Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/3ce62ad0-5b1e-3d8e-98a6-50fd141cdd9a.roa
File: 3ce62ad0-5b1e-3d8e-98a6-50fd141cdd9a.roa (raw, json)
Hash identifier: sZdTG1dVFWRh74Y8xyszvdxXxp9SlcluLSPTVsCDGJY=
Subject key identifier: E9:7C:29:D5:F9:8A:4E:2D:97:BA:2E:01:05:AB:6C:1B:5C:07:A9:BB
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F43285848BFEBB71D5D4927119FB4F700
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/3ce62ad0-5b1e-3d8e-98a6-50fd141cdd9a.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 36492
IP address blocks: 136.22.120.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:b7:1d:5d:49:27:11:9f:b4:f7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=983951cf-072a-490f-b000-089caeaae947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:36:4c:cc:c9:56:61:f4:df:6a:c7:8c:ea:6f:
a6:0f:87:d1:06:76:ee:dc:50:93:e0:21:af:01:a7:
8d:d5:71:ed:6c:b5:87:ae:22:cb:d5:07:45:ca:b7:
ca:4f:38:e0:ed:3b:da:9b:1a:48:de:e7:b7:53:e3:
05:cb:7f:a9:5c:16:dc:db:dc:c7:ae:4a:aa:c2:9e:
fe:01:bb:df:25:68:51:41:0d:b6:99:58:26:ba:19:
2d:1b:62:a5:ec:a5:00:95:23:d5:02:af:53:61:69:
57:f6:36:74:cc:bf:72:91:4d:5b:92:64:17:c1:01:
e0:1c:f5:c0:11:6e:e2:1e:dd:d2:01:33:09:52:c9:
a0:50:12:a4:10:6e:20:56:6f:d2:38:00:5f:4b:15:
fe:6b:97:40:e5:d9:4a:c5:e6:d1:bd:8a:35:87:e5:
b5:40:6d:15:06:37:e0:ce:19:64:b7:66:56:15:8a:
2c:44:5b:36:b4:5f:ba:e4:a3:97:eb:3d:e7:63:68:
12:4a:ec:78:dc:f1:7c:76:fb:68:64:82:3f:9c:f4:
36:a6:e1:39:ab:02:cf:1f:61:e6:1e:97:85:f4:4e:
f6:54:b6:1a:58:a7:a9:71:4c:2f:23:3d:3b:88:7e:
51:10:4b:86:74:f3:0e:71:17:07:c1:d3:68:53:09:
41:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:7C:29:D5:F9:8A:4E:2D:97:BA:2E:01:05:AB:6C:1B:5C:07:A9:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/3ce62ad0-5b1e-3d8e-98a6-50fd141cdd9a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.120.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:73:ee:cd:aa:ad:29:36:05:65:67:de:19:97:05:fe:6d:68:
80:be:0f:a0:23:50:18:87:88:77:2e:56:2e:82:27:a8:6b:c9:
e0:6c:dc:8a:e8:c5:b3:74:f4:42:86:f3:79:f8:e0:6f:94:83:
bc:fc:f8:8e:f4:1f:e5:ac:38:2f:ba:35:f1:d4:e6:3d:1e:00:
f6:d8:b6:60:eb:c5:5a:60:0b:91:e0:2a:06:b7:27:1c:8b:53:
70:1e:4e:11:5b:5c:37:28:d4:50:0b:d9:b6:73:25:e4:c1:01:
a5:60:ae:54:c1:eb:2f:19:26:e9:d8:69:b5:43:9e:de:30:10:
f3:63:56:b8:f0:28:08:e8:02:38:ff:7b:dc:08:e0:12:6d:56:
bd:ed:cf:57:69:40:1f:81:be:78:56:4c:2e:c9:cd:07:38:4f:
b5:f5:4a:f5:d7:f6:31:56:69:04:19:79:c3:bf:37:82:cb:88:
f9:c9:8b:71:8d:1e:d7:5c:7d:9b:ea:42:90:f7:04:96:95:8f:
89:ed:02:24:c9:63:4a:cf:bd:a7:36:74:36:4c:e6:3a:66:55:
05:7d:ac:1b:37:08:a1:87:db:b6:92:dc:ee:05:e3:99:4f:7d:
1b:bc:6a:83:59:03:58:95:71:de:58:3a:1a:54:73:60:d9:3f:
4a:05:e4:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:19:34 2025 by rpki-client