Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/d5a4e555-7797-3f28-8c7a-e903f5c5991b.roa
File: d5a4e555-7797-3f28-8c7a-e903f5c5991b.roa (raw, json)
Hash identifier: YSCY1EQm1l/lYYFKoh311OuyKQOE8ylx+4342ZCnZi8=
Subject key identifier: 3A:F6:23:0B:07:D4:B9:F7:9D:D3:1E:AA:5D:68:A4:5B:1F:FC:F2:9B
Certificate issuer: /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
Certificate serial: 010D0C9F43285848A049120D8584474D217F1200
Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/d5a4e555-7797-3f28-8c7a-e903f5c5991b.roa
Signing time: Wed 22 Jan 2025 06:03:27 +0000
ROA not before: Wed 22 Jan 2025 06:03:27 +0000
ROA not after: Tue 22 Apr 2025 05:03:27 +0000
asID: 19165
IP address blocks: 136.31.192.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a0:49:12:0d:85:84:47:4d:21:7f:12:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
Validity
Not Before: Jan 22 06:03:27 2025 GMT
Not After : Apr 22 05:03:27 2025 GMT
Subject: CN=e8d15854-ae77-4666-b104-61f058d73f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:22:d9:48:e8:a5:64:67:13:2f:03:ce:a5:8b:
2a:c1:9e:cb:74:06:bc:23:53:64:50:49:28:a3:47:
61:7e:ed:84:b5:ce:b5:8d:42:1a:92:eb:78:d5:93:
9a:34:90:14:8c:14:1e:1f:8d:d4:64:26:aa:ab:3f:
cf:7f:aa:30:d0:4f:dc:06:7f:66:9d:fb:97:ef:fd:
a8:c8:1a:a1:40:93:14:45:e2:ac:39:d0:ad:d6:b7:
ea:f0:02:bb:10:55:9e:ba:bb:10:c8:90:9e:96:de:
9f:c2:c9:9a:c2:44:22:1e:39:49:81:5d:75:37:86:
11:1a:07:84:06:77:8e:ab:80:15:05:1c:70:16:0c:
1b:0c:8c:4a:61:cf:1a:ce:e0:f0:99:e4:7d:d8:e1:
1c:f4:b9:a2:e6:14:f3:1c:2c:dc:c3:dc:17:ab:b8:
e7:1c:07:83:26:f6:d6:79:af:0f:cf:15:95:72:e4:
af:ed:d5:48:3b:83:55:c4:46:da:ae:50:e5:38:fa:
fb:e8:d1:32:c1:41:c4:d0:bb:fe:cf:e8:a8:48:66:
75:44:ca:b0:3a:a6:a3:e6:d2:04:29:61:6c:a8:ef:
a1:fd:6b:27:7f:44:1d:62:88:b0:86:8e:72:90:28:
3a:eb:23:96:5a:25:bd:fc:36:cd:07:c0:77:9c:f7:
6c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F6:23:0B:07:D4:B9:F7:9D:D3:1E:AA:5D:68:A4:5B:1F:FC:F2:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/d5a4e555-7797-3f28-8c7a-e903f5c5991b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl
X509v3 Authority Key Identifier:
keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
sbgp-ipAddrBlock: critical
IPv4:
136.31.192.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:ef:95:90:33:84:3a:0b:4f:6f:f1:e6:c8:db:28:01:f4:ca:
38:af:cb:02:80:8d:f0:99:b1:0a:03:4a:13:20:c8:7a:97:1d:
dd:6b:3c:8a:dc:90:8b:1e:16:5d:fc:a6:e0:7c:4d:f2:e1:f6:
e2:83:d0:b3:82:e1:1a:71:a3:aa:ac:b3:d8:27:21:b6:7e:51:
a9:8f:f3:4a:38:5e:7c:6b:79:c2:d5:8c:bc:27:1f:e9:40:a2:
60:1f:43:37:ed:3c:32:5b:56:3d:c1:45:86:19:20:80:a9:27:
10:90:79:ba:89:b7:ac:cd:05:00:56:0d:97:21:18:98:c3:6a:
3c:28:10:4e:82:fe:58:7a:1c:d9:dd:96:cd:30:22:da:7f:20:
a2:ac:21:ce:2d:75:41:52:79:8c:3f:fe:92:e9:b9:aa:3f:70:
fc:c6:bd:a2:f8:36:aa:36:8c:af:d8:7e:8a:e4:f8:ab:93:7c:
64:77:c9:27:e4:e6:84:61:1a:98:67:da:75:a6:30:23:57:09:
fa:2b:a0:5e:20:f3:3d:46:fe:31:c2:01:ca:c6:d9:4e:32:81:
eb:fb:3b:2c:3a:50:08:7e:30:a1:8d:99:a1:c2:18:2d:99:de:
8d:aa:ff:fc:b1:4d:b0:aa:7e:64:d7:4e:09:84:d0:f7:45:28:
fb:8c:a6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:42:59 2025 by rpki-client