Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/31c159bf-4eca-397a-82d4-9a7e2f65f731.roa
File: 31c159bf-4eca-397a-82d4-9a7e2f65f731.roa (raw, json)
Hash identifier: nJvKYQcNnVPAamFy5et+YCIOcMopanaYVvp7XXg96l0=
Subject key identifier: CB:53:F6:70:93:52:62:3C:86:8F:9E:BC:76:1B:66:31:39:C3:23:38
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F43285848A318A038D7C8802207A221A0
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/31c159bf-4eca-397a-82d4-9a7e2f65f731.roa
Signing time: Thu 23 Jan 2025 06:13:16 +0000
ROA not before: Thu 23 Jan 2025 06:13:16 +0000
ROA not after: Wed 23 Apr 2025 05:13:16 +0000
asID: 16591
IP address blocks: 136.34.0.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a3:18:a0:38:d7:c8:80:22:07:a2:21:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: Jan 23 06:13:16 2025 GMT
Not After : Apr 23 05:13:16 2025 GMT
Subject: CN=b823eb63-3fd8-44ac-81cb-b88e3aa8dc00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:85:47:c1:d3:b6:e7:c8:80:92:2a:c1:f8:78:
64:2a:0f:b0:3d:6a:be:59:68:da:20:22:58:e0:19:
63:ef:5f:69:65:d8:ec:2d:05:00:93:42:e5:03:87:
ad:85:8c:c8:a0:8a:b4:91:26:8c:05:57:bf:53:cc:
c7:8f:d2:a5:9e:29:b6:a0:30:85:4a:01:16:bc:b9:
20:9e:18:b5:c4:79:46:a2:e1:ac:18:bf:ff:04:ab:
dd:dc:3d:6f:af:c9:de:f3:4d:13:4b:d0:cf:d9:17:
b3:12:87:9c:d6:15:e1:a1:0b:c0:25:71:3e:58:1d:
2f:b0:d6:1d:22:a8:1e:3a:b3:a4:5b:33:2e:74:5a:
d5:be:87:e6:8f:e1:a9:40:36:c2:38:38:3d:8f:da:
17:4a:9b:09:42:8b:6c:7f:e3:9d:57:ae:89:a0:c9:
d9:e0:28:90:40:27:3b:c9:b1:ef:fc:a7:3e:de:b8:
92:47:8d:0d:68:0c:ab:ba:2f:1d:29:c3:16:57:2e:
f9:d8:16:98:92:bf:50:18:15:e6:8e:6e:04:ab:cf:
30:83:59:e2:72:bc:15:ad:50:7e:00:f6:9f:d9:91:
04:b1:18:38:4b:d9:15:2d:91:3a:50:6b:86:ca:b9:
18:ba:9e:6f:7f:b6:0f:0b:39:e7:fc:bb:a7:5f:f2:
8c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:53:F6:70:93:52:62:3C:86:8F:9E:BC:76:1B:66:31:39:C3:23:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/31c159bf-4eca-397a-82d4-9a7e2f65f731.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
136.34.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:91:09:d5:f8:24:1f:3f:89:b6:cd:6d:17:c2:40:35:9a:13:
a0:b3:d0:04:f6:b3:9b:58:98:cc:ac:87:8c:76:06:ef:4e:85:
ef:e1:58:f1:5e:6f:a7:39:c5:27:cb:74:72:4a:85:a8:f1:ed:
3c:9d:03:de:6e:37:e9:2c:c9:3d:62:f1:f1:85:10:64:06:04:
b6:76:4c:d5:ba:51:27:9f:35:1f:37:2d:ed:8b:c1:88:46:32:
d7:38:ae:16:91:17:1a:d7:55:1f:ce:5e:07:13:d5:e6:44:98:
fc:1e:d2:9c:f6:f0:32:06:37:10:ad:05:e5:9d:cd:54:63:15:
95:74:35:f8:f4:42:1b:9c:b1:0e:71:ae:16:bb:72:31:be:08:
5f:60:b3:c3:46:eb:f0:5a:b6:e8:ff:4c:e9:d1:9d:41:e6:08:
14:7d:86:ef:10:d7:17:be:25:a8:fc:b7:77:74:62:d7:27:df:
dd:24:d7:1a:04:46:b5:4e:57:32:a5:9d:0c:25:90:75:bf:cd:
4d:42:3e:d0:89:23:86:7b:7e:56:2d:25:69:ea:bd:94:f0:26:
fd:34:d7:f3:a5:95:a1:70:bc:89:2f:16:07:31:b0:65:48:19:
2e:c4:e8:54:c0:6d:1c:63:85:4f:65:62:56:ba:0a:48:85:3a:
93:39:08:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:15 2025 by rpki-client