Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d3c13d76-cbb9-32a5-8171-dcca1c2efea1.roa
File: d3c13d76-cbb9-32a5-8171-dcca1c2efea1.roa (raw, json)
Hash identifier: 9cRbqrxtQPX5sUXQ8agIjGvq3hfOlGseB13KZd6R6Qw=
Subject key identifier: 49:BB:E8:91:F4:25:3F:A4:4C:29:C3:E2:95:68:C8:16:B2:48:5D:BE
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F43285848BFEBB4D72071F754BEBD1BA0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d3c13d76-cbb9-32a5-8171-dcca1c2efea1.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 36492
IP address blocks: 136.22.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:b4:d7:20:71:f7:54:be:bd:1b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=2b1bee98-02da-409c-8bc9-ce68111737e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:78:b2:66:65:0a:c5:24:0b:79:1e:42:25:b3:
f8:0c:1a:3b:bf:68:57:13:af:0a:03:e6:f2:1d:73:
ed:02:7b:41:ef:16:36:0a:b1:be:33:a3:cd:7c:72:
2b:89:78:5e:ab:53:ae:9c:5a:39:80:17:25:93:77:
1e:1b:b9:a9:ba:c5:51:a1:f8:ca:da:27:4e:f7:66:
26:be:87:2c:8a:5c:b5:5d:ce:03:4c:85:2a:49:bb:
d5:13:fd:1d:00:6e:1a:2d:80:bd:88:60:d9:3f:7c:
08:0f:ca:54:ca:54:d5:e5:ea:3d:fc:8f:2e:49:4f:
40:b0:b4:ef:17:0a:e5:62:f2:4e:6c:27:09:17:6d:
cc:11:fa:20:32:69:b1:2a:a7:e7:25:68:2c:61:40:
08:6b:fc:ad:3a:41:b1:d5:d2:52:8c:8d:63:85:7f:
0e:a5:41:d0:74:1e:38:51:ee:d7:4a:70:d7:cf:78:
73:48:b9:4b:83:00:6f:71:94:d8:2b:91:69:f6:b0:
ae:40:be:52:8c:a0:73:1e:0c:31:cc:99:c0:cb:3f:
c1:50:fd:5f:6f:2b:5c:e7:fa:a3:bb:4e:05:c2:d3:
37:f5:a7:53:00:4a:31:3b:7d:a7:09:ec:6d:1d:94:
6d:5a:18:56:bd:ca:ef:64:68:14:b2:2e:f9:3f:df:
f5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:BB:E8:91:F4:25:3F:A4:4C:29:C3:E2:95:68:C8:16:B2:48:5D:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d3c13d76-cbb9-32a5-8171-dcca1c2efea1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.201.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:13:49:a1:60:5a:13:81:99:c5:97:92:58:10:1b:0f:60:58:
70:4e:45:8d:7c:a2:23:14:62:d2:33:74:fc:ad:65:ef:5a:70:
5f:a6:98:43:5a:33:04:7e:ed:6d:99:56:6c:2b:d5:2b:88:9f:
5f:70:7d:93:b8:72:77:0e:5c:6d:1e:39:c3:62:3c:6d:8b:3f:
32:c8:23:1f:e6:90:13:44:3f:e3:40:22:df:f0:c2:81:a3:5b:
4f:7b:e7:84:ea:3b:4e:d4:3d:42:a2:14:e7:dc:25:39:66:00:
d0:de:ab:4d:53:26:bc:44:06:a3:d7:9e:2c:79:a3:e4:29:37:
88:07:cb:32:8c:f7:49:2f:53:5a:0e:8f:84:9a:18:0b:c7:4d:
8c:57:24:96:f0:ee:7a:60:30:b1:82:77:47:d6:66:a1:55:90:
da:58:50:7b:25:73:9d:21:57:38:c6:40:71:f2:cd:be:d6:10:
e8:c5:99:65:a1:de:5f:e0:8b:e2:a3:51:33:5e:16:f4:34:15:
50:fb:bd:dc:66:2c:1f:57:41:87:fb:06:06:32:f8:34:c8:6a:
7d:80:fb:85:5a:05:3f:ff:b5:72:11:94:d7:17:8e:5a:95:12:
9e:45:87:66:9d:a4:e6:0c:4e:ee:9d:51:75:dc:93:97:1a:52:
24:34:fd:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:12:40 2025 by rpki-client