Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/91551183-9e42-3cc2-a757-dc28c939803d.roa
File: 91551183-9e42-3cc2-a757-dc28c939803d.roa (raw, json)
Hash identifier: tk9N8e11eskj5jXPkLQf0UqiD9wDCTa/OgkAZ1pGxhA=
Subject key identifier: 2F:C3:1C:11:8D:A6:40:74:77:E1:EA:E9:71:E4:2D:B1:A4:5B:8E:65
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F43285848C5816F3BA06AD18BB1F8DE40
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/91551183-9e42-3cc2-a757-dc28c939803d.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 36492
IP address blocks: 136.22.234.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:6f:3b:a0:6a:d1:8b:b1:f8:de:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=d528de41-d68f-48ea-a7b6-f6cad9316208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:60:36:00:1a:db:2e:20:54:21:d3:9f:42:ad:
90:44:61:b2:e2:cd:39:20:f1:58:3a:24:08:72:a1:
c0:c1:dc:0d:55:99:22:fa:ee:59:f6:1a:d9:f8:3b:
ef:6f:8a:77:10:6e:42:27:e4:a0:14:99:77:45:42:
6a:9c:85:24:6b:6f:00:05:71:02:2e:b7:58:b9:78:
0c:fa:0e:65:42:98:81:ea:59:af:9e:bc:a7:09:19:
46:23:66:15:b4:65:66:f4:ab:9b:2f:f2:66:c6:3b:
9c:19:a1:76:47:a8:98:e2:0b:ba:f9:38:e6:11:d2:
a4:62:63:4d:57:8a:3a:9a:a8:a4:df:d3:67:39:2c:
bc:2a:43:c8:6e:4f:fb:ca:9c:da:a5:56:74:5b:1c:
fe:20:07:7e:4e:c7:a5:07:57:48:14:45:ce:73:ac:
e1:a3:f3:5e:f3:aa:21:a4:35:7c:a6:18:a7:4c:be:
ed:40:42:75:48:e0:cc:20:f2:1a:5b:20:1f:6f:f1:
a5:2c:7c:34:0c:f8:78:e8:20:4f:c9:ed:65:09:7c:
8f:bc:40:b5:f1:a1:bd:1b:68:92:b6:a6:2a:4c:25:
e2:0d:56:24:3b:3f:59:79:10:c4:26:d4:86:8a:b7:
5c:9a:6a:f9:d4:36:61:f6:4a:8a:09:d7:d2:25:0f:
44:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C3:1C:11:8D:A6:40:74:77:E1:EA:E9:71:E4:2D:B1:A4:5B:8E:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/91551183-9e42-3cc2-a757-dc28c939803d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.234.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:37:69:42:73:b1:8d:a0:88:1a:21:8a:35:ac:18:7e:33:08:
e4:fd:8b:32:e6:c3:93:fc:a4:d2:f7:d3:10:30:27:99:65:6d:
14:9d:cc:07:d4:68:3a:e4:19:43:83:67:14:cd:c6:4a:91:59:
5b:61:c9:ba:62:10:49:c1:92:d2:d5:18:3a:75:76:8f:ba:7f:
07:41:07:4f:f2:fd:c9:89:fc:ae:8b:93:29:98:c6:7c:ff:6c:
c7:cd:6e:e9:80:23:d9:dc:c7:96:1e:dd:1b:bc:b2:a3:97:60:
b6:8e:9b:49:7c:bf:e7:81:29:73:04:de:94:b8:58:9e:d5:3a:
9e:31:4a:81:aa:47:a6:1f:d5:ea:ed:d4:30:ff:08:0e:f7:36:
70:eb:0a:0f:3b:cd:64:3c:12:30:ee:37:f9:fe:77:91:a3:6a:
83:27:31:4a:89:7c:16:b9:d5:fe:43:ce:72:ed:f6:b1:55:72:
aa:cc:24:72:69:4e:5e:f2:f8:5c:40:59:c1:fc:55:62:d2:9a:
2d:b9:a7:22:3c:03:26:7b:6a:ac:9d:cb:df:8d:b5:6a:3e:ef:
fd:9e:50:3e:a4:3d:01:dd:8d:36:a7:db:14:0b:aa:56:2b:5f:
dd:d1:a8:8f:d6:6f:ec:d7:2c:13:c8:7c:04:5e:c7:ce:e7:cd:
4d:0f:69:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:08:48 2025 by rpki-client