Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/ecd38e82-92b2-3489-9d2d-e33f18f29b7c.roa
File: ecd38e82-92b2-3489-9d2d-e33f18f29b7c.roa (raw, json)
Hash identifier: xa9SBYUPiT7eisipu/NwKEPM2tnGMBB3cvSkz5P+4qE=
Subject key identifier: 2C:C0:6F:4E:89:58:BD:AC:32:10:A1:E1:0D:71:CA:BC:76:7C:57:98
Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial: 010D0C9F43285847E094FA84CE80AE8AF5254E00
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/ecd38e82-92b2-3489-9d2d-e33f18f29b7c.roa
Signing time: Thu 14 Nov 2024 14:00:40 +0000
ROA not before: Thu 14 Nov 2024 14:00:40 +0000
ROA not after: Wed 12 Feb 2025 14:00:40 +0000
asID: 36040
IP address blocks: 136.22.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e0:94:fa:84:ce:80:ae:8a:f5:25:4e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Validity
Not Before: Nov 14 14:00:40 2024 GMT
Not After : Feb 12 14:00:40 2025 GMT
Subject: CN=86f3abab-efc0-4ef5-9234-d0852585efb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:30:de:b9:90:d9:c1:d3:dc:0b:70:7f:9d:42:
08:0e:c2:e7:92:68:17:6e:ae:97:07:95:11:6f:fe:
54:78:80:50:53:f5:fc:1a:f4:30:32:6d:bb:db:00:
ec:bb:f1:b3:40:4e:7f:b3:cd:1b:b6:2d:13:2a:89:
1f:5e:92:f4:5b:29:b7:86:81:78:32:c8:dd:70:9f:
ad:07:92:32:44:43:d2:30:7e:f8:04:c1:8e:4b:f9:
fd:d1:9d:5d:e2:6f:6e:c3:05:40:50:61:b5:6a:73:
30:4d:28:22:49:74:74:24:8f:3d:a1:6f:ab:6d:f2:
ad:69:e9:39:a3:c2:2f:ef:ca:b8:d9:11:2e:cb:38:
1a:0e:82:0a:da:de:4b:a3:4f:76:23:72:e2:fe:eb:
29:23:f0:2f:0a:97:ee:03:15:09:58:bd:87:3b:fe:
5d:98:1f:6b:97:94:a8:75:2c:25:37:03:47:14:f1:
1a:0b:e0:dc:ac:b7:08:0c:2e:8b:04:98:04:5b:1b:
6d:19:af:a4:13:90:20:d7:74:15:cb:19:52:46:08:
aa:f3:91:de:cc:2b:de:3d:9d:0c:c2:55:29:c0:86:
96:4a:ea:c4:12:c3:24:38:ef:fc:ef:6f:59:a6:d4:
da:12:79:c2:0a:02:c8:b7:46:93:a7:20:0e:f5:c5:
69:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C0:6F:4E:89:58:BD:AC:32:10:A1:E1:0D:71:CA:BC:76:7C:57:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/ecd38e82-92b2-3489-9d2d-e33f18f29b7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
X509v3 Authority Key Identifier:
keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.152.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:d8:12:ec:8a:93:ab:5d:49:54:c3:cf:5a:68:57:31:da:ee:
db:bf:00:75:67:9f:67:92:d1:91:6c:39:99:f1:32:53:c9:9f:
fe:c5:ef:53:98:b5:78:8c:35:21:ca:50:90:a4:04:c3:71:0c:
d7:2f:e6:66:77:70:59:fc:05:84:5d:f0:1f:3d:ef:ca:9e:84:
85:49:56:95:7b:05:a4:1c:3a:cf:d7:ec:9e:a8:b2:67:e3:27:
0f:47:69:f4:bc:ac:5e:dd:75:90:29:63:3a:d1:8e:5b:0e:8d:
e4:7a:49:2a:44:f0:f7:94:3c:63:24:3f:55:cd:ca:eb:64:04:
58:dd:0c:66:4f:8b:98:64:fb:6b:f6:cf:6a:bc:11:38:05:d5:
63:82:df:71:23:70:90:06:4e:6f:b7:fd:6b:a2:09:3a:10:60:
c1:c5:68:5d:70:2c:46:23:c1:79:b4:61:52:b5:29:6b:6f:76:
59:f5:a7:b4:94:3c:87:57:a7:f3:e9:e8:ad:61:8f:32:0d:d8:
57:13:4e:df:4f:6d:ea:fe:a1:b4:19:50:a4:27:5a:51:df:ec:
fe:ba:9c:20:9c:04:00:28:f1:be:88:1f:fe:09:9e:0a:b4:f5:
f4:bc:31:6f:16:7b:08:ec:e6:e5:02:f8:e8:1a:6d:8f:fd:41:
cb:6d:43:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:33:18 2025 by rpki-client