Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/0ae15d49-e513-3745-b3f9-66ebc64a2b4e.roa
File: 0ae15d49-e513-3745-b3f9-66ebc64a2b4e.roa (raw, json)
Hash identifier: KOJMAR2xGxWStE9NSrjKtgqlMHNHB1LefqmGZRGnBPU=
Subject key identifier: 26:9E:CE:3F:B6:D4:68:FD:11:C2:16:71:01:CE:75:FC:89:25:30:70
Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial: 010D0C9F432858494E2EAF368810A9C170434040
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/0ae15d49-e513-3745-b3f9-66ebc64a2b4e.roa
Signing time: Tue 25 Mar 2025 13:00:51 +0000
ROA not before: Tue 25 Mar 2025 13:00:51 +0000
ROA not after: Mon 23 Jun 2025 13:00:51 +0000
asID: 202276
IP address blocks: 136.228.221.0/24 maxlen: 24
136.228.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4e:2e:af:36:88:10:a9:c1:70:43:40:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Validity
Not Before: Mar 25 13:00:51 2025 GMT
Not After : Jun 23 13:00:51 2025 GMT
Subject: CN=757adba6-0950-4757-9775-09f5d2f4cdd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1f:7f:56:67:65:1c:71:19:78:91:5a:cd:21:
18:84:c9:6b:5e:bf:1f:d1:1c:21:f0:96:a2:77:1a:
ac:1c:96:a3:7b:3c:d3:aa:ba:f7:08:eb:67:fd:e1:
07:2b:53:7b:88:5a:fb:9a:2a:6f:a1:e4:22:c3:1d:
f8:a5:61:f3:8c:14:3b:e8:14:5b:05:e4:6a:1f:f5:
67:25:b8:ad:9c:15:bd:3d:cb:16:f6:68:08:82:d0:
8b:5e:0f:22:da:29:54:dd:a7:e0:80:2b:c7:ed:b7:
a8:76:4a:1a:65:a2:6e:17:3e:2f:b4:e9:17:a0:0f:
13:9c:c0:87:93:d4:58:80:da:cd:6a:da:1f:54:93:
f0:6d:7b:99:2b:18:19:42:60:c4:ec:a8:9b:e0:d9:
00:68:07:19:0c:ae:38:cb:af:e2:ed:43:ee:3f:1c:
30:86:f9:0b:3f:60:bc:49:bd:b7:0a:54:fc:3e:2c:
48:81:1d:49:c8:e6:1f:89:ab:b4:e2:8e:3d:2f:f4:
3c:5c:72:47:be:0f:82:34:26:e6:35:40:43:81:ae:
38:f0:21:27:2e:8b:77:0b:cd:37:b3:7c:34:8c:d6:
32:16:3e:b5:20:fb:c1:c7:57:ca:3f:7d:0d:f7:fd:
0f:a1:1b:3c:9a:bb:f7:a8:e8:0f:cf:64:53:5c:05:
58:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:9E:CE:3F:B6:D4:68:FD:11:C2:16:71:01:CE:75:FC:89:25:30:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/0ae15d49-e513-3745-b3f9-66ebc64a2b4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
X509v3 Authority Key Identifier:
keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
sbgp-ipAddrBlock: critical
IPv4:
136.228.221.0/24
136.228.240.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:bc:59:0e:ec:83:c4:7e:93:1f:c3:08:17:16:51:d6:1f:92:
9a:59:7b:fb:a5:af:f3:c0:20:0e:c7:0f:43:2f:f9:9f:10:e5:
31:5e:54:54:b0:a8:02:ba:9e:e7:25:5b:a3:fb:87:3e:ab:ab:
27:ba:af:37:59:6c:25:f9:58:98:39:e5:73:b1:15:79:f2:98:
06:df:ec:56:33:7f:1f:d8:5f:53:7c:7b:50:fa:39:c5:d5:35:
e4:e6:6b:44:be:4f:aa:09:3e:6a:a1:45:41:2c:ce:cc:7b:92:
4f:13:2f:b2:9f:97:52:e3:4e:28:4e:33:83:71:03:93:89:bc:
16:18:25:e9:c3:bb:26:b5:12:68:19:d8:c7:09:75:d7:29:19:
12:af:c4:b9:4f:da:25:aa:9e:e5:ed:eb:ec:f9:b1:61:31:96:
49:d2:e5:d1:c5:ba:3f:ce:e5:af:fe:c4:fa:43:15:fc:fb:21:
af:01:47:47:32:da:51:0a:4a:be:68:20:14:c8:86:fd:de:e1:
c2:2f:37:31:44:81:68:51:98:c9:db:aa:40:26:a6:47:de:6b:
90:e3:09:f7:88:1c:ab:51:cd:59:6c:1c:fc:5c:6b:0f:4b:fa:
10:fb:bc:07:18:3f:8f:dd:3f:a9:c3:9c:74:31:e8:92:37:b3:
08:ad:e2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:21:03 2025 by rpki-client