Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/33fa41b8-82e8-3942-8551-e56832c3b17b.roa
File: 33fa41b8-82e8-3942-8551-e56832c3b17b.roa (raw, json)
Hash identifier: EZFXZyEJHSCQDN1x8xUAMNxeLwYHjJWfqzFKlTnf3bk=
Subject key identifier: FE:03:FA:68:64:F2:39:87:0B:54:AF:55:49:87:8B:C6:D0:6B:AF:0E
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F43285848A318B075B29D869BC3EC9700
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/33fa41b8-82e8-3942-8551-e56832c3b17b.roa
Signing time: Thu 23 Jan 2025 06:13:24 +0000
ROA not before: Thu 23 Jan 2025 06:13:24 +0000
ROA not after: Wed 23 Apr 2025 05:13:24 +0000
asID: 16591
IP address blocks: 136.57.96.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a3:18:b0:75:b2:9d:86:9b:c3:ec:97:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: Jan 23 06:13:24 2025 GMT
Not After : Apr 23 05:13:24 2025 GMT
Subject: CN=f1d14f97-ced7-4ccb-aade-ec187aff71f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:52:2a:67:bc:f9:de:7a:a5:6a:11:da:6b:1d:
6f:4c:d9:06:b9:70:e4:19:8c:24:cd:01:c3:fe:a5:
0f:47:31:ad:f9:d7:fd:dc:b7:2a:82:86:33:18:46:
08:b2:05:80:b7:62:5c:18:34:6f:ca:61:2c:e5:81:
73:a0:3c:ea:5c:c7:98:02:26:3b:97:35:69:1a:36:
d4:e4:b5:27:a3:cf:8b:20:8e:89:64:c6:f1:69:df:
01:93:37:0c:ad:99:66:12:d9:e1:e3:87:c1:9c:be:
35:11:7b:a0:fd:33:f1:ba:c0:44:af:a6:a9:82:56:
32:48:cb:3c:2b:d1:4a:e9:26:81:6a:42:c1:45:66:
da:de:f0:85:97:7d:46:1d:1b:06:d5:75:e4:b8:02:
f1:70:c7:f1:dd:ac:0b:20:bc:e5:3c:bb:ed:dc:48:
e3:6d:79:48:5a:fe:8f:8d:94:7c:ba:e0:97:c1:59:
0d:a9:e1:f9:69:b1:41:5f:2a:fd:98:64:a5:83:36:
c9:19:a9:06:67:6b:83:ea:02:61:c2:9f:cc:d5:c3:
41:60:02:f2:e1:10:5d:0e:57:c1:ad:02:52:1a:45:
b1:e9:ac:3f:64:3d:88:ed:09:61:9b:a2:f6:09:03:
b3:6c:77:d9:90:10:49:3a:78:70:32:9a:3c:1a:fb:
87:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:03:FA:68:64:F2:39:87:0B:54:AF:55:49:87:8B:C6:D0:6B:AF:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/33fa41b8-82e8-3942-8551-e56832c3b17b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
136.57.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:37:0e:f6:d4:4a:c3:8b:6b:f6:26:80:87:03:ea:18:2e:a1:
39:8b:fb:0d:e9:f5:63:f1:ac:ce:41:7f:0e:ef:51:2f:64:d4:
7a:3d:77:7b:ed:13:56:17:3b:1c:67:e7:c9:9f:d2:84:25:42:
9a:87:dc:93:50:2b:7f:bb:db:25:4a:7c:01:73:a0:a9:0f:76:
f6:51:89:9b:47:99:01:ab:c0:23:d5:b0:6c:55:ca:4b:3f:b8:
7d:c2:50:d9:4a:97:5c:63:1f:32:c1:d8:83:ff:b7:c3:4d:ea:
e8:d4:d8:dd:99:e4:2e:a7:b0:04:9a:f5:27:60:89:18:c6:ff:
ed:9e:01:ac:24:38:30:fc:da:34:a3:e7:c4:c5:ba:0f:29:a5:
c0:1c:0a:40:7e:cb:13:40:86:73:a4:3c:c8:57:89:80:ce:9f:
57:53:39:7e:b6:4b:2b:ba:db:5e:e5:31:ed:62:86:76:28:e5:
36:93:6c:92:9b:9a:93:ee:15:d9:65:86:3c:d9:83:8e:13:17:
72:23:1e:e7:ee:39:64:b5:87:9c:36:b8:e2:16:4a:af:61:01:
c8:4b:3f:a3:e1:3d:6f:ff:28:16:d8:09:73:33:97:b8:96:b5:
e1:81:cb:94:42:a1:7e:af:bb:08:ee:a6:6f:94:0a:a6:7d:68:
c5:be:3b:84
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEijGLB1sp2Gm8PslwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh
MzRlMB4XDTI1MDEyMzA2MTMyNFoXDTI1MDQyMzA1MTMyNFowLzEtMCsGA1UEAxMk
ZjFkMTRmOTctY2VkNy00Y2NiLWFhZGUtZWMxODdhZmY3MWY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1IqZ7z53nqlahHaax1vTNkGuXDkGYwkzQHD
/qUPRzGt+df93LcqgoYzGEYIsgWAt2JcGDRvymEs5YFzoDzqXMeYAiY7lzVpGjbU
5LUno8+LII6JZMbxad8BkzcMrZlmEtnh44fBnL41EXug/TPxusBEr6apglYySMs8
K9FK6SaBakLBRWba3vCFl31GHRsG1XXkuALxcMfx3awLILzlPLvt3EjjbXlIWv6P
jZR8uuCXwVkNqeH5abFBXyr9mGSlgzbJGakGZ2uD6gJhwp/M1cNBYALy4RBdDlfB
rQJSGkWx6aw/ZD2I7Qlhm6L2CQOzbHfZkBBJOnhwMpo8GvuHbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP4D+mhk8jmHC1SvVUmHi8bQa68OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2
NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMzNmYTQxYjgtODJlOC0z
OTQyLTg1NTEtZTU2ODMyYzNiMTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj
MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5
YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0
MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDlgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAQ3DvbUSsOLa/YmgIcD6hguoTmL+w3p9WPxrM5Bfw7vUS9k1Ho9d3vt
E1YXOxxn58mf0oQlQpqH3JNQK3+72yVKfAFzoKkPdvZRiZtHmQGrwCPVsGxVyks/
uH3CUNlKl1xjHzLB2IP/t8NN6ujU2N2Z5C6nsASa9SdgiRjG/+2eAawkODD82jSj
58TFug8ppcAcCkB+yxNAhnOkPMhXiYDOn1dTOX62Syu6217lMe1ihnYo5TaTbJKb
mpPuFdllhjzZg44TF3IjHufuOWS1h5w2uOIWSq9hAchLP6PhPW//KBbYCXMzl7iW
teGBy5RCoX6vuwjupm+UCqZ9aMW+O4Q=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:28 2025 by rpki-client