Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/85b1ea83-a4ed-350b-9b1f-47843c170b9b.roa
File: 85b1ea83-a4ed-350b-9b1f-47843c170b9b.roa (raw, json)
Hash identifier: BhujdoDUoTVgjHjD/2J48Pu5LJ4LZewxFPiJdCkQnQ4=
Subject key identifier: 82:8F:99:44:78:54:55:D2:05:D9:4C:D4:32:B3:8B:AF:69:CE:E7:A7
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F43285848C5822CB4AC2BC3B3041DD380
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/85b1ea83-a4ed-350b-9b1f-47843c170b9b.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 36492
IP address blocks: 136.22.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:82:2c:b4:ac:2b:c3:b3:04:1d:d3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=2caf9478-b8be-473e-a945-d137248e647e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c4:85:64:a4:ae:13:0e:65:d8:6e:09:f7:a8:
9e:a0:51:21:be:19:7a:b0:af:9e:2f:52:9d:42:f0:
3b:34:cc:36:36:be:94:a1:2c:b2:78:5b:e5:b0:66:
42:2e:b7:fe:54:6c:21:de:ce:80:8c:78:bf:cb:a2:
61:11:51:75:96:5a:75:cf:c7:71:d7:f8:87:7e:58:
45:40:aa:53:cd:16:00:57:51:01:5d:48:d3:e8:6a:
0a:c6:6f:1d:65:4d:03:0b:02:be:05:81:52:21:85:
03:52:4b:15:d6:d7:cc:22:27:89:71:17:49:eb:15:
17:97:8c:2e:2b:a8:5d:24:3a:b0:bb:50:d3:14:f2:
cb:fb:0c:25:b4:3c:46:62:0a:63:9a:69:60:ab:d9:
fd:18:f6:fb:66:61:e4:2b:44:29:ec:09:95:16:7b:
00:c5:aa:b7:45:05:40:f9:2c:a7:df:ac:45:06:31:
a6:bb:28:68:f3:81:e9:82:f8:d2:a0:f8:9a:86:23:
96:2d:f8:f5:74:35:20:f4:97:b2:98:54:eb:57:a1:
84:e1:d1:c8:8b:e0:5d:1b:63:e7:1c:9c:5e:ba:8f:
31:35:1f:17:1e:0d:2c:39:fc:4c:76:e5:bf:3e:68:
fb:46:cd:3d:52:ce:31:cd:e9:06:4d:cd:ba:ee:75:
11:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:8F:99:44:78:54:55:D2:05:D9:4C:D4:32:B3:8B:AF:69:CE:E7:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/85b1ea83-a4ed-350b-9b1f-47843c170b9b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.243.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:2b:30:20:65:91:e0:f4:b3:39:b3:d0:37:92:c9:f2:85:f0:
51:18:7c:01:41:61:d1:f8:4b:19:3e:71:89:dc:ce:a7:5b:0d:
3b:f5:a3:dd:11:80:ce:49:e1:1b:d0:ca:a5:7a:e4:24:7e:02:
fa:24:62:3a:c2:6e:27:02:ef:07:2e:0b:1d:30:b5:69:f2:1a:
52:2d:a1:5a:32:91:e1:e4:18:81:ed:c5:2a:07:f6:8e:fd:0e:
47:fd:98:c5:67:8c:e9:4d:2c:cb:9c:0e:bb:cb:92:30:a1:fb:
2c:b0:49:44:ef:5a:44:d4:4b:ca:b1:75:48:b5:02:81:46:80:
4b:56:69:70:1a:fb:0e:c3:c3:d7:f1:e9:1c:28:f9:e3:86:4e:
72:f7:54:f4:8c:b3:81:24:69:2d:24:0d:4a:f9:e9:c4:fa:1c:
f6:2c:b4:89:81:81:9a:a0:08:de:10:8c:90:53:bd:bc:a4:c9:
9a:3d:4a:86:8a:55:39:33:fa:a2:60:31:76:6a:b4:77:57:67:
90:92:d0:66:c4:93:ec:a8:56:75:4a:2a:cb:be:1e:ee:b6:9a:
85:04:89:14:60:17:d5:a1:c0:a8:73:31:18:38:ee:82:d9:88:
5d:0f:87:dd:03:61:58:7e:1a:1f:22:1e:89:de:fc:8d:4d:a5:
b4:0e:b1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:28:48 2025 by rpki-client