Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/c7d22898-b12c-3add-b0fb-e4039a5eaccf.roa
File: c7d22898-b12c-3add-b0fb-e4039a5eaccf.roa (raw, json)
Hash identifier: yLd5i/vO9uG2Qrkid/QsEs09OS1KE2R2hEiTRFhF0bQ=
Subject key identifier: 66:21:AD:98:3E:90:B1:93:56:C3:F0:6F:83:1A:B7:F0:36:CF:51:A1
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F43285848C58176B7F4D139868C0D9780
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/c7d22898-b12c-3add-b0fb-e4039a5eaccf.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 36492
IP address blocks: 136.22.236.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:76:b7:f4:d1:39:86:8c:0d:97:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=3399bdde-d162-4b05-96d4-4059f1043cf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a4:f6:4d:cb:c4:66:6b:28:57:08:d6:d8:2c:
91:04:b9:d6:78:8a:2a:2a:35:4a:2a:5a:a0:21:ec:
b8:cf:ab:ac:b0:bb:16:35:b0:69:c1:fa:ec:38:42:
97:42:a3:eb:d3:02:0d:d0:88:17:d4:2c:4c:06:c0:
e9:33:01:a8:da:83:f6:72:f6:ba:e1:e8:22:ae:12:
86:7c:44:bd:c9:09:5e:44:5e:7d:76:dd:ca:c7:47:
59:2e:6c:f4:58:d3:9f:09:1f:83:ac:1a:cc:bc:42:
5d:93:60:61:c5:88:60:b0:7c:99:69:b0:29:5c:f9:
6c:e6:39:4a:7f:68:18:7b:2a:3f:cd:2d:ce:a2:b7:
25:e7:11:27:3e:08:05:42:7b:5a:4e:4e:0e:79:da:
a1:4a:fc:c1:ed:41:88:1f:db:5d:74:90:c0:24:43:
f0:68:70:0f:15:70:74:aa:9a:bc:94:c2:f7:e0:a6:
ff:59:bd:38:a4:46:5f:e5:c7:d7:54:b1:e0:53:c9:
e4:bd:d4:b1:9a:8a:ad:61:62:2b:a3:df:2a:f8:6c:
2a:20:b1:7f:f2:df:78:a6:d7:55:42:f2:e1:7e:40:
a5:ae:d0:ba:91:1c:b9:20:6a:4a:ed:c2:36:41:97:
c5:05:b2:96:a9:7f:cd:e7:69:3f:35:52:1e:05:71:
42:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:21:AD:98:3E:90:B1:93:56:C3:F0:6F:83:1A:B7:F0:36:CF:51:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/c7d22898-b12c-3add-b0fb-e4039a5eaccf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.236.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:d6:6b:88:91:ee:27:c2:80:07:97:a6:20:8f:fd:2b:79:d5:
4b:bb:a8:14:42:5e:68:fb:1d:15:7f:bf:90:3e:42:21:e9:f2:
57:d1:bc:86:a1:4b:f6:d5:b7:3e:9b:80:a8:4c:73:1c:8a:ab:
93:33:10:d8:8a:7f:1e:d8:73:f1:54:7a:5b:16:5a:85:42:aa:
7f:c2:6f:8d:55:12:61:d4:1a:64:13:d9:b5:22:a2:0e:86:0e:
0c:c2:8f:5d:15:6e:7a:7c:53:67:3f:e6:82:c3:bb:5e:23:03:
0c:eb:84:b8:85:e7:22:da:f5:7c:30:9b:f9:01:87:05:b0:66:
1b:06:52:1b:96:88:94:65:12:91:4c:44:81:4f:e8:ea:fa:89:
25:b0:c1:29:ca:b7:f2:56:aa:a3:8d:4a:dc:df:c3:1c:82:bc:
da:ca:70:2e:36:83:75:41:8e:e6:fa:2e:af:0b:5e:fe:85:db:
ce:0f:9f:1b:5c:f5:25:bc:cb:f2:35:e6:24:d9:7c:29:75:09:
22:78:cb:7f:2a:6f:51:c0:d0:64:b7:18:25:fa:a7:af:92:7e:
05:4a:41:64:16:93:e7:3a:1d:f9:c3:f5:b2:46:fc:29:22:25:
79:a6:c7:76:e4:4c:ae:20:d4:99:d3:48:fb:8d:8b:f3:0c:80:
6a:b6:b5:1c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgXa39NE5howNl4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
MzM5OWJkZGUtZDE2Mi00YjA1LTk2ZDQtNDA1OWYxMDQzY2YxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6T2TcvEZmsoVwjW2CyRBLnWeIoqKjVKKlqg
Iey4z6ussLsWNbBpwfrsOEKXQqPr0wIN0IgX1CxMBsDpMwGo2oP2cva64egirhKG
fES9yQleRF59dt3Kx0dZLmz0WNOfCR+DrBrMvEJdk2BhxYhgsHyZabApXPls5jlK
f2gYeyo/zS3Oorcl5xEnPggFQntaTk4OedqhSvzB7UGIH9tddJDAJEPwaHAPFXB0
qpq8lML34Kb/Wb04pEZf5cfXVLHgU8nkvdSxmoqtYWIro98q+GwqILF/8t94ptdV
QvLhfkClrtC6kRy5IGpK7cI2QZfFBbKWqX/N52k/NVIeBXFCWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGYhrZg+kLGTVsPwb4Mat/A2z1GhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvYzdkMjI4OTgtYjEyYy0z
YWRkLWIwZmItZTQwMzlhNWVhY2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiBbsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF7Wa4iR7ifCgAeXpiCP/St51Uu7qBRCXmj7HRV/v5A+QiHp8lfRvIah
S/bVtz6bgKhMcxyKq5MzENiKfx7Yc/FUelsWWoVCqn/Cb41VEmHUGmQT2bUiog6G
DgzCj10Vbnp8U2c/5oLDu14jAwzrhLiF5yLa9Xwwm/kBhwWwZhsGUhuWiJRlEpFM
RIFP6Or6iSWwwSnKt/JWqqONStzfwxyCvNrKcC42g3VBjub6Lq8LXv6F284Pnxtc
9SW8y/I15iTZfCl1CSJ4y38qb1HA0GS3GCX6p6+SfgVKQWQWk+c6HfnD9bJG/Cki
JXmmx3bkTK4g1JnTSPuNi/MMgGq2tRw=
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:27:05 2025 by rpki-client