Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/75bde4a1-e87d-321d-917f-10d16a03a5a1.roa
File: 75bde4a1-e87d-321d-917f-10d16a03a5a1.roa (raw, json)
Hash identifier: QpOMp+j+YQLwNugvb2Y+r/ZJizKJ3dDxO1YuwbJr4kU=
Subject key identifier: 2D:A9:D9:F8:1F:B0:D2:D2:35:D1:14:A9:13:60:95:7C:5F:87:58:6E
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F43285848BFEBAA9C45A389C4E77B9500
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/75bde4a1-e87d-321d-917f-10d16a03a5a1.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 36492
IP address blocks: 136.22.196.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:aa:9c:45:a3:89:c4:e7:7b:95:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=8f1ada59-d220-45cd-9cc4-d59f2d395945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:45:e4:8b:b9:a7:5f:3f:d2:0a:53:0d:42:a4:
7c:8a:3f:c3:5f:60:ad:60:ff:a0:d1:61:07:fa:00:
0b:ed:2f:31:00:bb:72:59:d6:70:fe:1f:33:ae:b6:
e0:44:f1:cc:a6:f1:a2:79:62:0c:46:ac:39:a1:8a:
84:65:83:70:be:4b:82:ac:52:c9:05:e1:20:22:6a:
07:56:cc:dc:3b:dd:c4:9e:f5:ff:fb:ba:55:4a:c8:
d2:2f:7b:6a:01:92:d2:a0:fc:a2:e0:16:32:b3:1c:
d6:a1:6e:a4:59:32:ae:86:37:a6:9c:e5:92:8b:67:
13:46:4e:ea:d7:c9:d5:e1:13:85:4c:5b:96:c5:80:
cd:00:97:40:9e:b4:cd:42:ce:9e:4a:4c:4d:91:8a:
9d:a2:6e:94:2d:90:0e:fc:23:b1:da:19:5e:11:4c:
90:01:15:8d:c6:95:06:2c:d4:42:c0:27:4f:3c:79:
45:01:95:23:19:b9:65:ec:4f:eb:b2:0a:da:bd:45:
3b:f0:ed:2c:71:b8:f3:2b:b1:2b:f7:7e:15:f5:8e:
3b:b8:8c:76:aa:98:30:14:e4:25:75:64:bf:4e:77:
77:1f:88:91:86:a1:a1:02:c3:6f:1b:5b:45:94:17:
6f:f1:92:21:b5:90:a9:2e:2d:49:26:27:ba:e7:35:
fc:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A9:D9:F8:1F:B0:D2:D2:35:D1:14:A9:13:60:95:7C:5F:87:58:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/75bde4a1-e87d-321d-917f-10d16a03a5a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.196.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:17:2c:4f:93:98:6e:69:20:b9:40:b4:a1:d5:ef:5a:93:6f:
56:1a:ed:42:2c:08:8d:b3:91:42:8b:93:5e:01:28:c5:57:9d:
57:a4:c7:4e:a8:14:de:de:8d:b5:ea:9d:24:07:34:9c:2f:a7:
8f:0c:df:a8:a4:46:2e:08:01:98:a3:c3:06:20:24:d1:2d:c8:
41:15:51:fe:f4:8e:68:50:4a:6b:25:15:37:12:08:46:e8:6a:
9c:76:8c:3a:bd:93:73:9b:5c:fa:57:55:e5:83:31:40:5b:ab:
5d:cb:f0:0b:63:46:3a:e8:df:3b:4c:42:b5:99:7c:71:d7:90:
e0:6b:8e:f6:b6:46:0f:8b:f9:53:89:5a:cd:a7:dd:f0:83:3c:
7e:c5:30:b3:d3:e6:85:f3:a7:a3:d2:f1:69:c8:80:33:d0:20:
02:d7:39:66:e7:83:c0:ff:1c:63:d8:c8:55:15:b1:1c:62:2e:
14:31:4a:b8:5c:8d:d5:00:cf:5b:d9:c3:40:fd:f6:08:87:dc:
c5:4d:45:ae:25:6f:e6:21:a0:f7:5f:44:8b:34:c2:72:9d:0c:
36:10:10:63:5e:16:02:6a:32:cc:ee:97:ee:b4:76:d1:5d:c4:
d3:3d:77:b5:86:43:72:5b:f8:f0:40:26:9e:b5:48:5b:01:47:
71:e5:66:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:31:33 2025 by rpki-client