:d8:21:62:cb:ee:85:13:
25:d8:e5:92:01:be:f4:64:6b:ac:d8:52:70:af:94:35:91:75:
40:79:70:7c:4d:3f:45:cb:5b:1c:20:c1:ea:6f:46:21:38:32:
18:68:f6:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:44:51 2025 by rpki-client