Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/38a04656-bcbe-3e40-a1c9-bbdb1ae37a65.roa
File: 38a04656-bcbe-3e40-a1c9-bbdb1ae37a65.roa (raw, json)
Hash identifier: mbgOq/dI8QNMNANC5i5FeCfoc09jNPmaaLlv01uhvtw=
Subject key identifier: 71:95:14:65:64:77:5D:8E:1F:2B:83:52:77:80:54:3E:52:3D:57:7B
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F43285848C5821A1BECA51475671D1E40
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/38a04656-bcbe-3e40-a1c9-bbdb1ae37a65.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 36492
IP address blocks: 136.22.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:82:1a:1b:ec:a5:14:75:67:1d:1e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=3934e930-7cb4-4a84-8af9-6b3499540b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9b:fc:e4:d7:97:91:0d:cd:34:de:04:9f:33:
75:f6:ab:b9:ec:be:20:f0:5d:f2:62:36:27:b3:05:
c2:67:dc:e0:9b:a9:85:14:37:4d:16:27:40:ea:43:
72:7b:21:d9:98:bc:56:49:32:a4:a2:74:3a:f4:46:
10:d3:55:89:89:bf:52:09:55:cc:1a:b0:46:9b:76:
46:53:cb:f5:fc:8e:2a:70:c6:8e:6b:78:3a:49:9a:
38:22:c7:59:c5:1e:bf:b1:dc:35:6c:b1:7c:b2:90:
9d:4c:8d:33:f3:7f:9e:3b:19:fd:63:2c:b7:29:02:
4a:9f:ca:01:8d:22:db:08:0b:7b:00:1f:b4:c6:69:
73:cf:73:6d:b6:16:74:64:11:ff:34:74:49:bd:63:
1b:30:1d:b0:3f:1d:0d:41:e5:44:9a:ec:9a:65:a7:
95:4d:cb:04:12:d2:cb:a6:b1:4a:7a:42:07:cf:8c:
ea:9b:b8:2e:c2:e6:f8:dd:37:53:72:9f:ce:5f:75:
af:e2:1c:02:9f:8c:aa:12:fc:57:cc:dc:cd:37:48:
e9:30:09:c5:f3:69:28:95:94:48:30:b8:57:ed:e8:
2f:08:62:11:18:69:5b:28:31:7d:a2:07:67:ce:47:
f1:38:b1:85:df:bb:b8:1a:4f:68:f1:d2:f6:cc:8e:
24:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:95:14:65:64:77:5D:8E:1F:2B:83:52:77:80:54:3E:52:3D:57:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/38a04656-bcbe-3e40-a1c9-bbdb1ae37a65.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.228.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:c8:fd:24:7d:5b:c8:75:f4:7f:d2:ec:09:c9:e2:e7:8f:06:
58:8f:5d:0d:87:ec:af:25:9a:b6:09:eb:c1:c4:dd:b2:70:8d:
cb:8b:4f:34:dc:68:c5:58:49:9e:f3:c4:31:d9:20:0b:3b:a2:
2b:e7:a3:07:a6:c4:55:0b:a1:a6:f7:f8:0e:4f:70:ba:19:66:
ee:f6:de:ce:d8:45:9a:4a:39:f1:6b:69:36:5a:4c:12:0f:68:
c4:8b:e3:b6:02:0b:f0:3c:b2:f2:98:58:1c:3f:6f:4b:ea:05:
f9:5c:11:08:c0:e8:74:c3:ce:e0:f8:72:2e:23:69:ee:f8:db:
b1:e4:e7:11:d3:d2:5a:c4:18:00:f0:0e:fd:d5:c0:d4:fa:1d:
37:0b:81:2e:c5:bd:c5:30:c8:80:67:c7:a6:8d:5d:30:09:2f:
0c:e0:03:a5:71:4c:37:87:51:18:94:f5:04:7f:46:71:e2:61:
9f:fa:07:63:16:c6:d3:40:87:29:d4:80:13:99:75:da:57:36:
c3:3d:b3:ce:70:02:b3:66:23:fd:2d:3e:24:74:57:ad:82:35:
c9:dd:b7:ae:d1:73:33:4c:b2:fd:bb:f3:15:29:72:d4:24:24:
1a:6f:b8:66:1e:ef:42:11:b5:1d:0b:28:7a:a9:ba:97:d6:e1:
88:b2:26:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:32:34 2025 by rpki-client