Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/0ae15d49-e513-3745-b3f9-66ebc64a2b4e.roa
File: 0ae15d49-e513-3745-b3f9-66ebc64a2b4e.roa (raw, json)
Hash identifier: b3sXpqUiaGzxm6pwmQxgr+cMjithFuip1NovyVYZEWY=
Subject key identifier: F0:A0:5A:54:6D:3F:03:35:86:6D:3C:7D:49:B1:E9:72:2E:DC:C4:69
Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial: 010D0C9F432858486EF5BE3BC046CD5D8F659280
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/0ae15d49-e513-3745-b3f9-66ebc64a2b4e.roa
Signing time: Sat 04 Jan 2025 14:00:51 +0000
ROA not before: Sat 04 Jan 2025 14:00:51 +0000
ROA not after: Fri 04 Apr 2025 13:00:51 +0000
asID: 202276
IP address blocks: 136.228.221.0/24 maxlen: 24
136.228.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6e:f5:be:3b:c0:46:cd:5d:8f:65:92:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Validity
Not Before: Jan 4 14:00:51 2025 GMT
Not After : Apr 4 13:00:51 2025 GMT
Subject: CN=a256f979-3cce-4ba2-a7c6-cd191bcc6703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:8b:92:ad:0f:4e:b9:d6:60:27:b0:fd:7f:58:
40:3c:78:08:4c:e6:a1:18:ce:2c:53:2b:79:16:c7:
22:37:d1:f6:b1:36:c4:85:cc:b1:18:3a:fb:2e:46:
2d:88:42:d0:9c:a1:b6:7d:34:71:4d:1c:1b:8d:0e:
ae:bd:c4:8f:97:41:78:a1:fc:1b:f3:d1:84:f9:8a:
a6:5e:2d:03:63:0d:3c:93:92:8e:16:94:d8:03:04:
b4:33:13:b3:02:6d:74:f3:22:81:76:9b:84:9a:ad:
1c:3c:c0:35:cc:13:1d:44:18:bb:9f:a3:de:1a:85:
6a:a8:35:3d:18:0c:32:1f:6f:1e:e3:d4:cb:57:40:
c7:74:c8:8b:74:ea:27:b7:66:54:b0:58:2f:34:ea:
45:c8:59:51:3f:19:03:93:dc:80:88:f4:e9:47:6b:
18:39:3c:19:a1:f1:d5:61:cd:66:ea:69:5f:2c:e0:
48:62:d8:3d:b9:3b:b0:ac:40:55:2c:5a:76:5f:bc:
09:51:37:8f:88:78:93:f2:16:cf:ef:7a:8a:7a:de:
be:01:4f:a2:cd:ce:a4:f2:de:42:23:26:2d:a0:57:
a0:14:37:1d:48:8e:e0:60:1b:c0:aa:f3:7d:61:97:
d6:36:ef:62:d4:21:c0:96:be:5d:48:1d:c3:b7:6d:
f5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A0:5A:54:6D:3F:03:35:86:6D:3C:7D:49:B1:E9:72:2E:DC:C4:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/0ae15d49-e513-3745-b3f9-66ebc64a2b4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
X509v3 Authority Key Identifier:
keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
sbgp-ipAddrBlock: critical
IPv4:
136.228.221.0/24
136.228.240.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:36:e3:d7:1d:b2:55:31:91:97:20:6f:f5:fd:6d:be:1c:00:
c0:77:c4:75:a5:32:7a:8e:93:84:db:1c:b8:09:65:c5:25:40:
8c:52:13:9f:4c:3c:14:61:55:4b:a0:c4:ef:e3:8f:e6:dd:47:
6a:b1:46:29:7f:80:a3:51:4e:58:9d:c3:4b:d4:9f:0e:be:e2:
9c:30:9a:6b:ac:0f:a3:72:74:1f:a2:54:40:f4:a4:7b:ef:7d:
4c:a5:d3:27:ce:b1:42:11:dc:10:b2:ad:96:9d:d3:db:04:5e:
13:29:20:ba:2f:77:ee:47:89:f3:a7:04:51:7f:1e:87:3b:f8:
74:ea:ff:cc:fd:51:3f:ad:ab:a4:c1:ed:54:73:6d:27:d4:bc:
63:02:9c:e2:af:d9:64:eb:45:03:99:93:31:e2:16:22:f7:f1:
db:1a:3c:98:1c:48:b0:2d:2a:3b:e5:97:3e:d2:4a:e8:e1:a3:
ff:aa:26:25:49:1e:03:79:41:c6:9a:5a:0e:5d:0a:7b:ca:4e:
de:31:90:fa:a5:6d:29:43:9d:ad:30:f3:8f:f7:99:f9:7e:61:
57:d9:d5:50:16:96:90:f4:9e:33:5d:76:e1:e9:ea:eb:90:d0:
82:1a:e7:7f:23:f4:4b:e7:ba:6d:d5:dc:49:a9:a4:a8:3e:13:
15:30:14:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:59:23 2025 by rpki-client