Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/71f0c36b-c860-3997-9e5d-950a37868654.roa
File: 71f0c36b-c860-3997-9e5d-950a37868654.roa (raw, json)
Hash identifier: 1Eh6ZXahy3PDuBOGD94h2gHsvLcwWFDXRCv9n+2SpQk=
Subject key identifier: C3:02:22:A5:35:65:25:6C:FB:B7:0F:41:02:EE:A6:B8:4C:72:71:8C
Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial: 010D0C9F43285848A1360D50DD52792C6CDA4F00
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/71f0c36b-c860-3997-9e5d-950a37868654.roa
Signing time: Wed 22 Jan 2025 14:00:52 +0000
ROA not before: Wed 22 Jan 2025 14:00:52 +0000
ROA not after: Tue 22 Apr 2025 13:00:52 +0000
asID: 202276
IP address blocks: 136.228.232.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:36:0d:50:dd:52:79:2c:6c:da:4f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Validity
Not Before: Jan 22 14:00:52 2025 GMT
Not After : Apr 22 13:00:52 2025 GMT
Subject: CN=89b74056-5f00-4058-8afe-9cb790bc5a4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:8c:01:38:d8:07:eb:1a:e7:f7:c1:04:f0:15:
3a:38:47:64:cd:c3:ba:3b:96:b0:6d:fe:3a:c0:e1:
67:72:75:d5:22:e8:f4:e4:b5:e8:54:4a:d5:f4:06:
9f:90:fc:8e:9a:bc:ae:4d:5d:73:b2:6b:d6:a5:92:
07:66:35:c6:66:92:38:f6:d7:82:3b:f1:4d:4c:40:
b9:d1:ad:a7:5a:22:46:5b:ab:8f:94:ae:b3:d6:ea:
27:12:61:b0:4d:14:c0:bc:bf:d4:4d:06:e9:d0:05:
bc:18:2a:68:ca:78:97:6b:f1:90:0d:1b:42:15:20:
74:c6:e0:e6:38:2d:26:86:c0:c0:32:a6:48:ba:9d:
d8:cb:ab:cc:6d:32:44:17:ea:a5:43:dd:a1:81:3a:
7b:52:6e:96:f5:3f:0d:3a:e0:6b:2f:75:c8:f9:07:
a7:5d:a2:33:51:9f:b0:81:fd:c8:13:62:7e:1d:7b:
58:38:11:4e:5b:ec:73:e6:44:9d:73:20:a9:9e:ac:
ea:55:9e:5d:0f:6e:ce:0f:ee:03:e6:f0:0c:ee:21:
87:bf:f2:62:8c:32:28:9a:78:c2:b1:47:a9:24:d2:
14:d2:e2:49:d4:89:3b:33:21:9d:cd:94:44:10:07:
4e:d1:b5:af:33:41:d2:3d:02:dd:f2:d1:e9:a2:43:
0d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:02:22:A5:35:65:25:6C:FB:B7:0F:41:02:EE:A6:B8:4C:72:71:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/71f0c36b-c860-3997-9e5d-950a37868654.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
X509v3 Authority Key Identifier:
keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
sbgp-ipAddrBlock: critical
IPv4:
136.228.232.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:51:03:cc:1b:22:07:e5:86:19:08:b1:78:08:6c:3a:2c:6a:
2e:a7:37:97:b4:c4:71:f4:9b:7e:67:9e:37:c7:41:92:c6:8c:
78:f0:c1:b8:8e:78:d6:e3:3c:03:fa:e1:10:19:e0:4b:9b:63:
47:5f:e1:61:90:dd:4f:a0:bd:cb:7a:9f:40:71:41:27:40:fc:
17:df:52:a4:ad:05:98:2a:cc:c7:c7:70:70:d5:b8:75:f8:3f:
22:4b:0e:24:74:3c:0f:60:b3:23:9a:53:02:f4:a0:06:67:9f:
aa:83:7d:03:35:2b:19:5f:2a:59:fb:82:c9:40:b6:90:53:e8:
22:11:4e:89:e9:16:6b:b2:b1:9a:3c:8b:1a:71:d9:b6:3e:ea:
a9:2b:92:fa:bc:7c:1d:28:46:59:e2:73:28:ca:54:5d:c1:bd:
e4:91:44:dc:d2:86:e5:00:0b:c9:52:2b:fa:d3:88:83:4c:6a:
92:3f:6a:c1:2c:6d:a7:3b:a4:37:ef:bf:b6:81:f1:e7:1f:ec:
0b:6a:5b:c8:85:fc:d1:43:ab:32:63:f5:c5:bc:4d:04:37:30:
3f:ed:59:60:32:46:86:71:49:f8:8b:d5:6a:90:f2:4f:4d:1d:
66:26:ed:2f:b4:e4:cb:07:dd:b2:e9:ac:de:bc:35:05:e3:46:
39:d3:d7:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 04:18:25 2025 by rpki-client