Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/80a5fef1-d368-337d-a043-77c11e4d550e.roa
File: 80a5fef1-d368-337d-a043-77c11e4d550e.roa (raw, json)
Hash identifier: CyAk1AJ8LwCmN9CckYxho5E26/VqqsLiIg4z/uNwnT0=
Subject key identifier: C9:EA:1F:0E:3F:58:CE:83:81:98:CD:FF:7C:B7:59:BD:E2:E1:15:FC
Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial: 010D0C9F43285848828088E8D15B2FCD04F97C00
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/80a5fef1-d368-337d-a043-77c11e4d550e.roa
Signing time: Sat 11 Jan 2025 14:00:52 +0000
ROA not before: Sat 11 Jan 2025 14:00:52 +0000
ROA not after: Fri 11 Apr 2025 13:00:52 +0000
asID: 396253
IP address blocks: 136.228.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:82:80:88:e8:d1:5b:2f:cd:04:f9:7c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Validity
Not Before: Jan 11 14:00:52 2025 GMT
Not After : Apr 11 13:00:52 2025 GMT
Subject: CN=993116bc-83dc-4093-9cd0-017aeb035474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ce:d6:bc:77:9c:c6:83:5d:00:85:51:65:4c:
84:89:de:35:10:e8:29:1e:cf:e5:bd:7f:61:d9:7e:
83:3e:7c:02:aa:f6:0c:fa:c6:11:91:2c:87:ff:fb:
2e:f0:f0:fa:b1:88:b5:b1:ce:c7:04:1a:f7:39:ed:
17:79:c3:1d:7c:e8:8e:97:f1:ff:b8:6b:2a:3b:62:
1a:bc:25:02:28:c2:1a:6f:00:76:2e:9c:b4:7f:10:
4d:82:2f:46:7c:be:b1:60:c2:bc:f7:54:b5:07:f8:
43:ef:3c:62:ee:a8:71:73:eb:57:04:c0:77:b7:f0:
4b:07:0f:b6:c7:c9:5e:b1:9e:54:c6:69:39:1d:9b:
2a:83:0a:67:b3:e8:a6:a4:51:51:b2:46:24:c9:29:
4c:99:c0:aa:0f:15:e5:f3:57:2d:4a:c8:f1:2d:3b:
db:6b:fa:1e:3a:36:d5:f9:9b:99:32:88:0e:ee:02:
b2:fb:5c:59:47:62:a9:26:8c:78:6e:70:27:c5:47:
ba:07:16:aa:0b:4c:2e:cd:5c:eb:ae:a1:e6:a0:36:
a9:08:ac:44:0d:fa:23:93:b6:58:4b:24:53:b0:b3:
99:ed:7d:19:38:09:08:2e:dc:cf:a9:ee:6a:6c:9c:
9e:27:02:dc:2e:57:13:7f:f4:85:4f:f3:c0:e3:e2:
e4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:EA:1F:0E:3F:58:CE:83:81:98:CD:FF:7C:B7:59:BD:E2:E1:15:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/80a5fef1-d368-337d-a043-77c11e4d550e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
X509v3 Authority Key Identifier:
keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
sbgp-ipAddrBlock: critical
IPv4:
136.228.242.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:5f:9b:fb:9f:d4:79:a2:ef:3c:1f:ce:6f:10:c0:ea:49:a7:
c1:67:0b:6e:8e:2a:87:c4:77:6f:3a:dc:d4:64:6f:75:59:1a:
76:80:28:1d:5c:ba:9b:42:21:52:48:fe:c2:46:10:a1:d0:22:
08:b8:b0:63:c4:95:58:7d:c8:cf:75:06:67:b4:29:2a:ce:af:
db:3b:e8:93:bd:42:44:de:b3:65:7e:99:86:79:ea:7b:ac:1a:
de:d6:47:41:38:86:0e:b7:77:8e:50:8f:4e:09:26:04:96:52:
d2:3e:1f:9d:f6:f5:c0:24:39:35:92:7d:99:e5:68:18:61:df:
ef:7e:63:10:9f:9e:52:26:fd:fc:b6:ff:ba:2a:4e:9b:b5:64:
4f:b5:fd:fe:a9:6b:65:82:d2:7a:1d:f9:66:70:aa:20:9e:81:
88:a9:32:98:aa:b0:42:7f:09:22:71:a7:60:27:87:01:64:b8:
f9:a6:0f:93:9a:3b:34:91:36:0d:f4:27:26:aa:f3:56:28:1d:
80:38:cf:f2:59:eb:a3:b6:35:18:b7:24:b5:4f:98:8e:82:22:
8e:d5:bb:17:76:f9:b2:b7:fe:09:17:94:f8:f7:b2:9b:8e:94:
8c:b1:67:0d:82:9b:75:b4:af:5f:4c:dd:d0:22:c8:ce:65:9f:
ea:53:fc:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:14:58 2025 by rpki-client