Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/53960a1b-a057-314e-9200-bfba1423d151.roa
File: 53960a1b-a057-314e-9200-bfba1423d151.roa (raw, json)
Hash identifier: rjH0ca/BwCYkXqbpluR7kpwMhhRTToUNQPcOtdgMoBw=
Subject key identifier: E9:0B:D4:4B:45:39:AF:BE:83:3D:BF:0D:F6:09:AF:9C:F0:84:BC:49
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F43285848BFEBB9AA99FD01D5A6FC8A00
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/53960a1b-a057-314e-9200-bfba1423d151.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 36492
IP address blocks: 136.22.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:b9:aa:99:fd:01:d5:a6:fc:8a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=b83cbfe6-d681-400b-b9b6-f0ceff8114f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2e:2e:63:15:47:94:93:e1:d8:1a:85:14:2d:
0f:ad:49:7a:85:cb:6f:93:c6:52:92:c0:c0:aa:02:
b6:ec:46:71:2f:c5:22:cf:19:36:c7:d2:35:4c:ea:
f4:41:a4:7b:ba:22:36:8c:24:1d:4a:35:75:fd:dd:
ee:13:77:07:22:a3:29:58:47:92:6a:2c:74:61:76:
c2:33:31:ea:9b:14:f6:24:80:95:c2:72:4e:ed:5a:
65:80:cf:ab:b9:35:52:59:d6:7e:69:cd:b6:f9:bb:
42:c1:0e:20:67:39:02:2d:37:38:22:5d:c5:7d:13:
89:ff:47:d5:52:31:3a:7b:23:b8:ab:60:18:88:e2:
ad:2e:af:4f:ac:09:5e:98:fc:32:29:24:d9:ba:38:
0e:16:d8:e6:bd:6d:7d:1f:e8:0a:a4:ae:e0:2a:41:
d1:2a:52:55:57:32:6d:f3:26:a6:41:24:45:52:ec:
a8:14:d4:36:ea:33:e0:62:cd:75:9e:33:11:0d:0d:
64:02:90:2e:0b:ec:0c:3e:70:06:b1:30:00:15:32:
b6:0c:f3:85:98:ee:9b:0f:7d:36:4f:02:d1:96:13:
98:59:9b:36:68:4d:4e:ae:60:bd:18:1b:7d:db:5e:
96:14:81:c1:2c:13:c5:65:ec:7e:3c:19:3d:7d:18:
fb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:0B:D4:4B:45:39:AF:BE:83:3D:BF:0D:F6:09:AF:9C:F0:84:BC:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/53960a1b-a057-314e-9200-bfba1423d151.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.122.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:95:42:25:a9:16:93:ce:90:2a:64:24:b3:b9:3e:8b:ef:98:
b5:8c:96:44:60:22:e2:a9:5f:6a:ce:0b:a7:3d:a7:3e:9e:2f:
d3:ad:0d:e9:49:f3:9d:4c:36:7f:7e:b0:41:45:52:5d:40:e1:
0c:df:8f:fb:df:ab:51:65:12:b8:2c:2d:94:98:2b:f5:23:a4:
8c:52:2e:e3:4c:e4:1e:57:91:45:97:94:dd:49:95:19:ac:f0:
c9:b0:4c:8a:86:4f:da:32:0a:ff:b1:53:f8:07:2a:a6:90:58:
71:74:46:f4:da:75:e1:81:95:dd:14:9b:c5:5a:4e:e2:8b:d2:
14:10:e8:06:62:1a:41:39:aa:5d:25:83:ed:ef:b4:96:39:89:
f7:55:5f:98:6a:d7:83:bc:24:87:d8:66:c3:1e:53:f6:12:e5:
1d:c8:e5:c6:91:9e:9c:50:0e:23:a1:d0:87:7a:5e:cc:cb:81:
47:b3:a0:43:23:df:ec:86:f9:87:25:e5:76:8c:79:bf:2f:72:
46:3f:ff:ea:ed:02:f3:47:11:e5:7f:65:a3:d1:c7:5a:0b:e1:
9f:63:54:09:3f:27:0a:79:a0:ad:53:44:b2:7a:b4:ee:00:5a:
d5:01:7f:c3:cc:06:94:9b:5d:9c:0c:c3:2b:ca:77:c0:3d:cb:
9d:ad:30:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:59:45 2025 by rpki-client on console.sobornost.net