Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/27ff5311-a915-3e09-a9ae-83b8a539bb0b.roa
File: 27ff5311-a915-3e09-a9ae-83b8a539bb0b.roa (raw, json)
Hash identifier: TGb7o+Z+IdHeo/ESe6CYCSHYhQpj3CtLJfVHpDOF43Y=
Subject key identifier: B0:A2:4B:17:E6:DF:ED:85:35:56:F5:3A:7A:B5:2A:F5:5C:84:63:F8
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F43285848A318AF3661B0F88387069C60
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/27ff5311-a915-3e09-a9ae-83b8a539bb0b.roa
Signing time: Thu 23 Jan 2025 06:13:23 +0000
ROA not before: Thu 23 Jan 2025 06:13:23 +0000
ROA not after: Wed 23 Apr 2025 05:13:23 +0000
asID: 16591
IP address blocks: 136.38.0.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a3:18:af:36:61:b0:f8:83:87:06:9c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: Jan 23 06:13:23 2025 GMT
Not After : Apr 23 05:13:23 2025 GMT
Subject: CN=e58968e5-c99a-4b17-97c7-30f2ce6d8818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:33:67:d0:21:8a:b0:93:66:46:c5:29:86:eb:
ea:e0:92:c3:ef:b8:e6:8b:6f:f7:d5:5f:3a:2f:f2:
e3:d4:47:31:b7:78:b0:b4:93:e2:de:74:2f:69:78:
69:33:60:c7:20:81:9a:87:80:9c:2d:6d:01:93:b4:
0c:02:65:03:6f:7c:4c:03:be:35:8d:96:29:13:6b:
d4:b5:56:b1:48:17:43:fb:6b:6f:32:51:4e:23:ad:
12:8e:3b:11:cc:dc:f3:e9:8e:93:8c:b5:69:ec:61:
22:b9:da:7a:b4:1a:7e:d5:04:86:1a:1d:f8:9c:8b:
55:05:5a:ce:67:28:8a:cf:dd:9d:f9:f4:bc:c8:91:
82:de:5d:ee:1b:94:68:b4:3b:b3:d3:48:a9:b7:4c:
a1:6b:0a:42:40:53:6f:3f:ef:c3:9f:15:3b:21:cb:
c2:b0:41:a1:64:56:6c:fd:b0:48:b5:ce:69:0f:91:
15:34:8b:71:c1:41:08:f4:44:38:74:6f:40:3f:82:
e6:bc:98:b1:4b:c8:18:44:52:8e:40:3a:43:de:39:
7e:ba:2a:b2:67:31:10:ef:a7:5e:22:b5:6c:98:6f:
ec:75:07:bc:0f:39:45:35:4c:90:cf:b7:82:02:a5:
c6:9c:44:95:72:0e:8d:0a:d1:8e:a4:87:26:c0:3c:
d5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A2:4B:17:E6:DF:ED:85:35:56:F5:3A:7A:B5:2A:F5:5C:84:63:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/27ff5311-a915-3e09-a9ae-83b8a539bb0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
136.38.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:8e:16:4d:b4:0e:cc:7e:2e:0c:26:9a:88:07:d3:6d:b1:0b:
19:a9:71:b7:f0:bc:c0:89:7b:27:e2:85:ae:b9:09:22:87:bc:
38:60:ea:4d:bf:60:28:d5:d0:bd:44:27:73:44:80:9c:be:a9:
f1:d4:84:bb:a1:97:1f:81:83:a0:f2:20:21:15:eb:af:cc:1e:
81:79:6f:57:99:b1:56:db:fa:a7:41:14:9d:bd:4a:1b:ec:11:
29:60:bf:a8:fd:45:5e:8c:0d:73:29:e2:f7:a2:97:bc:1f:a8:
a9:ca:8d:bc:c7:b5:42:49:17:aa:2e:d9:8c:c3:20:4e:a1:4d:
d6:de:cf:ed:2b:1e:01:13:4a:50:a9:80:ab:71:2c:88:b8:35:
17:26:62:a4:52:c4:58:fa:50:3e:21:c7:62:74:96:c7:4c:34:
96:11:03:d8:78:90:29:f5:93:46:b5:ef:25:88:ee:05:0f:c4:
8b:cf:0f:8e:3d:b2:72:68:d9:c9:a8:0e:18:b5:f1:7d:9c:52:
98:37:38:07:12:04:1c:cf:7d:6f:87:6e:d8:b7:89:0b:5f:f2:
90:54:ed:e4:c7:33:70:a6:23:a5:81:57:93:44:b7:b3:cb:05:
14:4c:db:a2:c6:c8:56:5f:76:a2:93:76:c1:a6:6e:50:3e:a5:
da:86:15:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:21 2025 by rpki-client