Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/64aa7a5c-3ab5-3089-8059-a54e0a17c027.roa
File: 64aa7a5c-3ab5-3089-8059-a54e0a17c027.roa (raw, json)
Hash identifier: nr6f/tYlmUBX8QU+YmPKUywc94YfM/mmd8xeOrm5VUo=
Subject key identifier: F9:FA:4D:47:8D:00:01:E9:29:8A:17:34:24:CB:17:20:A6:2D:BD:49
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F43285848C58205F06AACB25E1BF43D80
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/64aa7a5c-3ab5-3089-8059-a54e0a17c027.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 36492
IP address blocks: 136.22.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:82:05:f0:6a:ac:b2:5e:1b:f4:3d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=20ad585a-ca5e-4405-aec0-f29a38603f29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:89:86:fb:7e:38:3b:41:4f:2b:18:f3:ac:58:
68:d2:f2:f5:4e:e1:ab:c8:23:4d:f2:9a:40:ad:35:
d1:7c:0f:aa:9e:0e:78:a4:ab:c1:b1:9b:fd:14:a5:
33:81:aa:77:29:5d:d8:a7:e0:3f:64:ec:ac:08:2e:
24:5a:34:65:87:5e:34:99:97:86:86:8d:6e:c2:1d:
41:99:d4:16:70:ef:37:ac:e2:14:3a:bf:11:d4:9f:
1b:f2:05:a0:08:0c:92:df:b1:69:53:2c:f4:43:6f:
17:b4:0f:94:32:c0:c1:09:d8:e4:1e:3e:2f:9a:64:
85:1e:f0:e4:53:74:25:f2:e9:93:2b:48:0f:03:4d:
a0:d1:15:49:da:52:d2:10:42:01:89:3e:62:66:82:
b3:38:1a:7d:24:96:f8:ca:ca:e2:39:68:ba:00:b0:
51:f1:06:53:92:18:e2:d6:e8:e9:fd:59:07:e8:a1:
b7:b3:1a:5d:fe:19:27:02:ad:66:65:cb:22:2a:8b:
06:28:fd:17:01:64:df:61:98:23:97:af:88:ec:02:
ad:9f:4a:74:b6:9d:f7:51:9d:13:24:19:c5:0f:e9:
93:c5:c1:79:c3:2b:b3:b9:44:75:ef:f0:84:4a:a2:
f0:72:19:8c:d7:6b:8d:24:eb:d7:b9:f3:8c:3e:99:
6a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:FA:4D:47:8D:00:01:E9:29:8A:17:34:24:CB:17:20:A6:2D:BD:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/64aa7a5c-3ab5-3089-8059-a54e0a17c027.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:84:0b:5b:38:88:01:52:fe:12:56:8e:25:65:f9:16:fe:c8:
77:3d:dd:23:26:38:28:7f:1d:0d:a6:df:59:13:de:42:88:13:
c0:ef:c0:7d:a2:36:f9:9a:7f:16:10:2d:83:a9:1f:3f:a3:ce:
99:c3:81:17:9e:1d:40:af:2d:4e:a7:21:a0:c1:99:57:0a:ee:
77:f4:17:b8:7b:66:7c:e5:5a:da:a0:06:b5:4f:9f:b6:1a:77:
a1:61:30:d1:57:39:2c:55:06:cb:99:4f:db:63:ca:3a:db:22:
2a:3b:3c:2c:cb:4b:08:8d:49:e1:e3:3f:bb:c2:0d:1b:c8:39:
6f:e8:20:ba:44:c7:70:89:88:96:c2:09:23:52:e6:6a:ee:87:
e2:6a:bc:36:c0:c4:60:1e:38:96:f0:34:21:a3:7b:97:8e:2a:
2d:d5:87:7e:78:e1:fb:6a:f3:7a:70:f2:76:e4:8f:c4:3f:7a:
a1:c9:ec:ff:1d:c4:16:2f:fc:0d:ef:fe:c1:d2:42:4c:e2:cb:
98:35:f6:8d:fa:97:ca:6b:22:60:b4:f5:6f:9e:4b:84:38:17:
11:b1:e8:28:b2:3c:64:7f:09:a4:71:d1:79:6d:3b:80:b4:fd:
a4:10:e9:c0:83:46:46:6e:2b:e2:82:8a:9e:9f:41:7f:4b:e9:
7b:f1:e3:6c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFggXwaqyyXhv0PYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
MjBhZDU4NWEtY2E1ZS00NDA1LWFlYzAtZjI5YTM4NjAzZjI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYmG+344O0FPKxjzrFho0vL1TuGryCNN8ppA
rTXRfA+qng54pKvBsZv9FKUzgap3KV3Yp+A/ZOysCC4kWjRlh140mZeGho1uwh1B
mdQWcO83rOIUOr8R1J8b8gWgCAyS37FpUyz0Q28XtA+UMsDBCdjkHj4vmmSFHvDk
U3Ql8umTK0gPA02g0RVJ2lLSEEIBiT5iZoKzOBp9JJb4ysriOWi6ALBR8QZTkhji
1ujp/VkH6KG3sxpd/hknAq1mZcsiKosGKP0XAWTfYZgjl6+I7AKtn0p0tp33UZ0T
JBnFD+mTxcF5wyuzuUR17/CESqLwchmM12uNJOvXufOMPplquQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPn6TUeNAAHpKYoXNCTLFyCmLb1JMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvNjRhYTdhNWMtM2FiNS0z
MDg5LTgwNTktYTU0ZTBhMTdjMDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBZYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHWEC1s4iAFS/hJWjiVl+Rb+yHc93SMmOCh/HQ2m31kT3kKIE8DvwH2i
NvmafxYQLYOpHz+jzpnDgReeHUCvLU6nIaDBmVcK7nf0F7h7ZnzlWtqgBrVPn7Ya
d6FhMNFXOSxVBsuZT9tjyjrbIio7PCzLSwiNSeHjP7vCDRvIOW/oILpEx3CJiJbC
CSNS5mruh+JqvDbAxGAeOJbwNCGje5eOKi3Vh3544ftq83pw8nbkj8Q/eqHJ7P8d
xBYv/A3v/sHSQkziy5g19o36l8prImC09W+eS4Q4FxGx6CiyPGR/CaRx0XltO4C0
/aQQ6cCDRkZuK+KCip6fQX9L6Xvx42w=
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:13:39 2025 by rpki-client