Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/85351780-5ad9-39ef-8588-013e2d6f1fcf.roa
File: 85351780-5ad9-39ef-8588-013e2d6f1fcf.roa (raw, json)
Hash identifier: PQMmkbmf/jSXM9ulZXtPUnjw+V7TCQc/2QAKTeaui4E=
Subject key identifier: 75:E2:FB:F1:D1:06:55:21:AB:10:C2:09:B1:92:D4:AF:D6:7A:A4:44
Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial: 010D0C9F432858487FB5DFDF594D4C7D54DFAE80
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/85351780-5ad9-39ef-8588-013e2d6f1fcf.roa
Signing time: Fri 10 Jan 2025 14:00:51 +0000
ROA not before: Fri 10 Jan 2025 14:00:51 +0000
ROA not after: Thu 10 Apr 2025 13:00:51 +0000
asID: 396253
IP address blocks: 136.228.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7f:b5:df:df:59:4d:4c:7d:54:df:ae:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Validity
Not Before: Jan 10 14:00:51 2025 GMT
Not After : Apr 10 13:00:51 2025 GMT
Subject: CN=abe016be-b5c6-4fe6-8683-d58e3eea26e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:81:f8:5e:a9:33:55:8c:54:73:53:38:1a:e5:
81:21:80:75:d9:13:bf:03:28:1e:6c:21:df:ee:93:
8c:cf:7c:6d:fd:b9:8a:55:19:8b:30:24:ef:28:73:
2b:70:2a:4d:e1:1d:7f:5b:df:ec:72:29:1d:8f:e6:
ea:56:08:1f:eb:47:1d:99:6d:6f:b4:01:eb:02:d9:
84:b5:ff:f7:09:42:77:75:be:1b:dc:fe:58:14:17:
04:2a:60:19:7f:58:2b:ee:d9:75:79:ba:e6:3b:d2:
f4:af:48:f1:32:37:9d:df:7a:a3:b4:18:58:7f:8c:
3c:e9:eb:08:04:e2:17:2f:d8:81:be:92:2b:0e:de:
b2:2c:e6:b3:d3:f2:f4:8a:b5:29:e3:30:f8:50:44:
cb:19:c7:a6:36:2c:32:e0:a8:1b:1a:58:7e:b7:c6:
da:d9:b1:4e:9c:11:9c:9a:f2:56:11:d9:37:1c:ea:
8b:4d:91:91:ba:76:99:c9:01:31:75:c2:e7:38:3a:
41:f8:40:02:69:6f:32:c3:b7:f1:22:65:88:f9:65:
6b:2f:d6:d5:77:c7:ce:94:45:79:e0:13:c4:77:8f:
8d:60:19:f6:53:ac:11:51:59:33:ec:56:8d:02:65:
cb:0f:1e:39:ab:c1:70:66:89:55:34:51:6a:3b:c0:
4c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E2:FB:F1:D1:06:55:21:AB:10:C2:09:B1:92:D4:AF:D6:7A:A4:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/85351780-5ad9-39ef-8588-013e2d6f1fcf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
X509v3 Authority Key Identifier:
keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
sbgp-ipAddrBlock: critical
IPv4:
136.228.227.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:9f:24:a6:0d:42:16:a2:c6:51:1b:59:6b:33:c7:17:5f:0e:
19:cb:bf:f7:b5:a5:f9:c4:43:7e:40:d5:c0:30:63:16:66:89:
55:fa:1b:ef:53:c3:32:d7:dd:c8:11:65:6a:eb:78:5d:ca:89:
de:5a:00:14:47:c5:96:bf:0b:e6:dc:72:7b:50:68:2d:f7:d4:
12:47:70:d1:43:e7:bc:fc:29:e2:63:47:4a:b4:2e:79:8e:2c:
d6:98:8b:a1:42:ff:11:46:01:56:a2:0d:21:4d:b9:4b:94:bb:
e0:ec:ca:a7:37:90:71:1f:36:0d:99:a1:e3:85:ea:d5:93:01:
a8:e1:b5:1d:c6:a2:67:d1:9f:04:6f:7c:34:5d:d3:f9:e3:d4:
65:0e:12:63:65:4f:98:b3:c6:df:86:d9:d4:e4:5c:f4:dc:bf:
e2:ec:a2:79:21:5c:9a:13:66:f6:43:fc:80:f8:47:f1:fa:eb:
eb:f5:eb:52:a9:07:13:85:64:42:b0:90:68:57:d4:3b:fa:d8:
71:11:75:b1:8c:55:c8:16:b9:67:9c:a8:c1:46:40:e2:66:63:
a9:2c:b7:7b:ae:ad:71:04:15:18:37:94:87:d7:58:65:cb:63:
09:62:c9:ec:81:82:6c:5b:97:88:c3:00:d6:da:52:04:fd:d4:
35:a5:82:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 12:31:22 2025 by rpki-client