Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/903f8e05-f3a5-4300-8c04-39c3103ddccb/baa67771-dc3e-3be1-a4f0-fa51b81508c7.roa
File: baa67771-dc3e-3be1-a4f0-fa51b81508c7.roa (raw, json)
Hash identifier: Ra6qVrvElDpvBTXYhiYRZ6+qdhUX9yJMaBNYlIK5cxU=
Subject key identifier: 2F:BA:EE:D3:A6:0A:2A:4E:2D:5A:AA:F2:40:5E:9D:D4:7D:36:36:CD
Certificate issuer: /CN=903f8e05-f3a5-4300-8c04-39c3103ddccb
Certificate serial: 010D0C9F432858488815E48E96CE66E36391CE40
Authority key identifier: 5E:D8:BC:5A:D1:72:8D:9B:80:AE:17:1A:F1:02:3C:5E:0D:E1:71:69
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/903f8e05-f3a5-4300-8c04-39c3103ddccb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/903f8e05-f3a5-4300-8c04-39c3103ddccb/baa67771-dc3e-3be1-a4f0-fa51b81508c7.roa
Signing time: Mon 13 Jan 2025 14:00:52 +0000
ROA not before: Mon 13 Jan 2025 14:00:52 +0000
ROA not after: Sun 13 Apr 2025 13:00:52 +0000
asID: 32281
IP address blocks: 136.175.228.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:88:15:e4:8e:96:ce:66:e3:63:91:ce:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=903f8e05-f3a5-4300-8c04-39c3103ddccb
Validity
Not Before: Jan 13 14:00:52 2025 GMT
Not After : Apr 13 13:00:52 2025 GMT
Subject: CN=cd1d5d0c-2cf3-447d-a314-0842a701239e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9c:38:c1:c2:5d:b8:3b:d3:6d:cb:8d:4d:75:
ce:d5:88:50:85:10:1f:f7:30:b9:52:6c:4e:9d:a4:
2b:a2:81:8d:ca:49:95:19:9f:b2:6f:50:03:7b:87:
58:28:74:c1:e6:80:5c:08:33:48:3b:56:db:5b:c6:
eb:84:06:c6:8a:a8:a8:31:14:fa:48:18:88:d5:3c:
f1:3d:a0:5d:fd:d7:04:62:bb:9c:16:ba:fc:e7:3e:
af:a0:c5:3d:e9:9d:63:63:0c:8d:cc:71:6b:a4:4b:
38:67:ef:5f:eb:3a:73:e0:c6:4c:05:22:5d:46:4f:
30:fd:92:ef:97:83:15:07:12:35:a8:e6:87:58:52:
94:00:87:c3:b1:5e:56:55:b9:d5:64:ca:69:2d:b9:
9e:30:ea:eb:b5:43:14:7c:34:72:e2:05:8b:98:8a:
80:a1:dc:ea:7d:e5:51:86:27:15:b1:fc:95:00:de:
a1:79:46:75:b2:e4:bd:9c:71:17:c8:06:b6:12:ae:
5c:d6:75:ce:b0:3d:b9:82:50:d5:68:a6:78:6b:2c:
ae:b0:ce:0a:a1:a0:49:ed:58:3e:67:2f:40:4f:e4:
52:15:c9:c3:1d:42:4d:80:d9:9a:7f:ef:cf:e9:5d:
77:9f:7a:b9:09:89:32:b2:da:d1:18:9f:d3:d5:2c:
72:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:BA:EE:D3:A6:0A:2A:4E:2D:5A:AA:F2:40:5E:9D:D4:7D:36:36:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/903f8e05-f3a5-4300-8c04-39c3103ddccb/baa67771-dc3e-3be1-a4f0-fa51b81508c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/903f8e05-f3a5-4300-8c04-39c3103ddccb/903f8e05-f3a5-4300-8c04-39c3103ddccb.crl
X509v3 Authority Key Identifier:
keyid:5E:D8:BC:5A:D1:72:8D:9B:80:AE:17:1A:F1:02:3C:5E:0D:E1:71:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/903f8e05-f3a5-4300-8c04-39c3103ddccb.cer
sbgp-ipAddrBlock: critical
IPv4:
136.175.228.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:82:33:a2:ab:08:59:69:4f:d9:bb:35:41:10:a1:95:dc:18:
9f:09:96:07:c3:b3:93:19:a2:00:eb:37:1e:07:de:38:b7:c3:
46:34:f2:be:65:b4:d8:97:c1:8b:94:d8:6d:fb:a8:f7:a4:61:
f6:72:13:a8:c2:66:af:15:76:f9:18:45:8b:14:1d:b4:92:3f:
f8:ba:b8:f2:73:76:00:94:c4:44:1a:38:a3:13:8d:73:1b:14:
5c:03:36:72:74:dd:d4:18:53:a0:40:2e:fa:63:1e:6d:a8:b8:
8d:44:6e:01:7e:0c:6f:b9:6b:15:bb:1f:a7:22:45:1f:64:8a:
f9:b5:cc:b2:64:80:34:a0:cf:3d:03:da:74:d6:f3:49:e8:31:
e0:01:5c:e9:f9:21:61:ba:8a:7d:50:1b:29:ad:9f:5f:6d:fa:
b3:bb:d5:c4:15:f3:53:23:fa:a6:0b:dc:22:6d:5d:d4:c5:c4:
ac:d5:ae:9b:0d:05:a4:3c:89:ee:88:8b:89:ff:6b:5b:6a:fe:
0f:48:a5:0d:b0:10:50:d1:ff:8c:69:62:49:53:df:73:83:06:
a0:96:a1:57:a5:cc:7c:95:18:ec:ca:2e:60:ed:ae:e8:a4:4d:
47:4f:63:bd:c2:8a:cb:51:ac:02:0e:9d:d8:44:45:29:78:91:
98:b3:6a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:57:03 2025 by rpki-client