Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d7edc5ce-a270-3d6b-b067-c9b04d735d10.roa
File: d7edc5ce-a270-3d6b-b067-c9b04d735d10.roa (raw, json)
Hash identifier: iJd3MghnYEWPBwGCZTpzJ4VgE655VclyAUolaQdh7z8=
Subject key identifier: 6C:8C:19:6B:1F:4F:12:5C:FE:4C:92:63:F2:50:7E:24:74:53:B0:39
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F43285848C5820BFA7BBB69A23C39EAC0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d7edc5ce-a270-3d6b-b067-c9b04d735d10.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 36492
IP address blocks: 136.22.64.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:82:0b:fa:7b:bb:69:a2:3c:39:ea:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=3ea8cf8a-e0de-4293-aeb1-976c6c81bf94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:5a:ed:dc:3c:57:ba:99:53:00:c4:aa:3b:82:
6e:ed:a3:83:79:03:17:bb:13:28:5b:34:a9:88:26:
cc:7a:17:66:e4:5f:c4:47:98:8a:54:96:5e:02:ab:
d8:5e:79:45:d0:ea:35:0e:ee:71:db:05:8c:0a:b5:
06:8e:17:12:e5:80:7c:7b:d1:e4:db:3c:ff:4b:c7:
e2:58:be:31:bc:1f:f1:cb:93:5b:a4:42:24:52:75:
df:f6:1c:0f:32:43:f3:4d:92:28:03:39:a8:54:84:
80:f8:36:62:21:b3:5d:a3:eb:0a:1a:7d:70:73:1b:
3e:25:e8:5f:23:a6:14:d5:2a:ff:17:c4:7d:50:c0:
fe:e3:7f:a6:d5:71:5a:57:29:2a:13:8d:f4:1a:6e:
72:fa:c2:fa:19:94:14:04:79:59:f1:81:16:e7:4f:
c4:02:d3:19:ab:49:71:77:1d:2c:f9:11:ea:f8:9a:
42:60:9a:26:af:c3:b9:2b:91:79:9e:80:eb:24:62:
b3:63:13:a4:bb:89:10:e1:3c:3d:4c:68:42:f5:bf:
26:f9:45:aa:d1:06:57:45:0c:44:cc:13:31:b1:57:
71:3c:ae:19:a2:99:15:3a:67:fb:5c:8d:f5:70:2a:
32:96:0b:8f:f9:d9:3b:cd:dc:78:e9:41:fd:17:0f:
11:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:8C:19:6B:1F:4F:12:5C:FE:4C:92:63:F2:50:7E:24:74:53:B0:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d7edc5ce-a270-3d6b-b067-c9b04d735d10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.64.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:12:3f:a2:a1:85:66:ab:6e:27:ab:e5:d7:14:b7:58:bf:0b:
dd:76:e2:29:aa:05:f6:88:93:68:a3:cd:22:83:0b:ab:bf:c5:
d4:14:d8:f5:61:cf:aa:4a:18:e2:ba:d1:91:e4:ba:be:d2:10:
32:0f:99:c4:c4:86:e8:14:fa:a7:75:fb:66:8c:26:2c:e3:33:
9d:7a:fe:6f:5f:42:0c:dc:f2:be:12:e6:bf:06:fe:a6:a1:76:
7a:2b:11:e6:82:22:18:59:7c:52:2c:66:f0:30:77:fd:39:6a:
04:a7:8c:d7:c0:72:ac:b3:39:7a:14:fb:57:c7:7f:09:84:f8:
f5:5a:2e:a7:97:bd:14:ad:38:af:a3:39:a1:fd:a1:f4:13:8f:
2d:39:15:56:91:71:d9:6d:3e:d7:78:e3:e1:87:91:4a:b6:29:
f7:3a:ba:22:29:ab:a4:35:fe:e2:ff:ae:75:82:65:d4:6d:b6:
9c:ab:0a:3f:52:d6:76:b3:63:79:19:a8:3b:8c:4e:f0:66:6b:
e1:c3:1a:e0:87:a8:9e:49:82:1c:8c:b4:af:24:87:27:f0:a7:
66:cb:bb:ef:65:ae:d1:cd:46:38:7c:d5:33:75:7a:f0:e6:21:
1c:13:6c:a5:bd:98:71:18:6e:82:17:24:a5:e9:ca:6b:1b:27:
fb:1e:b7:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:16:11 2025 by rpki-client