Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/80fbf0c2-caed-3551-8424-f1c3a24c8c15.roa
File: 80fbf0c2-caed-3551-8424-f1c3a24c8c15.roa (raw, json)
Hash identifier: x03ukwTvcA1B9UWEWnL6PnnuDDbMaKFODP2KpG0pLVE=
Subject key identifier: 95:D1:81:DB:E3:06:14:27:7C:25:45:A5:AA:13:6C:81:1E:D2:91:43
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F43285848BFEBAD766F9E784D943DF4D0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/80fbf0c2-caed-3551-8424-f1c3a24c8c15.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 36492
IP address blocks: 136.22.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:ad:76:6f:9e:78:4d:94:3d:f4:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=7e2c85db-78aa-486b-9522-e64e933629e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:28:7c:c8:9e:9a:69:ea:53:68:0d:8e:79:2b:
70:1e:76:d9:63:c8:33:fa:ce:73:2d:f6:03:26:52:
db:54:ac:ca:1b:99:3e:d3:1e:36:2d:8b:2f:44:6f:
6c:75:9a:57:d9:4c:53:32:b1:50:c0:75:54:53:bd:
68:87:92:58:49:08:c7:b4:5c:72:29:e9:00:91:73:
fa:29:7a:6f:da:98:13:64:4f:f2:7d:ba:9b:b9:ea:
97:91:7f:f8:c1:d2:60:ba:79:62:18:ae:d3:d2:cc:
7d:61:44:be:bf:8c:e6:bf:be:37:b2:28:9b:7d:b8:
e0:37:09:7b:21:79:aa:29:b2:ee:dd:7f:58:2f:4b:
94:b1:06:a5:e2:40:da:c0:bc:a8:e7:3c:15:41:c6:
ee:1f:22:84:96:71:ec:f0:ce:c9:ef:fd:6d:ba:6a:
7d:90:58:71:09:e0:49:0f:08:98:0c:1d:34:21:02:
cd:80:b1:80:b4:9b:55:86:44:98:ae:7b:ab:a3:b9:
01:10:f0:47:42:a4:e2:e3:38:98:0d:c5:98:28:eb:
99:31:25:ab:85:5b:94:f5:1e:d8:f4:1d:1a:24:b1:
ef:d0:fc:07:9d:73:f6:30:fc:b9:18:f6:eb:d8:20:
f2:39:d4:d3:14:4f:c3:7e:9c:40:ef:59:73:7b:9a:
55:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D1:81:DB:E3:06:14:27:7C:25:45:A5:AA:13:6C:81:1E:D2:91:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/80fbf0c2-caed-3551-8424-f1c3a24c8c15.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.202.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:2b:2a:d0:6d:a8:2f:0a:bd:25:f8:df:50:0c:ea:c0:21:fe:
da:cd:86:da:cb:ac:84:ee:71:04:4f:79:f1:94:85:f2:63:56:
84:aa:b4:f1:d0:9a:13:a9:7d:62:24:d3:3e:d5:92:f3:af:02:
5a:98:9e:05:fe:97:03:42:f9:e6:a5:7c:49:fe:97:11:a9:76:
31:11:31:bc:04:49:c5:46:35:af:3f:ed:c0:68:ab:0e:b1:65:
f0:38:1f:8c:a2:bf:5e:6a:36:9b:1c:93:8b:a7:76:62:e9:4d:
b6:f9:08:de:8b:c7:d3:0e:5f:93:16:01:a7:4a:a1:b5:22:e1:
1e:e2:77:7b:c0:6d:23:c6:f6:96:b6:c7:1d:8a:85:a0:33:96:
7d:84:c3:da:ea:85:54:4b:f2:c6:63:90:9a:dd:92:73:4a:58:
2a:b4:f3:a7:ae:94:62:88:5b:98:bf:23:fb:9a:16:09:13:1e:
eb:07:40:b1:78:d8:15:d6:7e:1e:a1:f9:1c:7b:14:6f:6c:4b:
99:3f:c5:7a:74:bd:98:1c:e2:1a:b8:d0:c4:7c:11:9d:42:18:
5b:f4:f1:7c:5b:d7:bc:73:02:09:9b:7f:34:0e:09:6a:0b:f1:
c1:90:a5:af:af:0a:3e:34:7f:33:24:3c:95:a4:b3:d1:9a:30:
e4:dc:20:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:26:36 2025 by rpki-client