Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4ac9f1a7-c7b0-398f-8888-a9c56a9485ab.roa
File: 4ac9f1a7-c7b0-398f-8888-a9c56a9485ab.roa (raw, json)
Hash identifier: WpiOkkJ2gJHLjexWtHnBjYnM5pFRG1KELwephZ2j71o=
Subject key identifier: 09:E1:6C:54:3D:C2:72:1B:60:A9:AF:95:99:EC:01:36:7D:C8:8D:A2
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F43285848C58178F7258CD909559B7B00
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4ac9f1a7-c7b0-398f-8888-a9c56a9485ab.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 36492
IP address blocks: 136.22.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:78:f7:25:8c:d9:09:55:9b:7b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=aab5ca83-3d73-4d83-a2ae-6345ff6b8fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f3:2c:c6:2a:ad:b2:66:25:11:d9:23:b2:b1:
0a:98:8a:67:ec:09:f9:e2:65:67:17:bb:46:bc:98:
81:6c:45:e6:1e:d8:65:9e:05:72:dc:bc:d2:43:d6:
f7:e2:f9:06:6c:1b:d1:f1:f1:0a:61:ab:cb:1d:80:
e2:73:30:df:08:18:cf:25:5e:47:1b:f8:c1:c1:4e:
4e:ec:dd:d0:94:e0:2e:e2:73:02:43:15:fa:09:ee:
d3:a9:77:13:cf:b0:7d:2e:d9:1e:b8:fe:ce:dd:1c:
67:3f:5c:9e:f5:54:99:8e:10:45:13:89:c7:78:91:
96:32:e3:43:fc:42:2d:12:6d:72:91:aa:21:4e:93:
65:df:28:97:00:35:d5:36:9c:e0:91:7a:52:41:f8:
16:ed:dc:4f:5e:bd:26:41:cd:b2:52:64:75:a3:3f:
05:99:09:06:8d:7d:b5:3b:58:23:34:db:0e:55:22:
0f:19:00:b7:ed:48:90:67:11:09:78:50:bd:30:c0:
19:46:d5:7c:2c:04:db:00:e8:15:60:d8:2d:70:00:
b7:2e:26:2a:7f:da:03:da:2e:65:fb:c9:49:98:d1:
03:f8:a1:7d:52:e3:3c:47:91:be:7e:1b:a9:d4:04:
3c:9b:fb:fc:93:7e:6f:bf:3c:3d:e2:10:c9:8b:c4:
bf:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E1:6C:54:3D:C2:72:1B:60:A9:AF:95:99:EC:01:36:7D:C8:8D:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4ac9f1a7-c7b0-398f-8888-a9c56a9485ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.97.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:c9:64:cf:c2:42:e4:46:ad:44:0c:1b:53:33:06:3c:ec:fe:
8b:0d:b5:45:e6:ad:a9:31:10:21:a8:1f:3e:86:40:0c:f4:1e:
8e:09:3c:b1:24:9e:6b:4f:ce:98:8a:ea:2c:ea:ad:08:23:ed:
24:c9:b0:ca:9c:2f:3b:42:55:98:c5:74:ff:db:47:ac:a8:c2:
cf:c7:b6:6e:a0:75:65:14:3a:47:24:a6:b7:7f:77:a4:d8:36:
86:63:b0:19:29:31:9d:e3:0d:42:58:1d:38:cc:67:0b:83:95:
b0:37:51:d2:de:09:60:e3:99:8b:61:0a:65:8c:9d:c6:46:9f:
c9:1c:59:7c:99:9b:8d:45:ce:9f:08:d6:c8:26:43:7b:f0:fb:
a6:05:53:65:0f:52:b4:3b:b4:fd:f2:88:c4:1b:16:b7:7a:d4:
40:e8:9a:e7:b5:ff:c5:36:2a:d0:d4:55:c3:58:ce:88:3f:aa:
50:ac:d9:aa:4c:b8:03:77:20:d9:1b:9c:53:1c:4b:73:30:20:
d1:9b:dd:31:eb:07:eb:69:11:73:f7:4d:8e:a1:25:e9:5a:75:
53:d9:f0:de:24:88:ec:34:e7:87:53:f1:e1:4a:91:7c:47:51:
3c:8f:63:c4:69:2e:97:81:d5:ec:57:14:35:d2:67:8b:f6:d4:
dc:2b:5d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:39:16 2025 by rpki-client