Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/caa87cfa-19df-3c8e-932b-663847ce2cfe.roa
File: caa87cfa-19df-3c8e-932b-663847ce2cfe.roa (raw, json)
Hash identifier: a3MFgM5GOBIifBvg6x/DupN1wUoEIIZ4EiQV8rNVOJo=
Subject key identifier: 47:DC:3B:E8:47:DC:65:8F:22:E5:10:AB:A2:E4:CD:07:14:C9:CC:BE
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F43285848C58218B1455CE6476E49B500
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/caa87cfa-19df-3c8e-932b-663847ce2cfe.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 36492
IP address blocks: 136.22.88.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:82:18:b1:45:5c:e6:47:6e:49:b5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=9f6ed17c-d705-4f1f-9122-f36b32971c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b9:8d:34:3f:6d:45:51:3c:29:d9:59:80:07:
b9:ef:89:64:ff:f2:28:c8:dc:94:f2:37:3f:19:4f:
ee:c1:8d:49:49:1f:cd:25:b4:a0:4f:29:fd:95:3f:
37:81:ad:6b:51:4b:f4:ea:56:97:60:bb:7b:29:4b:
ca:b2:69:51:a9:ea:9e:4e:d6:54:3f:d3:56:3c:47:
13:b7:94:ae:95:31:93:f3:72:a9:e0:0d:83:cf:4f:
8d:bb:a1:79:e1:71:be:8c:7e:4f:d6:b8:11:40:26:
51:f2:62:5a:ef:8e:b6:24:ab:47:6b:e2:c2:15:7d:
b5:9b:75:9f:7b:b1:5f:0c:26:30:f8:db:dc:90:f7:
25:9c:38:ee:d0:8d:79:f1:31:26:b7:cf:52:fe:e6:
52:7f:eb:95:68:1b:8e:03:a8:e5:79:31:ea:6e:70:
ec:e5:1f:a4:b5:e7:7b:06:bc:98:b9:50:bc:1e:20:
0f:ca:96:2d:26:7c:f6:91:20:78:41:a5:97:28:a4:
e1:31:8d:54:e3:4a:1e:8b:19:ec:8f:29:31:ca:de:
f4:c5:64:d0:b4:32:81:83:e4:c6:63:de:eb:90:11:
37:ee:ab:4d:34:74:3a:40:4d:20:be:b8:d9:95:59:
58:43:f6:8c:38:c5:29:8c:59:0b:3f:f0:14:4d:cb:
d9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:DC:3B:E8:47:DC:65:8F:22:E5:10:AB:A2:E4:CD:07:14:C9:CC:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/caa87cfa-19df-3c8e-932b-663847ce2cfe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.88.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:f5:05:3f:07:14:aa:d5:9d:7a:8d:53:f2:02:6e:03:8e:34:
c3:5e:13:21:bc:f3:e3:95:5e:b3:59:55:62:d3:b1:9c:06:f5:
15:14:9a:aa:57:a1:1f:aa:74:09:f0:a5:89:52:ce:18:8c:db:
1b:72:ce:90:bf:2a:4a:13:31:51:f6:e8:6b:33:fb:bc:73:73:
f0:18:67:1e:55:99:56:81:88:44:f4:91:89:79:1a:4a:57:0e:
bd:f3:4e:11:4a:7b:0c:01:f9:6a:c2:9a:d0:ba:95:a4:74:4f:
5f:8a:19:c8:b0:12:63:6d:5f:67:d2:3e:fd:f5:75:f8:0e:9c:
20:7a:61:d7:92:3b:6b:e3:e2:2a:e1:e7:1e:0f:f2:a8:bd:fd:
4a:61:92:c6:f4:bc:74:fb:6e:dc:da:1a:bb:bb:44:ba:6e:d4:
5d:4f:08:17:52:05:f6:63:13:88:03:6c:6a:97:dd:96:1e:97:
d4:ae:b9:c8:a0:3e:58:29:e9:ee:dd:63:3e:53:63:b7:35:41:
67:85:50:41:1f:29:2b:0b:c1:3f:22:ca:b7:07:95:6c:b5:2c:
9d:6e:c2:d7:e2:75:61:a7:ab:0a:47:79:f7:06:21:60:9d:28:
69:27:7a:37:f6:8a:de:d0:47:67:14:2f:f5:e3:f1:4e:08:ed:
ac:1c:1b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:01:51 2025 by rpki-client