Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472/3115dfd7-974d-3faa-a564-738077a10f40.roa
File: 3115dfd7-974d-3faa-a564-738077a10f40.roa (raw, json)
Hash identifier: sMnjJYOE0aJ4Z7iQKqJz6ioMZZ/G8sHBiBM66z5RMnQ=
Subject key identifier: FD:3F:B9:37:55:AF:6F:52:C6:46:29:A5:5C:91:78:93:84:67:83:CF
Certificate issuer: /CN=8c1fd14f-b5c3-441f-b09c-daae2ec42472
Certificate serial: 010D0C9F432858490021690849C7CB31D2A09920
Authority key identifier: D0:32:A7:BF:80:A5:6A:85:3A:38:F5:82:6B:F7:2D:DA:BD:7F:7D:65
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472/3115dfd7-974d-3faa-a564-738077a10f40.roa
Signing time: Tue 25 Feb 2025 14:00:52 +0000
ROA not before: Tue 25 Feb 2025 14:00:52 +0000
ROA not after: Mon 26 May 2025 13:00:52 +0000
asID: 16509
IP address blocks: 136.175.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:00:21:69:08:49:c7:cb:31:d2:a0:99:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c1fd14f-b5c3-441f-b09c-daae2ec42472
Validity
Not Before: Feb 25 14:00:52 2025 GMT
Not After : May 26 13:00:52 2025 GMT
Subject: CN=bd2238fd-896f-43f1-9b0f-dd2cbad7dbbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:19:51:db:11:8e:d0:60:ae:04:39:f7:c2:20:
71:ab:a8:63:39:26:b0:f4:91:7f:51:07:07:b3:a5:
62:c4:85:ee:79:0b:bd:b6:a2:31:aa:4a:2b:ea:24:
0d:56:e8:91:9b:55:ac:a6:69:9a:81:6e:30:b1:a2:
6f:92:ef:4f:cd:f8:3f:6b:76:55:2a:13:77:9c:9b:
14:53:50:02:cc:81:14:79:4f:dd:7c:dc:73:c5:dc:
a2:b3:bd:5d:e3:8b:aa:64:67:6c:b6:91:e3:81:88:
b5:22:7f:3c:5a:7b:43:93:68:36:89:80:bd:ca:86:
7f:25:92:58:43:78:02:01:8f:9c:8e:78:d5:f2:6b:
59:c9:1b:29:b6:ed:48:e6:cf:ce:93:15:05:4f:64:
eb:5a:81:27:14:60:a0:04:9a:cc:00:28:60:05:5c:
d4:4b:47:6e:bd:14:a5:0a:32:e9:5c:e9:eb:95:3d:
be:aa:9e:5a:0a:9c:ed:5b:c3:22:94:c1:94:a0:e3:
e0:21:de:91:1e:51:c5:ee:89:53:bd:01:99:f0:b1:
29:ed:c0:3f:42:91:47:96:5c:53:34:32:70:b1:fa:
a7:cc:44:43:42:a6:77:b3:7a:f8:d5:ba:e8:58:87:
dc:e1:94:d6:0e:cb:3d:f8:73:48:a4:75:03:bd:26:
33:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:3F:B9:37:55:AF:6F:52:C6:46:29:A5:5C:91:78:93:84:67:83:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472/3115dfd7-974d-3faa-a564-738077a10f40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472/8c1fd14f-b5c3-441f-b09c-daae2ec42472.crl
X509v3 Authority Key Identifier:
keyid:D0:32:A7:BF:80:A5:6A:85:3A:38:F5:82:6B:F7:2D:DA:BD:7F:7D:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472.cer
sbgp-ipAddrBlock: critical
IPv4:
136.175.243.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:41:fe:41:58:12:5a:7b:43:1b:8c:b6:9c:97:c0:ba:81:1c:
e0:d5:bd:25:a8:18:eb:d0:74:56:dd:0f:78:72:c0:5f:5c:25:
ad:b3:c4:6e:6d:76:d4:72:e2:c4:1a:00:df:c9:db:90:08:3d:
67:ad:e3:e5:ce:94:7a:0d:51:be:3a:83:7e:97:3d:06:88:86:
39:80:9a:f0:93:33:6d:83:34:70:c0:16:a7:7d:75:e9:73:40:
c2:59:60:b5:37:63:ca:25:70:e1:0e:3e:c4:dc:72:8a:94:db:
9b:0e:e9:d8:fc:05:3e:8e:62:af:f4:71:ea:c2:05:39:22:91:
a5:f3:36:51:87:52:90:1d:9d:fe:b0:e5:c6:cc:39:98:c7:77:
35:d9:b1:06:ef:a0:c8:88:ce:fa:eb:e8:f2:0a:81:0a:f1:b6:
1e:85:8d:16:fc:cf:a1:14:10:89:56:aa:5a:62:df:6c:84:dc:
86:ca:f7:80:69:53:73:a1:d3:08:41:d6:c2:50:45:32:91:d6:
da:9d:10:80:ee:77:df:be:76:5e:26:f2:19:57:4d:d6:4c:34:
3c:97:36:af:52:9d:bb:fa:10:7d:de:a5:4f:c4:d5:00:ba:59:
2e:87:d9:85:3b:b9:60:76:54:7e:f9:a5:92:35:90:31:f2:58:
5b:d3:6f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:27:49 2025 by rpki-client