Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/9abeb351-ad7a-33a7-8821-218970296a71.roa
File: 9abeb351-ad7a-33a7-8821-218970296a71.roa (raw, json)
Hash identifier: vdIRzqz+Ajfft9Bw8WSacbu2XCdzFaHs6FrphesNe0s=
Subject key identifier: 5B:EE:98:EE:66:02:D8:E6:7B:C1:30:70:54:23:B4:7E:6F:5B:95:59
Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial: 010D0C9F43285848A1360CB5D2D1AE15E20A9180
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/9abeb351-ad7a-33a7-8821-218970296a71.roa
Signing time: Wed 22 Jan 2025 14:00:52 +0000
ROA not before: Wed 22 Jan 2025 14:00:52 +0000
ROA not after: Tue 22 Apr 2025 13:00:52 +0000
asID: 16509
IP address blocks: 136.226.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:36:0c:b5:d2:d1:ae:15:e2:0a:91:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Validity
Not Before: Jan 22 14:00:52 2025 GMT
Not After : Apr 22 13:00:52 2025 GMT
Subject: CN=de5661f8-9810-4249-b6d2-75ed538e559c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a6:b0:27:57:36:b2:dc:e7:3b:fa:5a:ba:57:
01:22:b6:b3:fd:6c:53:ab:7f:fa:eb:23:03:0e:9e:
ea:99:c2:26:dc:56:29:b7:b2:98:e5:7c:e0:29:85:
fa:98:c9:ed:49:4a:f7:f0:ff:1b:55:a2:e3:d9:c8:
c2:fa:2a:c4:d1:14:59:1f:22:d8:2f:2b:19:fb:03:
89:5d:02:58:24:7c:e2:3b:c3:e7:ec:39:50:14:a4:
80:68:38:23:c7:5f:48:c6:23:0d:47:7f:6c:34:cd:
70:ac:c4:34:4b:85:be:57:48:18:33:f1:f3:6a:36:
de:07:54:32:f7:6c:97:41:cb:4f:5f:66:28:2d:ea:
46:f5:33:3b:a8:f6:bd:03:ac:3b:7c:11:8c:b5:b9:
4d:29:42:3f:39:78:8b:a3:af:d3:0c:3b:1c:bc:5d:
1c:c0:f9:69:04:5f:21:05:b1:2b:a7:9c:87:d4:70:
f6:86:8b:58:2a:34:30:0f:65:48:bb:e6:54:13:58:
ff:e6:1b:41:57:fb:c3:80:8c:27:41:ec:01:3b:7b:
2d:f4:0b:11:5c:a9:97:0f:30:9d:1e:16:b6:af:e0:
f4:77:a0:c7:f5:bc:b2:d5:2e:5a:08:08:37:75:0d:
2d:4b:5b:a5:55:51:99:36:ea:8b:d9:39:61:40:80:
0c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:EE:98:EE:66:02:D8:E6:7B:C1:30:70:54:23:B4:7E:6F:5B:95:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/9abeb351-ad7a-33a7-8821-218970296a71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
X509v3 Authority Key Identifier:
keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
sbgp-ipAddrBlock: critical
IPv4:
136.226.219.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:b7:56:a9:89:b7:8f:80:04:e0:fa:d1:a9:08:49:3c:02:0d:
e4:45:26:4a:ca:02:54:42:38:cd:81:0f:e9:12:05:f2:50:b7:
af:03:91:a7:96:a3:a8:95:92:8f:18:e4:40:51:d4:7b:17:a7:
21:ce:ff:97:85:73:73:90:aa:9c:89:39:d5:ef:ae:59:98:70:
d6:d3:eb:bd:e5:c8:25:65:ed:40:0f:97:16:96:7b:30:80:43:
b4:ca:9b:ad:27:fc:0d:6f:e1:7a:84:47:4a:b0:76:cb:91:13:
52:df:b3:a6:ae:38:01:1c:2b:d2:bc:b5:e2:a0:a0:13:9a:e7:
d4:01:91:36:00:f3:29:4e:40:be:9d:75:64:3d:e8:c6:c2:71:
01:92:62:1f:6e:e6:a0:da:be:dc:7b:0b:74:f1:c4:d5:4d:d9:
28:ce:22:c8:d3:a6:c0:a1:00:33:0d:b0:2a:55:4a:f8:cc:3e:
95:81:93:be:53:1b:de:b9:48:35:7a:fb:e4:a7:aa:7b:68:05:
c7:66:eb:85:44:0c:df:bc:4a:1f:c4:f3:ef:16:53:7a:b6:de:
80:fd:1b:21:d3:da:cd:49:07:a7:e6:90:3b:a2:0c:45:b6:8f:
d8:ce:3f:1d:84:74:25:d3:51:c6:bb:67:73:a8:21:0f:44:2a:
f7:1a:92:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:11:42 2025 by rpki-client