Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d9a716a1-b2f0-320b-a1df-ae24b632b117.roa
File: d9a716a1-b2f0-320b-a1df-ae24b632b117.roa (raw, json)
Hash identifier: xl48lldXwvmsyhq+jt85+Zsq+9KzvSZDiwjDHweZHgc=
Subject key identifier: CC:59:CE:45:50:DF:CC:4B:B4:4C:67:E1:87:D1:EB:2E:B1:72:B6:EB
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F43285848C5817F77EAA617D3D4C0E3C0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d9a716a1-b2f0-320b-a1df-ae24b632b117.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 36492
IP address blocks: 136.22.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:7f:77:ea:a6:17:d3:d4:c0:e3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=83070d32-773c-4148-b057-d8ba012c1ac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0f:95:5b:9b:61:c6:b0:67:d4:68:2c:44:ae:
04:d3:d1:6f:a6:74:10:37:76:4d:ad:ae:b0:63:22:
73:59:c8:93:c0:0a:0a:b7:f8:eb:d1:f2:85:98:43:
55:0c:8a:a7:ec:bd:21:65:05:a8:0a:d0:ac:eb:f6:
69:b7:e8:57:28:c1:ab:09:fd:da:9a:f1:d3:99:26:
b4:52:2d:fd:8d:12:88:09:4b:1c:62:52:37:15:17:
58:8e:ba:d7:45:1f:ed:70:37:bf:58:a4:5c:90:41:
b9:90:50:40:15:bd:32:0c:3a:3c:a8:12:f6:c6:dc:
b2:4a:ac:90:39:0a:85:07:2a:fa:fd:95:c1:7e:fe:
e4:3f:91:ad:99:e1:d1:6e:dd:68:1e:0d:57:ea:dd:
bf:80:6c:bb:fb:d9:1c:bd:de:13:e9:7b:73:04:2c:
13:27:84:ac:b6:90:25:ca:65:87:4b:8c:6c:88:b4:
96:ae:f2:d8:a3:37:fd:37:fa:b9:46:5d:f5:d3:02:
3f:49:03:df:a8:f9:fb:f6:0c:ee:07:ec:5b:8c:a8:
c1:dd:85:10:af:aa:23:ba:e9:0a:92:ba:eb:6c:25:
bb:d9:99:e2:73:69:3d:bb:39:7e:ad:6d:7a:ac:e5:
f8:06:d4:b0:c4:c7:71:47:dd:63:9f:b2:ca:7e:e2:
0e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:59:CE:45:50:DF:CC:4B:B4:4C:67:E1:87:D1:EB:2E:B1:72:B6:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d9a716a1-b2f0-320b-a1df-ae24b632b117.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.70.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:9f:6c:ec:57:ce:3e:a2:2e:99:d6:9c:c7:24:be:5a:f0:25:
f1:78:a1:15:81:68:43:52:95:9d:b5:1a:8c:6d:54:c3:75:4d:
81:da:24:10:ea:fd:cd:58:c5:76:da:42:0b:bd:aa:9d:09:ce:
34:f4:c1:09:2f:9e:7e:f6:6b:4d:b9:26:7c:b3:25:b1:d9:1b:
74:2a:4f:91:7e:90:96:6d:69:52:d6:06:6a:84:5f:cf:70:57:
31:8e:62:f1:33:27:d6:df:83:ec:d1:e1:f1:45:7c:79:81:2a:
85:4b:56:75:ae:e6:c9:dd:5f:ca:61:cf:7a:cd:97:5f:65:b3:
31:92:fc:a8:12:93:1b:8f:0a:7e:85:eb:30:52:d1:56:69:ff:
aa:77:24:91:23:8a:5c:17:1d:b6:f9:31:18:10:e6:08:1f:11:
8f:a7:fa:fc:6f:4e:14:71:9c:f5:e1:1c:51:b5:b5:07:98:ee:
b6:9b:c1:59:09:54:fe:b8:47:08:5c:3d:29:99:47:0c:97:53:
ac:11:53:3e:25:3a:67:ce:8b:7a:c3:05:71:33:e9:69:b6:f5:
fb:8f:dd:db:a3:e5:e1:71:98:b5:24:c4:69:b3:89:71:d7:4f:
6d:dd:bb:0f:94:82:ea:e9:3f:30:05:b8:cd:61:3e:4a:9b:54:
fe:2d:80:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:16:10 2025 by rpki-client