Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/785fbae5-78eb-3888-bc49-0defca21ef44.roa
File: 785fbae5-78eb-3888-bc49-0defca21ef44.roa (raw, json)
Hash identifier: BI23b1i20kz6ySo0oaYdAMi9mjgDvBc0HIMzJVANKMc=
Subject key identifier: 1B:53:19:64:C7:66:73:41:89:D6:06:42:50:44:92:EE:3C:C8:89:85
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F43285848C5816E5DE2E6489E15001680
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/785fbae5-78eb-3888-bc49-0defca21ef44.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 36492
IP address blocks: 136.22.248.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:6e:5d:e2:e6:48:9e:15:00:16:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=4f25caa2-ca0a-40c9-b09e-7626a109a583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0e:9a:bf:75:76:f3:b6:b1:90:b7:2d:f0:90:
04:ed:66:57:f6:a9:28:6b:40:23:8f:4e:12:7c:a9:
9b:19:b7:03:de:90:ee:65:04:c4:1a:ed:db:75:ec:
e8:e8:45:ca:8e:b2:d6:04:c0:63:1a:92:7e:2f:dc:
33:ed:6c:70:49:84:99:d0:70:b6:12:1f:fd:58:1a:
90:79:0c:75:bd:dd:96:f9:a0:8e:70:57:49:d8:60:
49:10:57:a5:db:2d:02:02:73:be:9e:ca:d8:9f:27:
ea:1c:77:81:8d:15:48:06:0b:5f:6a:1b:62:b6:1a:
70:5c:65:d2:20:b9:56:9b:9c:49:44:ce:7d:39:7b:
08:da:9a:33:31:03:6f:c5:df:c9:ff:fe:18:1d:a8:
b8:10:d9:cc:02:3c:82:cc:98:e0:fb:32:de:0f:39:
ef:16:55:48:95:1e:5e:67:f7:e0:9c:49:b5:78:c2:
f4:c2:e1:d6:e4:d6:05:c4:a7:6d:c9:2e:4d:7f:0e:
77:53:ec:9e:57:ca:5a:bd:76:3b:05:fd:03:2b:bd:
f5:63:76:81:ac:8e:7f:8c:6e:4e:56:b4:36:5e:65:
4b:5d:8b:96:6a:de:b5:80:c0:39:85:c0:dd:94:38:
5b:22:b2:13:cd:37:9f:e5:91:fb:c9:16:be:77:d0:
1d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:53:19:64:C7:66:73:41:89:D6:06:42:50:44:92:EE:3C:C8:89:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/785fbae5-78eb-3888-bc49-0defca21ef44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.248.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:a5:b8:ff:57:ac:f6:43:f4:44:49:bf:10:06:4f:97:e9:32:
a9:c8:89:59:de:67:b6:f3:ea:2f:79:48:00:d3:a5:e8:d4:1a:
5a:2e:d9:f0:e0:e2:d6:8e:ec:6e:9f:f6:6b:ca:4b:49:92:29:
52:88:6b:61:8d:20:45:9c:89:a9:ee:04:28:ea:f2:d0:e5:a6:
f3:28:02:f7:48:78:b7:1b:f3:68:cf:1b:c0:1b:10:cd:54:82:
56:a3:7c:09:b9:42:f3:6e:b4:c1:e8:e1:9b:e1:05:95:8a:c4:
73:8d:ef:74:9a:5d:59:5c:93:14:3d:96:5f:d6:d0:4d:f2:33:
9f:d5:76:81:9b:d1:ae:92:ab:a3:8c:6a:37:b5:a2:10:f2:a7:
02:e3:64:cb:32:60:40:db:a4:c5:9d:a8:68:c9:7f:23:3d:78:
5f:41:9d:ba:08:aa:cc:98:35:7f:be:4a:4f:f9:e7:21:92:78:
63:20:12:bb:6b:78:b4:c1:8b:0f:da:6e:f8:a8:e7:af:aa:aa:
64:b5:f1:ac:f1:d4:af:bb:90:03:2d:94:e0:c8:c5:69:5c:c0:
89:57:4a:0a:44:e1:7f:66:11:fa:6d:d6:c5:d0:81:33:a7:3b:
09:ac:05:8c:1e:5b:f1:0b:64:43:8b:98:a2:d5:c2:8a:db:8d:
57:26:a9:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:47:29 2025 by rpki-client