Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/49ee8a1a-ab4d-356b-95c9-6509fb28642c.roa
File: 49ee8a1a-ab4d-356b-95c9-6509fb28642c.roa (raw, json)
Hash identifier: ycIxxsB/srbGCB47Z8udw/5eZxBL2qEfZWoFEbKiK58=
Subject key identifier: A1:E1:E9:52:1F:0E:6A:42:B8:88:99:A2:0F:18:9D:2A:6C:BC:BC:F2
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F43285848BFEBAB2E0E60D92859AB03A0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/49ee8a1a-ab4d-356b-95c9-6509fb28642c.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 36492
IP address blocks: 136.22.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:ab:2e:0e:60:d9:28:59:ab:03:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=3cd4c01d-542e-4dc4-96ff-4c7e684a9490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:38:54:fc:26:07:fc:b6:fa:d6:0a:1a:db:3d:
f9:05:92:50:2f:ec:b0:3d:98:77:35:c6:d8:3a:bc:
ca:d0:a2:04:f5:9f:62:e7:0d:c3:00:6a:be:98:08:
ff:6e:73:58:7a:f1:cf:c1:f8:2f:b9:cb:0c:3f:fa:
65:85:c0:b4:7b:3a:c1:68:c9:f3:05:38:df:5c:29:
f1:4b:7d:52:1e:53:6a:36:c8:85:8c:fc:0f:34:6e:
e4:ca:ba:d2:ac:97:b4:ee:f4:c4:b1:71:ca:e0:cb:
2c:d8:93:df:21:6e:1a:87:e3:d8:6f:66:26:cd:c1:
e3:61:36:78:de:9b:97:78:89:cc:b2:e4:f3:31:a3:
ae:c8:62:18:a7:d7:d0:4d:10:73:05:e9:34:08:5d:
da:7b:cb:d4:80:8c:01:c7:56:d2:88:1e:d2:cb:c0:
87:23:1c:92:5f:d9:50:d7:65:4e:98:6c:75:58:e4:
da:12:4b:0c:a8:e0:c4:c4:4a:08:a4:f4:fd:62:f6:
4f:91:80:ad:44:27:0f:f0:4b:8a:fe:41:ec:74:39:
8f:c2:cb:5f:c6:c6:87:06:9f:47:db:de:bb:56:c1:
1d:93:c6:de:c9:48:6c:7d:cb:8c:5c:13:6f:52:eb:
72:96:f2:21:7b:58:2e:16:10:27:da:e1:aa:b2:12:
f5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E1:E9:52:1F:0E:6A:42:B8:88:99:A2:0F:18:9D:2A:6C:BC:BC:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/49ee8a1a-ab4d-356b-95c9-6509fb28642c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.210.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:73:9b:52:0a:f5:6a:7a:50:03:57:e6:9a:ec:0f:2c:33:ed:
ac:1a:80:c5:f0:62:40:71:48:be:8d:c6:6d:39:c0:3b:78:4a:
c6:68:21:2f:9b:99:05:18:8c:42:ec:9e:a6:d8:dc:12:6e:f0:
81:9f:de:cb:c8:99:f6:39:45:f0:00:d2:31:0d:35:f4:41:70:
4c:e1:ad:94:ea:fa:2d:3c:a4:58:ea:6f:85:3d:20:53:22:3a:
1a:81:69:b6:9c:71:c0:7c:4f:7a:f2:c2:3a:ce:6e:e7:d5:17:
60:b3:d2:3d:e2:aa:ce:3c:2c:16:81:05:6c:d2:ae:19:33:7c:
95:41:80:ba:9e:84:51:bf:08:cd:fb:ec:0d:d9:dd:ae:6e:c3:
b2:73:40:61:72:51:3e:36:a0:d9:2e:86:7f:2d:e8:87:7a:fa:
ad:81:02:c0:07:72:04:25:a7:5a:80:58:8e:66:78:2b:8f:2a:
5a:3e:f3:6e:b0:f5:1c:02:48:99:99:62:88:db:ed:36:95:1f:
bb:48:50:1e:4b:85:3f:35:32:77:d5:be:85:20:63:ef:70:a9:
22:2c:ea:20:bd:27:a9:b0:07:e9:ef:c4:bb:4f:ab:04:20:03:
44:4c:77:e8:f6:ee:ad:cd:6d:04:fb:37:2a:ae:ad:72:93:2d:
13:22:0d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:20:00 2025 by rpki-client