Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/f169cd3a-8ca9-330e-8642-a90f86a55c11.roa
File: f169cd3a-8ca9-330e-8642-a90f86a55c11.roa (raw, json)
Hash identifier: s0uPBJv+PRXzTd88uTGS+5F+FwMepsS1NaFxD4RbgAE=
Subject key identifier: 06:74:FF:24:39:9F:C9:AB:39:38:12:4B:02:BB:A8:75:8A:6A:E2:1B
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F43285848BFEBB269DE8EA6DC05E2AD10
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/f169cd3a-8ca9-330e-8642-a90f86a55c11.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 36492
IP address blocks: 136.22.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:b2:69:de:8e:a6:dc:05:e2:ad:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=ef66a20e-d2aa-4f48-8d67-6dda647eac4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ff:11:88:70:17:59:2c:f8:c5:0b:b2:48:1d:
5a:72:d8:3d:10:e7:0f:4c:fb:75:89:f3:42:d0:dc:
85:dd:79:77:4d:01:ab:f2:83:54:21:0b:ff:5a:80:
30:5c:d1:1e:36:ac:52:81:28:9e:c1:f4:10:74:fa:
fe:d1:f4:65:69:44:7d:ed:5b:ed:a7:26:e5:57:d5:
41:48:56:48:e1:ca:f2:a4:e5:41:11:15:e8:73:a6:
c7:70:38:ea:0c:6d:f5:30:06:45:a8:0d:01:67:d8:
cf:5a:43:1e:2d:8a:e1:02:ce:55:9e:39:b0:44:1c:
b4:9f:1a:e6:3f:23:e6:32:00:15:f2:ac:88:6f:99:
2d:45:7c:96:97:29:4c:f9:89:20:62:e6:ad:b3:c1:
0b:3e:aa:0f:04:4f:2c:b2:fd:75:28:76:0e:5d:6f:
d3:ad:c0:dc:84:71:d2:f1:72:27:fe:07:27:70:8a:
b8:d1:1f:de:d0:6e:4a:42:74:ea:c1:f8:93:e9:5c:
0f:d6:8b:51:e0:47:2a:ba:cc:8c:9e:6f:fa:4e:e1:
b2:c4:f6:08:ae:fb:d8:82:53:0b:59:5a:3a:71:78:
1b:31:70:be:44:58:8c:20:3a:11:ab:08:1b:5d:21:
e4:d0:db:c1:20:fe:24:49:20:bc:ef:a6:ee:25:12:
1f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:74:FF:24:39:9F:C9:AB:39:38:12:4B:02:BB:A8:75:8A:6A:E2:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/f169cd3a-8ca9-330e-8642-a90f86a55c11.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.192.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:95:4c:88:2d:da:71:b6:2e:40:b3:e6:c0:bf:8e:83:4c:05:
63:e9:26:50:29:64:94:01:d5:8e:53:84:1b:ab:a3:7e:94:28:
c6:9d:ea:f1:08:88:03:07:e2:d5:32:5f:e1:3b:8a:65:6b:47:
ed:50:12:58:24:5a:fb:b0:41:43:95:a0:48:28:d9:ba:bb:6b:
83:ea:be:2d:ef:39:91:1a:16:a0:2d:6d:50:10:8e:5e:92:a8:
ed:d1:7c:bf:f9:3e:4b:ca:6b:cd:28:89:1a:f3:29:84:c6:62:
a0:95:d9:e7:a8:71:8c:bc:b9:e8:7c:ce:a2:c7:5a:e1:8e:5a:
a4:90:68:d4:13:73:23:8a:26:b8:c0:de:29:b1:e0:a1:0d:70:
81:f2:44:59:d7:58:bd:f5:91:1e:76:ef:49:0b:8c:a6:8f:06:
08:16:9b:ac:be:cc:fc:d1:d6:cd:e2:9d:41:47:af:b5:ed:ca:
97:05:44:d9:5e:b6:3d:3a:38:c8:bf:45:30:b1:7d:7c:15:bf:
fa:dc:16:71:6a:f1:3c:47:ff:69:12:0f:9e:06:f9:ff:a6:e1:
82:b2:40:2d:76:4a:a1:db:77:da:e0:e8:03:e8:58:6f:2c:d6:
67:68:38:67:00:81:c3:8b:4a:8a:c1:61:87:cb:1d:c9:2d:ef:
3c:3c:c0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:16:20 2025 by rpki-client