Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/b0de3829-996c-3682-a413-a04ea7aae3cd.roa
File: b0de3829-996c-3682-a413-a04ea7aae3cd.roa (raw, json)
Hash identifier: aIMXOXPhGfhwCbccsUq3BuXuBWuMncbKLbILBZUuglo=
Subject key identifier: DF:DD:92:FE:14:EF:63:2B:46:17:BB:29:9D:1F:24:4E:00:F2:21:EE
Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial: 010D0C9F43285847F84F7AC42104845C52EB7320
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/b0de3829-996c-3682-a413-a04ea7aae3cd.roa
Signing time: Sat 23 Nov 2024 02:00:28 +0000
ROA not before: Sat 23 Nov 2024 02:00:28 +0000
ROA not after: Fri 21 Feb 2025 02:00:28 +0000
asID: 396253
IP address blocks: 136.228.200.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f8:4f:7a:c4:21:04:84:5c:52:eb:73:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Validity
Not Before: Nov 23 02:00:28 2024 GMT
Not After : Feb 21 02:00:28 2025 GMT
Subject: CN=8f95bb2c-1bef-4bcd-809e-d1b15d02922d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:55:d4:aa:4e:dd:04:59:49:e0:ec:02:71:a6:
7e:e6:a1:5c:4c:e3:fa:24:e3:15:e2:3b:5b:b3:b9:
0b:ca:47:85:ca:50:6d:43:ba:e7:a0:48:2d:a7:f0:
c7:dd:ab:ac:94:6e:87:f1:ae:3a:4f:b5:85:43:77:
36:bd:ed:71:f6:c0:65:94:88:8d:65:64:e5:df:f5:
54:a9:ef:fe:f9:29:c2:72:29:9e:5b:2f:46:a7:ab:
cb:e3:d9:d5:29:af:92:de:be:32:2e:ce:2e:bc:7c:
db:12:4e:1f:11:a7:f2:4d:61:d5:c9:9e:8a:9a:d7:
6c:b3:9e:f5:3c:cc:b2:41:7a:49:15:51:f9:42:97:
3f:90:c6:f5:cf:c0:de:45:c6:42:34:2a:4f:af:36:
dd:2c:a6:51:33:48:22:3c:69:d7:e6:7a:a2:c7:36:
4e:f5:80:e0:a4:f5:8a:44:47:b2:04:ec:68:78:bf:
ca:f1:50:03:54:15:b9:00:48:76:01:22:53:0f:a0:
74:a9:74:bd:d2:b3:3a:70:19:97:cf:89:17:85:a8:
b6:69:86:be:2c:b5:82:01:53:c7:ee:f3:0d:82:21:
25:44:2d:85:4f:b8:89:8e:9c:37:d1:7a:ca:8c:2f:
59:f7:03:5f:50:db:f7:28:53:e1:a6:5d:67:31:1c:
26:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:DD:92:FE:14:EF:63:2B:46:17:BB:29:9D:1F:24:4E:00:F2:21:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/b0de3829-996c-3682-a413-a04ea7aae3cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
X509v3 Authority Key Identifier:
keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
sbgp-ipAddrBlock: critical
IPv4:
136.228.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:ce:df:06:d8:3f:93:20:7e:f2:b8:f1:75:9d:30:1a:40:d7:
84:9d:ab:a2:d4:7a:13:c8:be:29:c9:db:84:19:f0:b2:48:81:
8f:3a:ef:49:cc:2a:4e:28:5c:a0:99:c7:17:f3:7f:aa:cd:59:
31:31:52:e3:6f:8d:fe:7c:85:a8:1f:ec:82:c6:72:00:33:96:
46:eb:0f:98:89:3e:e7:41:33:91:95:2e:91:f6:8f:49:0f:7e:
25:6a:e8:18:ea:13:f2:33:71:e0:bd:b3:c4:d9:a4:cf:b3:f6:
a3:ce:05:48:a1:7c:a2:7f:fa:37:b9:cd:8a:94:4e:0b:7b:54:
59:68:a0:e3:b0:0b:e9:f9:ee:ec:dc:4b:04:75:9d:59:61:94:
af:40:0b:11:1e:b9:a8:f3:f6:0e:07:e5:10:eb:ce:80:4b:cd:
e4:89:fa:bc:36:84:23:25:bb:05:60:98:cd:43:79:8d:92:3a:
05:22:45:64:66:0c:ea:d5:a9:50:a6:cb:d8:40:a5:b8:ec:32:
0a:32:8c:41:58:64:26:5b:01:19:31:a1:8a:b5:b2:b9:58:86:
ba:4c:5f:b4:02:c2:40:7f:dd:91:9a:c9:d7:58:e3:3b:53:d6:
a0:1b:69:78:f1:96:61:ba:f7:73:60:0b:5e:3b:f3:bb:af:16:
10:40:d3:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:56:14 2025 by rpki-client