Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/33af6a38-02b6-3f92-bf22-40f73c436cc1.roa
File: 33af6a38-02b6-3f92-bf22-40f73c436cc1.roa (raw, json)
Hash identifier: 1tTKmgWB/hKQwLwhpsPTXI6iXzrZ9Pu/ZCojfh0emo8=
Subject key identifier: 0C:49:F2:50:B7:98:AE:18:C0:31:29:B8:70:40:A7:98:FF:FC:B4:AE
Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial: 010D0C9F43285847E094DC3F7924EFD494046B80
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/33af6a38-02b6-3f92-bf22-40f73c436cc1.roa
Signing time: Thu 14 Nov 2024 14:00:40 +0000
ROA not before: Thu 14 Nov 2024 14:00:40 +0000
ROA not after: Wed 12 Feb 2025 14:00:40 +0000
asID: 36040
IP address blocks: 136.22.136.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e0:94:dc:3f:79:24:ef:d4:94:04:6b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Validity
Not Before: Nov 14 14:00:40 2024 GMT
Not After : Feb 12 14:00:40 2025 GMT
Subject: CN=5a6ae321-143d-49c0-a844-5f62fb0d7883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9b:24:13:2b:7d:6c:d1:f7:0b:71:3d:dc:fe:
b1:16:8f:ee:b7:5e:9a:4f:80:55:1d:b5:32:33:96:
8c:b5:f9:61:d3:22:74:ab:0d:78:73:2f:15:5e:46:
9e:ce:31:f1:a2:a0:af:10:94:eb:94:12:b4:99:d3:
f1:04:76:b0:c0:bc:ac:3f:0b:4d:34:4a:c9:8a:23:
a9:9b:78:e3:63:1e:c0:97:29:93:5b:aa:b0:c0:67:
d1:6c:64:d2:26:ba:9c:17:48:d3:bb:27:f8:76:3e:
11:c4:b3:28:49:8f:42:c7:e4:69:41:6e:5c:54:3b:
1c:74:97:90:bd:d4:fb:9c:ea:fd:4c:e9:3e:53:fa:
43:07:56:de:31:79:e3:db:5c:72:c8:64:d6:8d:b7:
ed:60:d7:06:82:9b:16:83:3b:d4:d6:8c:ac:68:a1:
75:aa:1d:2d:b2:2c:f0:f0:28:7f:39:d6:c6:ce:63:
cc:02:0b:cd:76:c3:c1:f1:45:66:54:6a:da:80:10:
9e:40:99:70:62:f3:81:64:ed:b1:51:17:71:a5:5b:
00:df:67:84:67:b1:93:21:f1:61:b2:f2:3d:c6:cf:
3b:74:56:9b:04:62:01:68:d9:6c:46:40:c1:94:ec:
c6:c4:95:45:bf:7b:2f:d4:e3:8a:c9:85:16:5a:b0:
99:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:49:F2:50:B7:98:AE:18:C0:31:29:B8:70:40:A7:98:FF:FC:B4:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/33af6a38-02b6-3f92-bf22-40f73c436cc1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
X509v3 Authority Key Identifier:
keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.136.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:0a:bf:fe:78:7c:47:f7:54:ad:8f:69:5e:5b:df:54:7f:0e:
b5:71:b0:6a:18:2b:ab:1a:b3:8e:44:34:64:ad:6f:7d:56:bc:
2a:8a:99:eb:4d:19:63:fc:26:1c:8f:5c:72:3d:e8:89:e3:3a:
3d:c5:0b:bc:26:d5:e2:98:7c:be:2c:77:a8:0d:57:ff:3d:09:
3b:9c:03:1c:9d:cc:72:94:7c:73:0e:02:b7:a0:cc:2f:44:93:
89:ca:12:0b:b2:c6:1c:56:ef:b9:45:fc:f6:a1:de:9d:e4:0a:
fa:fa:00:16:c9:f4:75:2f:95:b3:8d:d8:d0:c4:00:61:9f:4f:
0c:38:0e:0f:bf:7a:17:ae:94:f6:6c:a5:9b:19:16:a2:dc:7e:
42:54:1c:f5:10:04:d6:5f:c8:4a:de:f9:fb:cc:6d:dc:c2:04:
fe:8c:10:42:c9:fa:a0:05:f3:c7:e7:98:5f:f1:64:c8:90:c1:
fa:69:fa:9a:ad:92:3b:46:8e:19:52:41:ff:57:bc:a2:de:fd:
e4:b6:11:15:24:39:82:0e:a3:fb:5a:8c:ed:f3:ab:79:0b:04:
58:8e:26:70:d5:78:2c:2b:7e:f8:8b:b7:c2:18:91:2f:52:7c:
3e:14:c3:20:d4:67:df:3e:36:8b:0c:70:19:4a:f0:a2:06:a0:
d5:73:ad:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfglNw/eSTv1JQEa4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh
ZWEyMB4XDTI0MTExNDE0MDA0MFoXDTI1MDIxMjE0MDA0MFowLzEtMCsGA1UEAxMk
NWE2YWUzMjEtMTQzZC00OWMwLWE4NDQtNWY2MmZiMGQ3ODgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZskEyt9bNH3C3E93P6xFo/ut16aT4BVHbUy
M5aMtflh0yJ0qw14cy8VXkaezjHxoqCvEJTrlBK0mdPxBHawwLysPwtNNErJiiOp
m3jjYx7AlymTW6qwwGfRbGTSJrqcF0jTuyf4dj4RxLMoSY9Cx+RpQW5cVDscdJeQ
vdT7nOr9TOk+U/pDB1beMXnj21xyyGTWjbftYNcGgpsWgzvU1oysaKF1qh0tsizw
8Ch/OdbGzmPMAgvNdsPB8UVmVGragBCeQJlwYvOBZO2xURdxpVsA32eEZ7GTIfFh
svI9xs87dFabBGIBaNlsRkDBlOzGxJVFv3sv1OOKyYUWWrCZ2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAxJ8lC3mK4YwDEpuHBAp5j//LSuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2
Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvMzNhZjZhMzgtMDJiNi0z
ZjkyLWJmMjItNDBmNzNjNDM2Y2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4
ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh
YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2
MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBaIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGUKv/54fEf3VK2PaV5b31R/DrVxsGoYK6sas45ENGStb31WvCqKmetN
GWP8JhyPXHI96InjOj3FC7wm1eKYfL4sd6gNV/89CTucAxydzHKUfHMOAregzC9E
k4nKEguyxhxW77lF/Pah3p3kCvr6ABbJ9HUvlbON2NDEAGGfTww4Dg+/eheulPZs
pZsZFqLcfkJUHPUQBNZfyEre+fvMbdzCBP6MEELJ+qAF88fnmF/xZMiQwfpp+pqt
kjtGjhlSQf9XvKLe/eS2ERUkOYIOo/tajO3zq3kLBFiOJnDVeCwrfviLt8IYkS9S
fD4UwyDUZ98+NosMcBlK8KIGoNVzrdI=
-----END CERTIFICATE-----
Generated at Fri Apr 25 20:44:34 2025 by rpki-client