Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/4a9f5ff0-0287-321a-ab20-5528fdc1b6a8.roa
File: 4a9f5ff0-0287-321a-ab20-5528fdc1b6a8.roa (raw, json)
Hash identifier: KxoXGnW40zC3aavDNJjf1fPg6v4BJ9BWpos5Ap4pmEE=
Subject key identifier: 1D:49:F0:42:3A:83:01:F3:45:A1:16:75:35:2B:AD:29:2C:7C:CF:FF
Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial: 010D0C9F4328584882808C1FBB0BEE2141595980
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/4a9f5ff0-0287-321a-ab20-5528fdc1b6a8.roa
Signing time: Sat 11 Jan 2025 14:00:52 +0000
ROA not before: Sat 11 Jan 2025 14:00:52 +0000
ROA not after: Fri 11 Apr 2025 13:00:52 +0000
asID: 137922
IP address blocks: 136.228.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:82:80:8c:1f:bb:0b:ee:21:41:59:59:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Validity
Not Before: Jan 11 14:00:52 2025 GMT
Not After : Apr 11 13:00:52 2025 GMT
Subject: CN=82a365af-c245-48e2-8b9b-f4e679032775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8d:31:47:91:9d:92:3c:05:e9:f8:d2:bb:39:
16:5d:da:86:3c:0f:b2:c2:72:fa:b6:8d:ee:4e:ea:
fe:b8:83:57:91:af:52:48:53:21:ac:61:e4:1a:17:
f8:e5:85:76:d9:5a:89:24:4e:e8:f5:4f:53:f3:09:
b0:99:9f:56:71:98:26:c2:2b:bf:47:03:11:93:21:
5e:2e:8b:96:6d:5d:0a:9d:be:4a:7a:a7:a2:33:39:
bb:b0:be:af:a6:fd:af:99:a2:aa:70:79:2c:0e:b2:
b0:8c:8b:25:fe:32:9c:1b:4e:f9:8a:3b:db:42:44:
a3:09:04:54:c5:20:1a:16:bf:0a:e2:78:b8:c2:03:
e5:71:57:35:4a:20:ae:e8:90:d6:14:20:d1:61:3d:
88:63:12:94:61:3f:c3:57:06:dc:4f:12:eb:78:3d:
40:59:96:b3:dc:67:6c:cf:8d:2e:76:60:f3:20:7a:
ec:d9:6a:4e:1a:3a:42:e4:98:08:db:25:70:00:52:
82:19:3d:f4:4c:dd:74:9e:c9:98:70:7a:ee:ab:7b:
fd:0d:04:f5:51:6c:5f:5c:eb:e5:f4:1f:9a:ec:13:
aa:47:f1:5c:31:87:89:c2:d4:22:8a:1a:29:d7:34:
91:a4:ba:76:5d:de:7c:e0:c4:d5:18:7b:7c:ee:11:
4a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:49:F0:42:3A:83:01:F3:45:A1:16:75:35:2B:AD:29:2C:7C:CF:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/4a9f5ff0-0287-321a-ab20-5528fdc1b6a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
X509v3 Authority Key Identifier:
keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
sbgp-ipAddrBlock: critical
IPv4:
136.228.216.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:f0:39:2a:fc:e7:e3:2f:6d:b7:af:8e:28:29:90:9b:4a:20:
c1:8f:3f:79:58:5c:02:c1:32:ff:06:01:18:0a:e7:93:53:c5:
0b:aa:9c:c5:c8:ab:92:32:20:c9:e6:69:33:7c:23:64:90:46:
31:8a:8a:ae:c4:50:ab:6c:94:c4:53:5b:37:68:2d:32:26:3d:
16:e6:e8:f2:1f:d8:13:52:51:db:50:c0:27:53:2d:d2:47:30:
3e:8b:f3:e0:7b:75:d7:02:4a:61:9a:c1:e8:11:a8:f1:2b:f3:
de:7b:a8:2f:f7:00:6c:52:29:9a:5a:3d:01:17:db:a8:54:20:
47:e9:2e:05:0c:ab:d7:c5:6d:d6:be:ad:59:31:f2:50:8d:62:
b7:12:f3:7c:28:72:31:b4:54:37:c6:cd:fa:f6:27:b6:9e:32:
3d:a0:09:b3:e6:89:b4:0c:09:16:d8:81:c6:9b:8d:7d:5c:57:
85:db:ee:5c:3b:f4:af:c3:09:8c:c9:f4:77:3e:1d:f6:21:c3:
16:3a:5d:c3:ca:ce:21:7d:80:3d:3a:97:10:2e:43:f4:34:89:
67:a3:f6:cd:ce:2c:e3:07:3e:3a:43:c0:92:ac:c0:f6:d7:0d:
02:2f:98:78:cb:b7:79:0b:a8:a1:94:2b:df:71:02:59:c0:1d:
f7:8c:e1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:57:23 2025 by rpki-client