Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/523c1c5b-45fc-3345-b9c8-bd62476a96a3.roa
File: 523c1c5b-45fc-3345-b9c8-bd62476a96a3.roa (raw, json)
Hash identifier: JU+jC1p9OY2MeFSHJf6mkLWm+AB8R1QF7wYskJBx1zc=
Subject key identifier: CA:83:E6:57:3F:CB:52:F9:9C:BD:1C:02:93:8B:32:AF:27:18:5B:A9
Certificate issuer: /CN=552db743-b442-4066-8e02-0dcd47471dce
Certificate serial: 010D0C9F432858489BA0AE4AFBD16AAEA11A5980
Authority key identifier: EA:6D:22:E3:E4:B1:9D:DB:DA:CB:F0:E2:93:B0:18:81:E9:3F:99:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/523c1c5b-45fc-3345-b9c8-bd62476a96a3.roa
Signing time: Mon 20 Jan 2025 14:00:51 +0000
ROA not before: Mon 20 Jan 2025 14:00:51 +0000
ROA not after: Sun 20 Apr 2025 13:00:51 +0000
asID: 211373
IP address blocks: 136.175.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9b:a0:ae:4a:fb:d1:6a:ae:a1:1a:59:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552db743-b442-4066-8e02-0dcd47471dce
Validity
Not Before: Jan 20 14:00:51 2025 GMT
Not After : Apr 20 13:00:51 2025 GMT
Subject: CN=37596bee-ded9-47e9-bbf2-f6f441a049b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:15:27:11:d9:b2:1f:39:7c:68:dc:bf:4d:72:
6b:26:76:80:06:6f:f1:aa:08:b2:cb:2d:c3:73:21:
56:e7:4c:43:cb:78:19:ca:77:c9:b5:49:88:94:76:
f9:4d:df:fd:9a:27:f2:4e:73:de:55:72:ad:47:d7:
47:f6:69:b7:d3:d0:b7:ef:7a:d2:dc:ed:b8:a4:c7:
f4:5a:e7:e4:25:d9:58:d4:24:75:81:e2:08:0d:2a:
52:2d:17:4f:19:72:39:c2:aa:49:43:ec:0d:c9:1f:
d7:8c:f7:4c:2c:2e:14:7f:d4:26:ec:d8:df:ee:d3:
4e:96:75:19:15:23:d3:3a:f2:f9:fb:d8:ed:b9:3f:
a7:45:7a:a8:23:30:00:60:be:4b:89:b3:f3:e0:37:
0f:04:c8:0a:51:f8:c3:e5:f8:8a:4d:fb:bd:66:17:
07:b1:90:07:fd:d7:40:e7:8b:46:09:3f:ab:a9:cc:
55:47:d7:9b:1e:d1:c4:a9:75:77:07:35:f4:74:6b:
89:92:a3:a4:ca:71:b5:d0:d8:8b:7f:18:fc:11:da:
09:4a:5a:35:f3:40:fe:49:6b:5a:64:bc:6a:ac:32:
c5:bc:dd:36:2f:b4:79:d3:1e:79:50:da:1a:20:44:
0f:c2:74:c1:fd:5f:48:b3:14:c7:35:8f:36:e9:8d:
89:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:83:E6:57:3F:CB:52:F9:9C:BD:1C:02:93:8B:32:AF:27:18:5B:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/523c1c5b-45fc-3345-b9c8-bd62476a96a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/552db743-b442-4066-8e02-0dcd47471dce.crl
X509v3 Authority Key Identifier:
keyid:EA:6D:22:E3:E4:B1:9D:DB:DA:CB:F0:E2:93:B0:18:81:E9:3F:99:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce.cer
sbgp-ipAddrBlock: critical
IPv4:
136.175.224.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:c9:9c:2f:a1:22:d0:0f:ca:ec:0b:84:0e:59:05:b2:4a:af:
dd:43:fc:7a:41:14:83:e4:56:94:50:94:86:81:57:0d:bc:af:
23:c8:ee:1e:27:35:89:b5:14:15:ae:3f:79:a9:52:7f:3c:42:
46:b4:cb:0c:39:dc:98:7b:f1:46:07:ff:28:48:16:2d:ae:4e:
e4:1d:58:a5:87:9f:61:9b:83:4e:21:70:47:6f:db:0c:2c:a4:
82:78:0a:16:ab:fd:59:c4:6f:2d:60:0c:29:0e:e6:62:ee:49:
db:67:74:f7:7d:0a:86:af:4a:09:b9:0a:e0:35:28:f6:01:1e:
75:10:66:3c:4d:dd:34:ec:4e:ce:13:bd:ea:13:40:dd:4b:27:
18:77:a1:db:21:34:d6:c3:64:f2:cd:5e:51:17:61:82:e3:ff:
bc:87:6f:59:b4:63:0c:a1:61:e8:c8:5f:1d:93:da:0b:fe:2e:
28:fe:c4:d0:02:41:c4:f3:69:b2:5f:61:c5:85:98:77:d3:e3:
c0:1b:6d:6b:43:cb:b4:f9:15:b8:bd:1a:16:30:96:da:02:c5:
51:d6:68:70:db:43:43:d9:c9:d6:f4:fc:58:b7:0e:d6:13:4e:
38:5e:64:83:99:3e:b4:7b:d6:4e:10:e4:3b:d5:5a:3d:5e:f4:
50:05:d6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:36:59 2025 by rpki-client