Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/6c6ee283-f711-359c-84a0-ff67082bc535.roa
File: 6c6ee283-f711-359c-84a0-ff67082bc535.roa (raw, json)
Hash identifier: gxxs1DTntUyuBUHSqWlJqK5rHfBZQC9fYL9ozY54gaI=
Subject key identifier: D0:B9:0A:4F:F1:64:69:5A:EF:B4:3F:A4:4F:AC:9E:ED:C3:CF:98:51
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F43285848C5818904CA5BC7A5E70AD9C0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/6c6ee283-f711-359c-84a0-ff67082bc535.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 36492
IP address blocks: 136.22.254.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:89:04:ca:5b:c7:a5:e7:0a:d9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=293ff515-60ac-4575-9a15-e8ff6e63cc4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:32:dd:fe:c8:c4:93:ea:a5:b8:73:2d:ca:f9:
c1:8f:68:d6:8e:cb:a9:98:3a:d5:88:19:5d:b7:4b:
7d:1c:3e:86:25:93:cb:b2:35:18:e4:ba:31:a5:a5:
56:d4:c2:b0:e7:2d:88:21:cb:99:ba:1b:b4:f9:99:
73:40:12:1c:87:4c:6e:8d:95:dd:7c:e0:bf:ee:17:
dc:d5:01:ee:dd:5b:f7:6d:00:0b:3f:82:05:af:db:
a7:04:ea:06:68:3b:36:55:90:fa:c9:d7:c6:6f:3a:
88:6f:21:1b:11:dd:a0:e1:34:ae:e6:01:1c:fa:35:
97:71:06:68:6b:fd:92:9e:e8:bc:12:f3:6c:67:ff:
ea:38:83:e2:90:6f:09:48:75:21:9b:21:39:53:39:
00:89:ed:87:55:93:e9:31:70:72:28:08:5b:a4:ec:
27:11:b9:f4:bb:ec:3c:2b:04:78:ef:f3:6f:6f:c6:
f0:89:34:25:cd:c2:72:19:ec:2b:10:b3:02:cc:df:
a9:04:ca:f6:5f:8b:83:68:bf:ea:d8:1b:55:a4:34:
d4:74:d3:32:d2:1e:99:42:cf:03:04:e8:ed:1d:99:
1a:e0:75:4c:c2:31:1f:1c:d2:0e:39:d6:6d:94:28:
9b:6d:31:3b:f5:2e:3e:93:da:2a:ae:75:a0:e4:be:
84:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B9:0A:4F:F1:64:69:5A:EF:B4:3F:A4:4F:AC:9E:ED:C3:CF:98:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/6c6ee283-f711-359c-84a0-ff67082bc535.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.254.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:5e:ea:41:ca:2d:41:10:1b:eb:82:01:ee:c0:b1:02:91:43:
57:19:68:33:36:2e:13:26:89:aa:3f:8e:8d:9a:14:b1:da:9f:
f1:ed:6e:94:91:c8:4d:67:04:37:97:b9:04:f1:aa:1d:80:d5:
bf:f1:e0:b7:52:8b:a7:3e:b2:7e:4a:6d:a1:ce:11:18:fe:b6:
0f:08:ab:e1:9c:6b:bb:f0:f9:42:0d:79:87:ea:04:03:bd:68:
52:29:c1:f3:bb:1b:e4:d1:79:22:ef:ca:2e:dc:25:bf:b4:1d:
27:fc:79:ed:f4:59:36:7b:a4:a2:e2:9f:ae:5a:a0:7b:90:7f:
f2:8c:b1:a0:01:0e:6e:89:13:f7:4f:46:4b:2e:ba:e5:12:6f:
36:99:a8:22:30:b2:55:65:f3:29:3a:d5:66:6d:ab:5b:f7:3a:
fb:a8:7e:b0:3d:7e:3a:c5:d8:39:c4:5e:ca:f7:16:80:f9:ab:
8c:4e:15:6f:00:e5:d4:ea:7e:a3:33:86:21:86:4e:68:c3:5d:
b9:6b:db:c9:de:f7:8f:a5:c7:40:8c:a5:87:82:67:46:2c:a5:
a6:d8:be:8f:a3:bf:97:55:1b:b5:dd:77:69:26:cf:af:5c:63:
be:f6:07:56:d3:e9:7d:de:54:46:ed:6f:44:8b:f8:ee:69:6a:
e6:9f:5f:6e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgYkEylvHpecK2cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
MjkzZmY1MTUtNjBhYy00NTc1LTlhMTUtZThmZjZlNjNjYzRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDLd/sjEk+qluHMtyvnBj2jWjsupmDrViBld
t0t9HD6GJZPLsjUY5LoxpaVW1MKw5y2IIcuZuhu0+ZlzQBIch0xujZXdfOC/7hfc
1QHu3Vv3bQALP4IFr9unBOoGaDs2VZD6ydfGbzqIbyEbEd2g4TSu5gEc+jWXcQZo
a/2Snui8EvNsZ//qOIPikG8JSHUhmyE5UzkAie2HVZPpMXByKAhbpOwnEbn0u+w8
KwR47/Nvb8bwiTQlzcJyGewrELMCzN+pBMr2X4uDaL/q2BtVpDTUdNMy0h6ZQs8D
BOjtHZka4HVMwjEfHNIOOdZtlCibbTE79S4+k9oqrnWg5L6EhwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNC5Ck/xZGla77Q/pE+snu3Dz5hRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvNmM2ZWUyODMtZjcxMS0z
NTljLTg0YTAtZmY2NzA4MmJjNTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBb+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAFe6kHKLUEQG+uCAe7AsQKRQ1cZaDM2LhMmiao/jo2aFLHan/HtbpSR
yE1nBDeXuQTxqh2A1b/x4LdSi6c+sn5KbaHOERj+tg8Iq+Gca7vw+UINeYfqBAO9
aFIpwfO7G+TReSLvyi7cJb+0HSf8ee30WTZ7pKLin65aoHuQf/KMsaABDm6JE/dP
RksuuuUSbzaZqCIwslVl8yk61WZtq1v3OvuofrA9fjrF2DnEXsr3FoD5q4xOFW8A
5dTqfqMzhiGGTmjDXblr28ne94+lx0CMpYeCZ0YspabYvo+jv5dVG7Xdd2kmz69c
Y772B1bT6X3eVEbtb0SL+O5pauafX24=
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:24:29 2025 by rpki-client