Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/7bf082f3-7712-3b6f-9529-66baede8d766.roa
File: 7bf082f3-7712-3b6f-9529-66baede8d766.roa (raw, json)
Hash identifier: 9QTXhWKjteqOgKX7N2RuA13BeLqRq2zmG6dpwP8kfig=
Subject key identifier: 9A:8E:AE:BC:1D:F5:1D:CB:31:A7:5E:D2:BF:BC:3C:4F:39:C7:DF:E9
Certificate issuer: /CN=4d8011fa-f1ae-46c6-9441-2f486e04a6de
Certificate serial: 010D0C9F432858487FC96F98CC600C484E2DEF00
Authority key identifier: E7:88:6B:00:74:2E:6C:7B:B0:09:45:69:DA:C5:32:96:33:5F:B3:99
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/7bf082f3-7712-3b6f-9529-66baede8d766.roa
Signing time: Fri 10 Jan 2025 14:40:25 +0000
ROA not before: Fri 10 Jan 2025 14:40:25 +0000
ROA not after: Thu 10 Apr 2025 13:40:25 +0000
asID: 61622
IP address blocks: 136.175.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7f:c9:6f:98:cc:60:0c:48:4e:2d:ef:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d8011fa-f1ae-46c6-9441-2f486e04a6de
Validity
Not Before: Jan 10 14:40:25 2025 GMT
Not After : Apr 10 13:40:25 2025 GMT
Subject: CN=43decdae-9805-4cba-a4aa-a7cbfd456591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:1f:f0:86:60:6d:0e:88:a3:88:2b:cd:49:e8:
d5:88:87:2c:fe:09:25:e5:75:c1:47:a9:58:2f:46:
e0:e8:07:16:fa:a3:d4:ab:b2:e9:79:b1:b8:fc:81:
cc:3d:05:ee:4e:a3:7e:86:5e:ce:d5:d0:d6:7a:bc:
31:d3:a7:2b:a1:33:f4:59:12:e0:4b:0a:a2:63:76:
93:41:66:86:29:9c:88:69:00:c2:b5:64:96:39:39:
48:7b:58:27:a7:78:c1:20:49:b2:25:3f:53:7c:79:
cc:06:e3:08:d8:34:56:aa:ca:ef:63:0d:0f:8e:ec:
45:fd:5a:03:9c:de:16:57:a4:dd:ce:be:07:d5:63:
fb:e7:ab:28:0d:2d:d5:b8:86:c0:30:3f:1b:94:31:
f7:95:55:71:87:80:fc:ed:47:59:a2:1f:8a:7c:8b:
b5:21:93:c0:ec:62:8e:31:dd:91:44:bc:e1:37:e3:
0c:27:0b:38:fd:9b:83:58:04:74:66:53:20:6c:87:
7f:e6:7f:8e:ea:8e:08:6a:1e:6d:41:e4:db:61:58:
c0:9f:ad:23:95:cf:dd:10:d2:ce:49:2b:f2:54:6e:
a7:b7:70:a7:33:fd:cf:0e:f4:d7:d0:1e:a0:ab:00:
e8:83:c0:1d:69:d1:cd:f0:0b:93:b6:aa:7d:9b:83:
64:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:8E:AE:BC:1D:F5:1D:CB:31:A7:5E:D2:BF:BC:3C:4F:39:C7:DF:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/7bf082f3-7712-3b6f-9529-66baede8d766.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/4d8011fa-f1ae-46c6-9441-2f486e04a6de.crl
X509v3 Authority Key Identifier:
keyid:E7:88:6B:00:74:2E:6C:7B:B0:09:45:69:DA:C5:32:96:33:5F:B3:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de.cer
sbgp-ipAddrBlock: critical
IPv4:
136.175.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:b0:bc:ce:8b:81:50:a5:06:ca:87:94:d5:98:af:0e:21:d3:
36:6b:db:bf:fe:2a:fb:f4:fb:45:cc:e5:e3:f7:f0:a1:26:50:
d6:a6:97:63:25:77:ee:4a:df:77:04:82:4d:01:64:2b:86:32:
58:f4:92:24:91:a8:4d:64:1e:71:6c:c8:05:10:d9:46:2b:eb:
df:94:3e:47:97:62:e1:18:58:df:7e:e1:5c:57:a1:47:5c:17:
df:b8:de:7d:9a:d1:10:d9:d4:c0:f6:c4:d1:9f:fa:9c:6b:f9:
3e:90:be:74:90:7a:74:de:5f:34:8a:4e:d9:8c:e7:52:a4:e2:
ea:43:80:67:ce:90:96:a1:83:6a:c2:ab:e3:bb:f4:e5:59:f1:
bb:f3:7a:84:ab:10:97:34:a0:b5:02:70:c0:72:28:c7:a9:81:
cb:06:b6:4f:fd:48:7e:05:46:e1:72:4d:b5:99:10:05:f0:90:
13:45:a0:9f:3e:2f:5b:08:dc:97:04:6c:5d:fe:dd:1e:eb:4e:
a4:92:26:bd:87:32:db:ca:6a:55:36:f7:fe:b3:11:f8:04:3f:
85:e5:91:17:08:b6:2d:5c:c0:77:c6:27:96:e3:44:c9:9f:fd:
b5:c8:c4:a9:d9:2a:a6:fa:d1:7d:0a:96:fe:e1:1a:cd:95:70:
29:75:7c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:25:41 2025 by rpki-client