Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1c56ed5e-22d7-343f-88c7-1d6d6de0f5d1.roa
File: 1c56ed5e-22d7-343f-88c7-1d6d6de0f5d1.roa (raw, json)
Hash identifier: z9WqPFQOYaSTccXLXWOhf111jkygwCKgfEtN+qKLdRI=
Subject key identifier: 65:84:30:47:B1:AD:72:0E:2E:A7:C9:07:C8:7C:6A:8A:07:FE:F4:1F
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F43285848A318A17A51BF1EC2AD78D880
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1c56ed5e-22d7-343f-88c7-1d6d6de0f5d1.roa
Signing time: Thu 23 Jan 2025 06:13:17 +0000
ROA not before: Thu 23 Jan 2025 06:13:17 +0000
ROA not after: Wed 23 Apr 2025 05:13:17 +0000
asID: 16591
IP address blocks: 136.34.64.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a3:18:a1:7a:51:bf:1e:c2:ad:78:d8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: Jan 23 06:13:17 2025 GMT
Not After : Apr 23 05:13:17 2025 GMT
Subject: CN=d610f5d2-45fa-464b-ac5f-bddfe7726d5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:64:3d:6f:90:3c:ae:18:c4:f7:aa:f4:f5:32:
37:87:62:15:df:ed:bc:f6:07:1f:9c:dc:f3:20:bd:
61:5f:54:51:cf:ed:c4:fa:8b:b8:32:b1:6a:32:97:
43:e7:68:8b:83:f0:1c:0e:a8:10:85:88:08:3e:e5:
bb:26:b7:fb:45:de:91:a7:34:50:6e:7e:4b:4a:46:
9e:86:5f:07:10:c0:a4:f0:d8:8c:92:db:3b:f3:95:
6b:00:09:b4:62:8c:fe:e7:4f:dc:d8:b2:1c:b2:c2:
1d:04:4b:a7:01:92:52:09:0f:a1:e0:2d:7c:ac:57:
6b:e8:f0:e4:3e:2a:8f:6b:fa:88:bd:f4:9a:e5:fd:
23:ce:1b:b8:6e:d1:d7:ad:89:d2:3f:3a:a1:98:00:
65:ff:5e:17:0c:1d:b3:8a:e9:14:52:64:11:2f:ab:
ef:60:ce:ec:1b:0f:9a:c6:d7:53:7b:db:10:19:ff:
0e:56:80:cd:e4:19:57:80:fb:ff:e3:5f:4c:07:37:
b0:35:17:70:b0:94:e5:1d:ed:5c:6d:52:12:87:70:
7e:b7:20:28:bc:d9:0c:bd:4d:cd:43:72:cc:5a:eb:
de:52:7b:2b:6d:c1:f9:a0:f4:9f:bb:c0:5c:c6:11:
26:12:6e:7f:9b:29:76:fa:69:cf:86:b4:33:08:24:
02:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:84:30:47:B1:AD:72:0E:2E:A7:C9:07:C8:7C:6A:8A:07:FE:F4:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1c56ed5e-22d7-343f-88c7-1d6d6de0f5d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
136.34.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:ce:b8:1b:ef:ac:da:bc:61:88:aa:ed:ac:89:3f:e4:f5:02:
8c:ed:04:d8:a6:68:d1:6c:e4:d2:b7:b8:a6:66:17:1e:66:d4:
70:6c:a2:ec:ff:70:4a:60:18:bf:5e:ad:c9:74:43:ab:d4:5f:
96:f3:ed:28:32:41:d6:e9:23:7a:04:99:3f:3c:67:91:1e:5e:
f5:5e:5b:39:f4:49:ef:1b:92:40:ca:f7:3d:be:00:7b:61:66:
81:14:60:e1:0e:13:11:72:71:0b:9f:90:2d:24:45:ba:a6:33:
07:ed:86:d2:1d:94:d4:6f:1d:0a:7b:4f:fa:dd:ad:29:17:c1:
02:7e:c2:02:7b:9e:80:f0:f0:ed:31:86:ec:47:10:93:91:c3:
6e:34:d5:6c:53:33:e7:13:b7:1c:df:28:5a:ba:8b:ec:ea:3c:
01:93:26:12:da:00:75:c8:84:cf:1a:9d:32:4d:e9:ef:b6:9e:
32:dd:c5:26:8e:dd:21:1a:e1:eb:cd:62:67:47:bd:57:a3:6f:
b5:5e:73:06:e8:d0:2a:e5:13:94:49:98:11:ba:d3:95:ef:34:
6f:9d:32:05:2a:ee:9a:3a:06:45:ed:44:8b:83:5a:39:e3:a7:
e4:cb:83:0f:d9:de:96:69:36:6d:1a:d6:da:24:b9:74:2d:21:
3f:50:72:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:38 2025 by rpki-client