Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bfed80fa-8777-330f-b7dd-b19ee4c84af5.roa
File: bfed80fa-8777-330f-b7dd-b19ee4c84af5.roa (raw, json)
Hash identifier: /IkxH1GMJZs7rYoIqR6mYDIlz7ybOX5oh0KyJLL2dv8=
Subject key identifier: F4:3A:D5:81:9E:C1:DA:CF:29:50:25:1C:ED:38:89:76:FD:78:EF:9E
Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial: 010D0C9F432858494F93F259731D66197CEC5E00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bfed80fa-8777-330f-b7dd-b19ee4c84af5.roa
Signing time: Wed 26 Mar 2025 01:00:40 +0000
ROA not before: Wed 26 Mar 2025 01:00:40 +0000
ROA not after: Tue 24 Jun 2025 01:00:40 +0000
asID: 8881
IP address blocks: 136.0.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4f:93:f2:59:73:1d:66:19:7c:ec:5e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
Validity
Not Before: Mar 26 01:00:40 2025 GMT
Not After : Jun 24 01:00:40 2025 GMT
Subject: CN=a0db8a67-f41a-4f1f-8575-22b26509a14d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:dc:ad:62:42:e7:82:4e:fa:e8:34:dc:60:95:
13:09:a6:9e:42:e8:2f:89:3e:e7:e2:1f:bd:cb:03:
6a:71:ba:b1:75:3c:52:a0:39:55:f4:30:a3:16:7c:
0b:9f:c7:06:99:3d:a7:a7:68:c5:d8:6b:5e:4f:d4:
0a:e6:91:1c:f5:7c:b6:af:ea:f0:4c:e9:6d:10:f6:
ac:fd:df:c3:83:36:36:b9:6c:ea:b2:0b:40:c3:13:
ab:bd:a4:db:a6:df:1a:8a:68:43:6b:fb:42:f3:2b:
1e:b0:55:4d:cc:36:5b:43:c1:9c:3c:a1:70:7d:f3:
8d:08:b9:4e:d1:c1:7a:e9:e4:3d:a5:5c:20:5d:6d:
3d:54:29:4c:11:9b:70:13:67:fe:aa:51:74:54:04:
d3:7f:4d:81:ef:be:5e:c6:20:53:1d:91:51:49:a4:
f4:26:a3:8b:d6:b9:8b:06:b2:24:45:e4:7c:95:5d:
50:19:95:2f:15:f6:eb:0e:0d:92:bb:0c:e0:d4:16:
c5:b5:38:31:36:64:02:8f:0c:2d:96:98:c9:7f:5b:
83:6c:08:4b:83:6a:d8:93:24:e4:00:e2:5d:5d:68:
58:86:91:56:a7:b1:bf:f3:1e:ee:2a:23:af:e1:0d:
d5:41:6e:f7:29:06:62:34:aa:a5:1b:80:7d:38:58:
f5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:3A:D5:81:9E:C1:DA:CF:29:50:25:1C:ED:38:89:76:FD:78:EF:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bfed80fa-8777-330f-b7dd-b19ee4c84af5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
X509v3 Authority Key Identifier:
keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
sbgp-ipAddrBlock: critical
IPv4:
136.0.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:15:ad:cd:d1:d0:20:7f:40:86:12:31:b5:a1:5e:76:31:22:
f6:20:21:72:45:96:13:77:be:73:f3:c7:b8:e8:44:e5:a7:85:
56:07:54:0e:d2:3b:ea:a2:96:c5:95:a1:db:9c:cd:ab:fa:80:
64:59:40:42:02:38:4c:46:a8:b7:0b:52:a8:8f:99:2b:a7:60:
b6:09:5e:9e:94:67:80:57:6d:02:33:44:01:ff:4b:8e:55:e5:
0e:a0:c0:b1:83:3a:74:18:1d:d7:a9:c5:19:0a:9a:5b:24:50:
ee:64:cc:76:56:6f:5b:86:a4:5c:0b:14:bf:19:47:07:1e:1e:
d3:f1:23:3d:81:03:b8:fc:72:52:b2:ca:93:05:06:9f:a0:a7:
01:7e:11:0a:5b:fc:fa:a5:bb:01:14:29:d2:de:ba:b0:6c:0a:
08:e2:0e:98:07:b6:a3:b1:29:a6:28:17:23:88:de:36:94:9c:
e1:6b:c9:c3:ec:b3:a3:ea:53:6a:ae:72:00:1a:d3:a4:1d:d4:
f5:65:35:b2:8e:9d:b8:93:37:38:fe:78:cc:42:86:41:eb:df:
13:ab:37:ad:88:3c:9e:ae:d5:ce:bf:8d:ae:38:b7:f2:22:a1:
34:01:f4:d1:fb:b7:8e:a4:09:87:e6:d8:a5:44:1c:1a:7c:bd:
c8:67:26:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:04:43 2025 by rpki-client