Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/35407d11-6502-35d8-b8f0-6eecfea064d3.roa
File: 35407d11-6502-35d8-b8f0-6eecfea064d3.roa (raw, json)
Hash identifier: 7Qe2a8VD2oOYqMwg5P2HhIF0ESxGo3FQgat7550a210=
Subject key identifier: D5:8B:31:42:63:BE:F4:D2:98:7D:63:DD:BD:84:1E:A9:1C:79:F6:CA
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F43285848C5822DE66DC1EEF218285700
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/35407d11-6502-35d8-b8f0-6eecfea064d3.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 36492
IP address blocks: 136.22.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:82:2d:e6:6d:c1:ee:f2:18:28:57:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=ca5d09c9-0d5a-406c-a06f-a4404842f65d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:20:a6:31:09:b6:61:ab:6f:e9:0f:44:d6:53:
ad:1e:10:f9:2e:47:41:94:49:76:f9:65:d8:58:b1:
92:c6:10:34:b1:1c:77:b2:f8:b6:cc:57:84:9c:eb:
ad:12:61:18:75:11:d8:02:04:67:56:21:49:46:93:
02:1e:e8:a4:a5:3e:1c:b3:d7:ae:c7:92:ea:2f:c9:
f7:6f:2e:f2:78:f2:74:60:6a:03:0c:e9:2a:9f:88:
00:2e:2a:b0:03:09:bd:35:45:a6:5f:58:1f:90:33:
3b:97:90:e4:0c:0c:44:3d:53:05:64:1d:ea:3a:6c:
00:27:49:c2:c0:99:58:15:af:cc:ae:6c:d6:f4:f4:
bf:42:67:c4:91:7f:76:ff:32:0b:3e:15:72:da:b3:
b2:9f:65:02:94:a7:e8:cd:43:d7:ce:08:d6:3b:cb:
3e:72:77:28:a0:98:f1:7c:45:c0:2f:62:3a:2e:50:
73:5b:a2:45:e1:5f:26:11:f1:2e:d6:7b:8c:12:3f:
23:67:79:c8:de:0f:c2:ca:28:30:6b:f9:3f:4a:bf:
4c:2d:86:a4:86:46:90:fb:ed:26:57:39:b6:de:65:
63:0a:ef:0e:82:79:1d:f1:84:c0:27:bc:7f:0d:4d:
07:36:da:8d:25:be:8b:48:8f:f3:77:5e:56:76:5e:
7f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:8B:31:42:63:BE:F4:D2:98:7D:63:DD:BD:84:1E:A9:1C:79:F6:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/35407d11-6502-35d8-b8f0-6eecfea064d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.214.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:c5:43:75:29:01:47:e9:d5:d0:0e:91:ab:c0:ad:15:d3:99:
d4:66:a7:f4:b7:99:56:ae:4f:47:fd:81:67:25:a8:45:47:c2:
be:54:0f:f1:e3:d2:0c:1b:5a:69:cd:b9:4e:3d:6c:90:25:84:
22:4b:fb:bf:fc:af:f4:a9:fe:54:9f:35:1e:d7:1f:10:c0:41:
03:37:33:c7:58:03:41:e3:b7:44:db:67:95:7a:da:ac:08:9a:
22:d9:48:b0:8a:81:21:e3:ae:1d:14:4c:c9:8c:c3:f1:2a:06:
02:25:bc:4e:69:40:d4:f8:f4:62:ed:29:da:35:7b:39:41:09:
d2:f3:a3:4b:19:b5:27:45:34:13:22:a8:00:41:7e:6e:42:e3:
46:8e:cb:32:e7:8c:b3:38:08:96:4c:75:a4:af:12:f0:2d:21:
5a:3a:79:5a:7a:62:35:c3:50:07:b1:8d:bc:34:1c:c1:68:96:
02:ff:98:55:f3:69:04:76:16:04:c6:d1:e2:54:64:06:a3:46:
eb:47:81:22:1d:65:b4:22:5e:2c:69:66:81:bd:d2:c1:87:9e:
0b:e8:a1:b2:86:91:65:13:15:b9:b5:d3:5a:ea:cd:e1:08:b2:
b5:04:95:c0:29:c7:47:fb:2c:ce:09:87:b7:2c:d0:79:c1:9f:
8d:f2:cd:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:20:22 2025 by rpki-client