Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1ff05e1f-0778-375d-b536-2aac7ca85ac1.roa
File: 1ff05e1f-0778-375d-b536-2aac7ca85ac1.roa (raw, json)
Hash identifier: EQRPRl1GnMrunkozI4QLSGRwJNzGiMr/HUoDZu2waG4=
Subject key identifier: D4:DA:52:33:F9:37:7C:A6:AD:30:E9:3E:06:F1:E7:CD:61:82:D0:9C
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F43285848A318AA4A085F76D837330800
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1ff05e1f-0778-375d-b536-2aac7ca85ac1.roa
Signing time: Thu 23 Jan 2025 06:13:21 +0000
ROA not before: Thu 23 Jan 2025 06:13:21 +0000
ROA not after: Wed 23 Apr 2025 05:13:21 +0000
asID: 16591
IP address blocks: 136.38.80.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a3:18:aa:4a:08:5f:76:d8:37:33:08:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: Jan 23 06:13:21 2025 GMT
Not After : Apr 23 05:13:21 2025 GMT
Subject: CN=196e6423-a9ab-4237-a90c-6879592288f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f4:64:e1:b4:f4:3e:da:cc:8f:24:93:44:bc:
cf:4b:87:f5:7d:e1:ff:4d:19:dd:79:58:49:0e:11:
a6:2c:66:e5:cf:d0:5a:c8:ee:d4:56:46:a5:0d:e8:
ab:03:9f:c3:99:e2:57:6f:70:0b:6a:e7:20:3c:8f:
c9:61:f1:69:c5:76:bc:4e:99:f3:f0:2a:7b:80:43:
b2:2b:81:ef:fc:fe:68:07:03:6c:1c:33:e5:df:28:
63:a9:d9:a5:e3:ea:f4:4a:79:f1:7a:ab:04:cd:ba:
f6:11:d5:d4:fc:f3:c3:d0:11:37:c5:a5:be:f8:94:
5c:91:ba:1e:17:a0:8e:06:c6:10:33:8a:6e:36:5b:
63:b4:05:17:82:e4:40:63:b6:3d:6d:5f:16:67:4b:
31:92:fb:38:15:21:92:d2:fe:89:84:ef:ad:55:5c:
b3:85:fc:25:95:ec:33:28:86:10:a3:10:9e:27:9f:
e1:21:90:1b:7a:78:fc:79:b1:6a:ea:b2:e9:f2:2d:
3c:cc:ce:91:8e:8e:d5:c8:b8:01:aa:15:61:4e:fe:
44:32:06:6c:f2:52:65:b3:24:02:54:1f:a9:5e:e9:
17:64:8f:7d:3e:d7:87:29:ed:32:6e:95:c2:8b:10:
6d:ba:3a:d5:12:fb:88:67:31:22:93:37:aa:50:1c:
c7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:DA:52:33:F9:37:7C:A6:AD:30:E9:3E:06:F1:E7:CD:61:82:D0:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1ff05e1f-0778-375d-b536-2aac7ca85ac1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
136.38.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:7c:7f:30:09:fc:a4:77:8c:44:e4:63:1f:c2:cf:95:c8:b0:
34:6a:94:d1:38:b3:3b:f7:82:8e:35:c0:8b:f1:76:ff:ab:32:
2c:f6:5e:6d:28:3b:8c:e3:f8:63:aa:bf:0d:a1:34:bc:d9:39:
c0:80:ac:b3:be:2b:06:17:22:ef:c6:c7:77:e3:f6:29:29:b8:
d1:95:e3:f1:17:f9:e4:5a:de:c0:ae:ed:a6:1c:35:5a:5b:f3:
90:fd:50:9c:b9:94:ee:c2:37:75:d4:04:15:44:78:62:bb:6b:
f5:64:ea:ba:2a:51:28:cf:b3:1a:3b:9e:68:49:96:fb:8a:ff:
7c:8e:08:5e:1c:59:7b:63:0e:c1:e3:77:ef:a3:2a:d7:cd:98:
a9:f4:ae:b5:22:6c:2e:09:a8:2c:c0:04:11:8c:43:9e:c0:83:
44:74:4d:b9:75:c7:05:9c:fd:a6:1d:3b:1e:9b:32:d1:ce:7c:
ba:f5:a1:3b:da:b6:11:32:64:90:a2:87:52:b6:59:6a:76:49:
10:7d:36:0c:ab:5e:a8:8f:8d:69:34:7d:51:1a:e6:ef:17:e3:
4f:ff:a9:5d:a6:f9:7b:35:58:25:4c:bd:21:2b:a3:08:51:c5:
74:e4:a4:41:35:66:32:e4:74:5b:37:4a:fe:5b:db:64:be:69:
01:81:7d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:28 2025 by rpki-client