Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/8c882cc2-406d-3017-8300-39c36de0cee6.roa
File: 8c882cc2-406d-3017-8300-39c36de0cee6.roa (raw, json)
Hash identifier: 1NV8ENjtU56RRN8mQVWcE8OSzFyZKVNonImPHj1jCG0=
Subject key identifier: 0F:8E:B2:5D:F0:6D:0F:B9:14:1A:E0:91:CA:69:07:8B:2F:45:C0:01
Certificate issuer: /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial: 010D0C9F432858491AA6D30B88C3B80A92AA6DE0
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/8c882cc2-406d-3017-8300-39c36de0cee6.roa
Signing time: Fri 07 Mar 2025 02:00:39 +0000
ROA not before: Fri 07 Mar 2025 02:00:39 +0000
ROA not after: Thu 05 Jun 2025 01:00:39 +0000
asID: 15169
IP address blocks: 136.22.160.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1a:a6:d3:0b:88:c3:b8:0a:92:aa:6d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Validity
Not Before: Mar 7 02:00:39 2025 GMT
Not After : Jun 5 01:00:39 2025 GMT
Subject: CN=02386626-8380-455b-a1de-c641e4fefe83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4e:54:c9:8c:7d:86:d5:27:cf:4e:77:b8:e0:
fa:d3:1e:b3:0b:be:4a:96:7c:b0:cf:ba:2c:6a:cb:
da:3f:1c:a9:1f:c1:2e:84:95:e3:41:97:f2:17:3d:
2a:3e:35:10:ce:01:d8:d8:98:79:55:bb:d0:cc:a9:
a7:e3:9f:4c:7b:a3:07:39:2e:b0:9a:09:af:b9:50:
59:26:18:d1:65:49:bb:38:a1:cb:98:4d:d1:e7:82:
79:4b:11:0b:7c:44:a1:aa:df:fe:05:9f:d5:20:09:
6e:ce:a2:e4:ee:70:e9:6a:23:33:dd:cf:c4:0a:4b:
60:b1:05:20:36:31:0d:ec:8f:0d:e4:37:5b:44:3e:
63:7c:80:2e:b1:c7:20:85:ad:a4:ce:35:40:7a:5c:
65:88:77:c3:c0:ec:d2:99:00:73:70:51:5f:58:de:
17:8e:d2:cb:d7:c5:0c:15:33:94:d6:ab:e9:aa:18:
77:71:bf:06:34:b8:13:e9:77:e3:d9:48:bf:09:59:
79:d0:a3:51:8f:e1:a9:9a:b1:10:11:7b:a7:57:59:
ba:8e:7b:0b:d5:6b:94:f1:df:9e:25:21:b6:4b:3f:
58:ba:aa:ef:cc:23:6d:2f:2b:a3:24:df:13:70:7c:
36:02:c8:ce:70:65:c5:09:09:5d:47:6d:3b:57:41:
80:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:8E:B2:5D:F0:6D:0F:B9:14:1A:E0:91:CA:69:07:8B:2F:45:C0:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/8c882cc2-406d-3017-8300-39c36de0cee6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
X509v3 Authority Key Identifier:
keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:11:3f:bc:73:23:90:18:d4:62:74:af:76:75:55:c0:e1:86:
e4:19:55:2e:b5:f4:f1:89:a7:ed:38:7c:76:87:39:30:30:bb:
d2:4b:44:86:ee:04:b7:3a:67:50:3f:9d:b0:c6:bf:d2:a1:d7:
1e:21:4d:c3:b7:5a:c4:66:43:b2:54:be:49:ed:ac:75:ca:04:
d4:50:80:23:e8:5f:ab:54:12:f8:52:7a:76:75:c8:0b:1f:c2:
12:09:57:f1:a4:9e:b2:38:fc:ba:8c:b7:51:ad:f9:e7:90:e2:
ea:2d:39:f6:bc:50:b6:d3:4f:77:05:64:cf:ee:17:53:e3:85:
ae:b9:aa:96:ad:e7:2d:80:d6:e0:35:19:c9:de:86:50:74:18:
ae:7b:eb:ef:be:74:9e:c1:a2:fd:02:cf:ee:ad:1e:28:20:2a:
e2:66:35:b9:a5:5b:8c:75:43:86:ea:06:32:e8:e8:f3:fb:32:
48:2f:b8:ef:11:2c:75:7c:57:75:0a:49:06:ab:11:2d:92:12:
9b:b1:3d:56:0c:e6:06:ce:93:db:bb:1f:41:17:6d:2d:18:ac:
57:d4:4f:18:21:54:ed:60:f5:8f:39:3b:22:28:e0:f0:48:6e:
d2:1c:c2:80:9c:be:1b:70:e6:78:ad:d5:56:cf:39:d2:50:ba:
86:ce:ba:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:51:35 2025 by rpki-client