Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d1e287ad-8b58-398d-bf34-b8bf6ad845b2.roa
File: d1e287ad-8b58-398d-bf34-b8bf6ad845b2.roa (raw, json)
Hash identifier: GALHivpAfDoJxl+gw0peBHHIt9ZfOHaFULHgIvNIG5U=
Subject key identifier: 2D:1B:B3:01:30:4A:E6:D2:B4:CA:5E:94:FC:43:66:50:15:21:FB:BD
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F43285848BFEBD11EE2EABA2CA034E2E0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d1e287ad-8b58-398d-bf34-b8bf6ad845b2.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 36492
IP address blocks: 136.22.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:d1:1e:e2:ea:ba:2c:a0:34:e2:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=1585fda7-d14b-4682-99df-7c2b7f2bdcc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:52:93:fe:11:ae:53:fc:05:5e:3f:16:2a:c2:
3b:96:6f:b1:db:fc:7a:5a:94:c5:13:62:89:e0:86:
97:20:6e:50:4e:4d:1d:50:a9:24:fc:48:13:b8:67:
77:ff:0b:05:82:33:3f:22:82:2d:5b:f5:c1:bc:10:
3d:14:f0:e9:dc:d6:25:6a:e0:f7:c2:17:50:96:a7:
ce:63:15:e1:25:0b:dc:c0:9b:96:5c:5a:9f:1e:b2:
11:8a:90:e9:09:99:04:6d:bf:e1:6f:83:c0:24:6d:
35:43:f3:58:2a:dc:fd:ab:12:13:3b:86:51:c8:94:
14:4f:86:13:54:b2:01:df:a3:0e:12:38:11:85:49:
a8:ae:2f:93:b4:00:85:09:db:df:a6:fb:cb:ff:80:
b0:d0:39:67:e4:5a:c8:72:64:d7:9d:d7:c9:2d:2d:
29:be:d1:ab:36:54:58:4b:28:a8:6b:c1:e3:13:7f:
d0:22:2d:40:02:ca:72:35:96:82:e4:ec:42:d2:15:
c6:3d:c9:3c:6f:e2:05:5f:89:35:ca:14:3f:ed:cf:
b3:93:c8:6a:08:9b:37:c7:31:f9:09:db:88:4c:93:
82:31:ce:32:37:1d:f0:79:24:4d:49:da:09:97:b1:
28:27:da:ec:55:6f:53:59:53:47:a6:36:7e:fe:f3:
8c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:1B:B3:01:30:4A:E6:D2:B4:CA:5E:94:FC:43:66:50:15:21:FB:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d1e287ad-8b58-398d-bf34-b8bf6ad845b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:c3:92:f9:e2:35:9b:fd:4a:b1:bc:fb:2b:23:66:46:07:b8:
82:c4:6d:1a:d5:b4:fd:d4:34:0f:42:b2:05:1a:12:a5:38:c1:
28:f0:02:20:97:62:d8:b6:fc:f9:5d:75:cf:45:5a:b1:94:1a:
0f:49:a4:65:b6:9e:8e:b8:a4:65:d5:88:41:a4:dc:be:89:31:
af:5d:a0:a5:fb:2e:ae:f3:95:82:62:b9:eb:96:0f:86:26:93:
d1:f3:56:9e:59:49:65:96:fd:fc:4c:28:5d:47:5c:05:a9:81:
a3:52:bf:6b:b1:bf:6b:9d:82:99:45:93:89:ec:7a:cf:dd:7c:
7d:14:fc:52:b8:57:58:35:c1:1c:16:d7:61:ea:7f:e0:6e:c4:
3e:91:24:a8:37:b2:c0:93:ea:63:f4:6d:5e:34:08:a7:26:d6:
6e:b2:60:f4:54:3a:f5:11:b5:16:91:59:3c:0c:f9:4d:12:8e:
27:a6:45:2c:ca:5e:63:3d:2d:6b:8c:b4:ae:3f:ce:63:5d:f3:
94:03:8d:25:70:ba:09:13:95:6c:e8:17:c0:87:6b:26:5d:dd:
2e:cb:29:fe:d8:d6:5b:33:21:cf:df:62:df:f6:b2:ee:58:6a:
e4:f0:35:ba:88:9d:86:b6:2c:c8:63:59:70:c5:d0:a9:f5:8b:
a0:4c:4a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:47:54 2025 by rpki-client