Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/7ecf1783-6f8c-3349-b7bf-1e1146be5f26.roa
File: 7ecf1783-6f8c-3349-b7bf-1e1146be5f26.roa (raw, json)
Hash identifier: ujQbTXTEC7MeEpjwLhhcES7GXrRpjAVtrdkleIB6N9s=
Subject key identifier: 78:3F:90:84:FA:AA:81:DE:F7:6D:AB:72:4E:0E:FB:29:EA:DF:C6:59
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F43285848BFEBC0B485DEBEAAFAE14D80
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/7ecf1783-6f8c-3349-b7bf-1e1146be5f26.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 36492
IP address blocks: 136.22.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:c0:b4:85:de:be:aa:fa:e1:4d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=a99dc91d-89da-4603-9b8d-78ce2d6f6ddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7c:2f:2d:f9:20:08:27:0c:d3:7c:d3:ef:15:
85:0b:a3:5c:50:8d:0f:95:7f:19:0f:c8:48:e1:14:
f9:15:25:c2:6d:00:55:b3:34:7c:41:9f:21:ed:11:
4a:9b:55:c5:86:03:c5:6e:e2:11:38:e8:01:31:48:
1c:e1:8e:f7:51:c8:e4:b9:04:61:e2:e2:65:66:39:
b4:38:80:85:9c:59:43:02:12:15:c1:58:8b:4a:9a:
36:e3:40:35:b9:f5:52:97:e5:7e:85:21:ed:dd:7d:
e9:77:36:e9:61:f1:1e:74:2d:0f:07:7c:f0:fd:4c:
59:33:11:71:19:57:75:37:ee:64:40:7e:38:4a:9e:
3c:9e:34:d5:75:f2:d0:a5:0d:d1:b1:7b:eb:a5:fe:
97:1f:6b:52:db:a3:9b:c5:d9:bd:f6:02:22:7e:59:
ee:3f:02:a5:22:db:36:46:91:e8:73:aa:8b:cb:a4:
7d:7c:7c:39:f1:5a:ab:fc:bb:21:7a:20:da:df:7e:
ca:7a:9f:fe:c8:72:02:98:2b:e5:ec:59:db:1e:2d:
dc:92:b6:dd:ae:42:12:44:06:33:4b:91:ca:58:0e:
4f:52:b1:d8:49:92:66:7d:f6:12:0a:40:b4:e1:ca:
8b:ad:48:c7:f8:2a:2f:2b:18:32:24:08:d8:ec:01:
90:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:3F:90:84:FA:AA:81:DE:F7:6D:AB:72:4E:0E:FB:29:EA:DF:C6:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/7ecf1783-6f8c-3349-b7bf-1e1146be5f26.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.124.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:a2:68:88:48:8e:fa:e0:32:c0:db:6f:e1:9f:8a:9e:e4:7b:
cc:b7:cc:4f:f1:fe:61:a6:2e:03:a8:4c:d7:e1:ab:f9:cd:87:
b6:f1:01:02:9f:63:5f:11:35:09:d8:39:57:66:80:22:c4:7e:
48:76:d1:81:e6:0d:41:fb:38:93:f7:db:88:74:86:17:f7:09:
dd:cb:e1:89:bb:af:a5:db:42:93:f5:9f:68:93:1a:36:1f:2a:
19:7c:4c:f8:14:6a:2d:a7:5c:cf:23:0a:2c:b9:38:bf:b4:49:
5a:cf:cb:c7:51:70:6b:98:b3:19:4b:be:99:4d:1e:ab:82:94:
af:7e:05:25:87:e9:3b:b7:ff:be:48:bf:ad:70:25:85:44:e8:
6b:15:0b:42:51:1b:79:2d:fc:66:4b:6c:f7:b8:bb:d6:f6:2c:
a1:ac:0d:e9:69:37:26:79:5e:6c:41:c2:81:9e:db:88:7d:bc:
fb:82:18:45:e3:a0:24:c4:6a:86:db:12:29:67:63:f2:84:84:
41:30:81:e1:72:00:73:ef:9d:28:0a:c4:18:13:43:06:87:44:
89:c5:4d:16:34:56:a5:91:4d:27:64:95:be:53:21:c2:0c:ac:
1f:99:61:19:3b:63:81:02:81:66:bf:ac:80:cc:8b:80:8e:f6:
3e:f2:31:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:46:05 2025 by rpki-client