Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/079d0a3b-3dac-3031-bb23-06875e1aa557.roa
File: 079d0a3b-3dac-3031-bb23-06875e1aa557.roa (raw, json)
Hash identifier: LcfCidPHFlFMe/UnGMI+CbtXt8xAT03R57HBcmv8N58=
Subject key identifier: 65:A9:07:9D:AE:8E:B5:90:07:88:11:C1:00:13:D5:0F:6A:D9:82:A1
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F43285848A318A3D1DDA7987FC1D8FE00
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/079d0a3b-3dac-3031-bb23-06875e1aa557.roa
Signing time: Thu 23 Jan 2025 06:13:18 +0000
ROA not before: Thu 23 Jan 2025 06:13:18 +0000
ROA not after: Wed 23 Apr 2025 05:13:18 +0000
asID: 16591
IP address blocks: 136.50.208.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a3:18:a3:d1:dd:a7:98:7f:c1:d8:fe:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: Jan 23 06:13:18 2025 GMT
Not After : Apr 23 05:13:18 2025 GMT
Subject: CN=900fc386-343b-4605-ac9d-5b5c439d2ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:4b:0d:ef:f0:17:0f:bf:a1:e9:88:90:3e:35:
ef:ec:d5:c5:66:71:e7:7b:c9:a4:89:5d:58:01:48:
7c:05:d6:e5:42:50:0f:4c:c7:d2:38:fa:43:54:a1:
d8:c5:33:58:49:d7:0b:66:82:10:f5:f6:e8:49:a0:
35:b4:e6:f2:be:95:ea:c6:04:90:12:d0:3c:3c:05:
e4:aa:8e:3b:5b:33:5c:5b:34:56:54:5e:2d:c9:81:
f0:27:ee:22:8a:1a:68:5a:57:21:59:7a:5c:a1:70:
14:fb:0a:4d:0c:3e:97:45:8b:eb:58:da:e6:f7:d2:
5a:69:d0:89:d9:8f:7b:59:2b:76:bd:73:da:3b:8f:
55:e0:6d:56:6b:95:b1:01:eb:cc:43:9e:ab:c5:c0:
f1:ac:ff:9a:4d:80:b8:74:63:20:57:45:18:de:7f:
7f:79:95:b9:6d:8c:5d:c4:9e:08:fa:9d:88:ea:23:
c3:07:02:5c:b6:8a:dd:dc:13:fc:f7:62:d7:ff:da:
94:91:55:03:3a:75:93:f2:63:1d:58:7c:99:5f:fd:
47:8a:eb:84:39:6b:71:80:6c:88:f6:2d:c0:27:27:
0c:59:05:f6:32:0f:04:1a:15:ce:73:ab:ea:85:d8:
12:98:15:fe:f3:f3:52:29:ab:70:81:c5:a0:73:b7:
a3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A9:07:9D:AE:8E:B5:90:07:88:11:C1:00:13:D5:0F:6A:D9:82:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/079d0a3b-3dac-3031-bb23-06875e1aa557.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
136.50.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:87:d8:e0:dc:53:3f:18:d3:f4:3a:06:c2:f7:8b:de:6f:70:
92:67:63:43:13:41:26:b9:ee:d8:84:60:80:67:39:47:20:98:
73:e2:e7:ae:ba:a0:1d:29:2d:17:db:20:59:39:56:f9:dd:ee:
39:66:61:73:6e:10:4e:06:a4:03:cf:86:f9:05:d4:96:1b:ab:
b9:19:2c:b2:f0:c5:bb:31:54:94:ea:bf:12:e1:77:dc:b2:02:
76:a0:6c:98:ac:38:bc:7c:60:41:ba:f2:02:89:72:e3:17:0f:
56:ad:f5:9b:d0:b9:13:fa:d9:51:01:22:6d:ed:d4:2e:24:cc:
cc:e4:ed:43:42:33:e9:9c:fa:19:7b:41:a5:11:02:04:d2:18:
b0:33:5f:b3:7c:39:51:fb:f8:83:37:17:ec:35:37:3c:81:10:
80:ea:a1:24:85:92:5f:80:58:3b:97:55:a5:10:8e:67:e7:14:
f7:f8:f5:96:5e:30:e0:fe:07:73:60:53:b0:17:a7:79:76:89:
54:be:b1:4e:96:ab:e9:69:c6:43:08:bf:3d:d6:cf:d4:70:f8:
40:eb:f5:a5:1f:1b:3c:0b:36:d6:e6:5a:0d:ca:ad:b2:12:09:
ca:11:43:8d:2b:29:be:81:4d:e3:30:f8:1b:40:4f:9a:d2:0a:
28:2a:0a:ce
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEijGKPR3aeYf8HY/gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh
MzRlMB4XDTI1MDEyMzA2MTMxOFoXDTI1MDQyMzA1MTMxOFowLzEtMCsGA1UEAxMk
OTAwZmMzODYtMzQzYi00NjA1LWFjOWQtNWI1YzQzOWQyYmEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6EsN7/AXD7+h6YiQPjXv7NXFZnHne8mkiV1Y
AUh8BdblQlAPTMfSOPpDVKHYxTNYSdcLZoIQ9fboSaA1tObyvpXqxgSQEtA8PAXk
qo47WzNcWzRWVF4tyYHwJ+4iihpoWlchWXpcoXAU+wpNDD6XRYvrWNrm99JaadCJ
2Y97WSt2vXPaO49V4G1Wa5WxAevMQ56rxcDxrP+aTYC4dGMgV0UY3n9/eZW5bYxd
xJ4I+p2I6iPDBwJctord3BP892LX/9qUkVUDOnWT8mMdWHyZX/1HiuuEOWtxgGyI
9i3AJycMWQX2Mg8EGhXOc6vqhdgSmBX+8/NSKatwgcWgc7ejIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGWpB52ujrWQB4gRwQAT1Q9q2YKhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2
NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMDc5ZDBhM2ItM2RhYy0z
MDMxLWJiMjMtMDY4NzVlMWFhNTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj
MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5
YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0
MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDLQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG6H2ODcUz8Y0/Q6BsL3i95vcJJnY0MTQSa57tiEYIBnOUcgmHPi5666
oB0pLRfbIFk5Vvnd7jlmYXNuEE4GpAPPhvkF1JYbq7kZLLLwxbsxVJTqvxLhd9yy
AnagbJisOLx8YEG68gKJcuMXD1at9ZvQuRP62VEBIm3t1C4kzMzk7UNCM+mc+hl7
QaURAgTSGLAzX7N8OVH7+IM3F+w1NzyBEIDqoSSFkl+AWDuXVaUQjmfnFPf49ZZe
MOD+B3NgU7AXp3l2iVS+sU6Wq+lpxkMIvz3Wz9Rw+EDr9aUfGzwLNtbmWg3KrbIS
CcoRQ40rKb6BTeMw+BtAT5rSCigqCs4=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:17 2025 by rpki-client