Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/c853aaef-ddeb-3167-94bf-02b2d2d663a5.roa
File: c853aaef-ddeb-3167-94bf-02b2d2d663a5.roa (raw, json)
Hash identifier: mKDFlvGcJadiz+moEk4c3I4SU47lCchlIdat7RNEHR8=
Subject key identifier: 62:7B:0A:69:1B:BF:D1:6C:58:B6:1F:3D:2E:7D:08:98:F1:BF:FB:D5
Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial: 010D0C9F432858488DAB49B6F708988722FF6140
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/c853aaef-ddeb-3167-94bf-02b2d2d663a5.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 137922
IP address blocks: 136.228.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:49:b6:f7:08:98:87:22:ff:61:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=91a30b7a-f4c5-4ef5-b1b9-fbcd9725247a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:2f:6b:8e:b4:bf:08:6d:93:8d:63:c2:1f:05:
d9:12:f7:a2:5c:56:fd:86:aa:5c:e7:84:7f:81:7f:
e6:11:ed:01:62:7f:71:44:fc:2e:f2:4a:09:64:54:
f7:5d:dc:d8:3f:19:8d:7e:18:7a:94:a7:ae:33:9d:
5e:83:b4:cd:26:b3:54:3b:8f:88:f4:b1:e8:e2:23:
4c:6c:40:8e:fd:7e:59:9a:7a:14:e0:52:13:94:32:
26:82:94:f8:db:58:70:3c:db:00:a0:26:e3:02:02:
94:c3:b6:12:46:31:24:2d:ab:10:a0:8c:bc:3f:66:
cf:86:60:2d:da:df:0f:0a:a4:9f:39:f1:06:54:2a:
0e:41:48:4a:de:99:87:c1:e9:16:f6:3d:8a:d0:17:
91:b5:bf:a5:64:f4:c7:60:b1:0b:36:1a:3d:af:44:
e0:15:cf:46:1c:23:53:2a:81:c5:a9:a1:f7:17:33:
9a:ac:b3:cb:aa:f4:c4:58:41:b4:e5:7a:3e:c0:39:
54:21:c5:a3:b9:e5:47:d4:51:9f:76:77:da:19:43:
ea:f9:21:fb:df:93:31:b3:8f:d3:97:b4:1a:85:b3:
ea:7c:57:dd:53:09:df:6d:e9:ae:ab:08:e5:75:2d:
ee:dc:10:e2:2c:9b:63:62:27:26:2c:61:e3:83:9b:
df:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:7B:0A:69:1B:BF:D1:6C:58:B6:1F:3D:2E:7D:08:98:F1:BF:FB:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/c853aaef-ddeb-3167-94bf-02b2d2d663a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
X509v3 Authority Key Identifier:
keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
sbgp-ipAddrBlock: critical
IPv4:
136.228.218.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:62:42:30:7e:61:81:13:13:9d:3c:4c:76:57:4f:8d:3b:fd:
29:25:49:b5:1f:9c:af:5b:a6:9a:57:0c:13:4b:87:cc:f4:93:
95:11:e6:a8:e8:eb:a8:d7:ed:a1:ec:f8:55:13:d0:5b:20:17:
70:5d:92:96:22:4c:6a:76:09:49:94:7c:5b:1f:96:a8:ee:ce:
f0:86:bf:f9:8f:fa:42:db:5f:bb:04:50:a2:89:b3:5d:01:9f:
fb:d6:c3:5f:5a:ad:9d:db:27:00:7d:e1:b3:dc:97:95:57:e6:
70:f3:3d:71:ef:bd:e1:31:38:84:e8:f8:ec:6c:5b:e8:d9:39:
0c:dc:67:79:94:d4:59:af:f9:ee:1e:35:f2:8d:5b:60:d9:37:
dc:68:d8:cd:d8:ec:c1:a5:7e:57:d5:56:f4:66:ae:a0:04:93:
87:0b:9e:91:8f:27:83:55:02:64:08:ed:1c:d4:d1:ed:a8:56:
3d:fe:89:f2:c4:c2:ed:b2:76:7d:eb:b7:64:08:75:cb:07:2d:
ee:86:bb:01:ac:97:25:32:db:cc:0c:15:1e:44:b6:49:d7:d6:
ca:11:ea:6e:e5:25:9e:b3:09:e0:37:74:2c:4f:1f:08:05:e2:
dd:06:db:78:a6:5e:82:44:e5:a6:66:32:77:e7:62:ad:75:eb:
b8:89:29:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:15:10 2025 by rpki-client