Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/a8b6fc78-6a0c-3066-a32c-a9edb47f5a56.roa
File: a8b6fc78-6a0c-3066-a32c-a9edb47f5a56.roa (raw, json)
Hash identifier: CLy8YCmHDK6WtuvlTZiqZlBP5vxuHYPL3Ju2d+YCz5Q=
Subject key identifier: DF:C5:9B:56:0B:2D:03:6C:9F:18:2E:50:71:15:A5:27:FB:A1:EE:4C
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F43285848BFEBAC90113EC7922C90AE80
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/a8b6fc78-6a0c-3066-a32c-a9edb47f5a56.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 36492
IP address blocks: 136.22.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:ac:90:11:3e:c7:92:2c:90:ae:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=4f3fabf8-ea6c-4e53-a342-285904570fb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:99:29:6d:4f:68:1d:1b:3b:b8:ad:15:ec:be:
31:f5:34:b1:44:af:07:b6:87:83:f4:f3:7f:f4:f6:
01:59:d7:48:af:62:fd:a3:bb:ee:3d:5b:89:18:79:
ae:87:6d:76:d0:3d:b8:e8:76:86:fb:14:28:99:3d:
17:48:2d:dd:a5:45:56:14:28:87:dd:9d:ec:22:4c:
f2:93:68:c3:b3:bc:be:a0:48:a4:95:b9:16:1a:84:
54:3c:b8:e9:37:db:30:ef:62:6f:d6:a8:e4:d1:8c:
c7:30:41:db:f7:ae:4f:ad:03:c0:dd:49:d7:d9:ec:
63:14:d6:a4:6b:de:51:30:03:a1:2b:1a:9a:f1:01:
50:c7:c0:16:c4:88:4d:41:b9:8d:fa:0b:0d:1f:eb:
5b:7a:d3:23:7a:81:4a:3a:b8:91:83:71:3f:55:1a:
7a:09:95:41:b9:ae:cc:a0:88:3b:d2:a2:5c:57:a4:
10:ae:fd:56:a1:d4:cf:76:6e:22:4b:d5:91:fc:6f:
d3:ee:14:95:22:60:ce:f5:69:0d:59:0f:b1:0e:70:
3e:e2:f6:ba:e3:7c:a4:e2:97:86:db:69:e9:5e:ee:
12:b2:d1:a1:27:13:10:34:f9:da:50:4d:6a:65:73:
c6:d2:fa:fb:5e:e5:c5:49:03:31:ca:1f:08:33:5c:
10:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C5:9B:56:0B:2D:03:6C:9F:18:2E:50:71:15:A5:27:FB:A1:EE:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/a8b6fc78-6a0c-3066-a32c-a9edb47f5a56.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:f0:f9:51:65:e0:a1:5f:66:c8:4f:a4:9c:27:02:c4:4b:59:
a6:1e:d7:3a:e5:16:30:cc:fb:8c:e1:9f:c4:66:16:07:57:08:
c0:9c:f9:fc:19:7f:49:e5:89:a7:3f:c1:d6:45:2b:5c:9f:c7:
b0:08:d3:58:52:ec:00:0c:f4:27:d3:3d:67:ce:82:0b:d7:b9:
b6:7a:13:c8:b6:78:70:e7:61:9e:35:18:f2:22:20:a1:9b:45:
db:5e:48:ec:50:ad:8d:90:53:51:ab:fe:a7:32:f3:d0:50:66:
a6:61:54:2a:d8:b3:5d:36:f8:eb:33:e7:33:cd:78:33:41:ad:
21:d5:99:fd:88:ff:78:d2:58:cb:6a:12:e5:71:c1:68:3a:22:
4c:57:1b:5d:f5:87:4a:6d:e4:30:bb:ba:0c:ba:db:fc:15:10:
2f:be:30:be:82:7d:7b:a6:7d:b8:47:8c:a8:9e:15:34:0a:fa:
16:84:6a:78:5a:5f:63:0f:a5:18:42:21:c7:cd:31:e5:4d:04:
7b:a6:8e:ca:3d:0b:4b:95:b3:40:ee:59:76:8c:8a:ab:7a:95:
ac:09:d2:f7:14:94:dd:6c:e8:d9:6e:b5:7d:db:85:0c:48:08:
3c:97:3b:b0:55:e7:99:03:8c:be:a2:b7:b3:0a:c5:fd:62:36:
e0:38:e4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:02:01 2025 by rpki-client