Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/c77af4a1-14ca-3694-a806-8a55774c77e6.roa
File: c77af4a1-14ca-3694-a806-8a55774c77e6.roa (raw, json)
Hash identifier: H8kLJ2x2RFyqp5HdeBNdI8xH+X6bvROZlfa+dyJcATo=
Subject key identifier: DF:3E:2B:A3:00:DA:F2:4D:07:C6:C9:19:30:96:E8:E0:46:0A:13:A8
Certificate issuer: /CN=3976c091-1138-4917-9649-5575618ab7ea
Certificate serial: 010D0C9F432858487A2077B26FD702AA893B2C20
Authority key identifier: 4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/c77af4a1-14ca-3694-a806-8a55774c77e6.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 5089
IP address blocks: 134.202.36.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:77:b2:6f:d7:02:aa:89:3b:2c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3976c091-1138-4917-9649-5575618ab7ea
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=4964faf1-ae9f-432b-8b04-f357b3caac09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:61:91:4a:2c:1e:a3:47:94:0c:e1:8b:82:dc:
75:a1:fa:29:59:2f:fd:a1:57:9a:89:8a:67:85:e6:
4b:52:90:da:bc:23:a9:1c:d7:38:52:5b:ab:cf:ff:
82:da:08:c8:c6:3e:70:37:09:08:cd:6f:8f:e9:36:
c3:99:88:52:8f:66:85:10:81:e8:e1:e0:81:f9:c3:
a6:fc:79:94:c5:1b:42:9c:70:5f:0e:e7:a7:84:a7:
ab:9c:4a:e5:18:c3:a6:43:3a:9e:0f:4f:ce:d7:f6:
7c:2d:b1:34:56:9f:04:46:ee:27:54:61:88:ee:62:
60:7b:26:84:b3:ed:8a:13:d8:68:5c:ba:ff:f8:e3:
4c:fa:5b:7f:e6:75:eb:99:92:ad:89:b9:15:25:a6:
b4:e2:8d:64:07:b7:03:25:15:54:d2:5c:d3:6d:10:
c4:2f:53:4f:a0:39:20:c4:d5:71:06:a7:6f:ce:4d:
88:19:01:8d:ef:db:1c:38:61:be:9a:2b:5d:40:b7:
69:12:99:f6:64:8a:06:65:b7:a5:88:50:eb:ac:dc:
6d:bf:53:76:68:50:55:49:e7:b2:eb:55:61:31:30:
4e:6d:60:cb:f5:95:17:4c:c7:da:9a:83:9e:2a:11:
62:f7:81:17:a6:b7:dc:65:56:85:3d:b6:7b:72:66:
e5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:3E:2B:A3:00:DA:F2:4D:07:C6:C9:19:30:96:E8:E0:46:0A:13:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/c77af4a1-14ca-3694-a806-8a55774c77e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl
X509v3 Authority Key Identifier:
keyid:4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
sbgp-ipAddrBlock: critical
IPv4:
134.202.36.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:7f:44:ad:ab:aa:70:28:69:a0:6e:90:71:6c:0c:ff:58:ad:
af:3e:2b:9f:db:29:bf:32:cf:86:83:7e:1a:30:02:c4:4f:d3:
87:c4:d9:85:a0:5f:f2:1b:60:1c:51:74:8d:1c:88:f7:2c:ca:
4d:a7:05:6a:90:94:c6:b8:db:e9:7f:6f:48:4d:58:0d:38:ab:
11:b0:fc:53:ab:15:64:31:ce:99:d3:66:7b:48:af:e9:6d:e1:
cc:53:7d:2d:66:f1:04:70:a1:0f:07:28:89:f5:6d:0e:09:09:
c7:b4:89:6b:5d:e0:63:b1:c6:73:de:0c:5a:2f:f1:94:8f:68:
7c:57:ea:ba:5d:4d:87:4e:0b:6b:e8:a0:89:13:26:1d:7d:ee:
52:6a:8d:b5:d7:38:4f:a1:70:72:74:be:e1:df:c8:3e:ac:15:
32:dc:59:ea:ab:ff:4e:0f:27:f1:b2:00:74:f1:d0:7b:e2:17:
59:85:15:a1:21:30:fb:e3:a6:aa:6d:e7:f2:ce:01:28:e5:d8:
f9:03:ee:fb:b5:c2:7f:39:20:66:06:97:c3:e1:ab:00:55:c9:
2b:1b:6f:09:02:65:1e:02:9d:d1:90:6b:06:95:7e:78:62:de:
09:5c:5c:ac:e6:69:d2:b0:f0:fa:d3:94:eb:7d:42:3c:e2:e3:
28:22:c7:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 09:55:31 2025 by rpki-client