Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/428c695f-b851-3ba7-bd48-9c9714ffd37a.roa
File: 428c695f-b851-3ba7-bd48-9c9714ffd37a.roa (raw, json)
Hash identifier: prDbYUdUhR72itSjKbgcd+7k8MYKCtbk4NqcwktNV2E=
Subject key identifier: C3:66:59:47:BA:F7:9A:5F:1F:F4:EC:F8:F6:BB:D8:2B:6C:E2:BF:24
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F43285848A318AEDE0A2BE95A8062F000
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/428c695f-b851-3ba7-bd48-9c9714ffd37a.roa
Signing time: Thu 23 Jan 2025 06:13:23 +0000
ROA not before: Thu 23 Jan 2025 06:13:23 +0000
ROA not after: Wed 23 Apr 2025 05:13:23 +0000
asID: 16591
IP address blocks: 136.37.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a3:18:ae:de:0a:2b:e9:5a:80:62:f0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: Jan 23 06:13:23 2025 GMT
Not After : Apr 23 05:13:23 2025 GMT
Subject: CN=5cb80a97-bfbc-4489-87e2-5ae1a75024e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9c:2d:df:07:7c:e6:34:c9:c3:3c:6f:4e:0f:
60:fc:97:4a:31:c5:9d:1d:61:6d:51:df:0d:8d:ad:
22:cf:c5:d8:b0:15:f2:ce:0f:bc:38:39:c6:85:35:
9f:d5:1d:14:3f:89:d2:29:4c:99:6f:58:94:7d:b7:
83:df:54:4a:d3:22:c3:d7:ae:9d:3c:09:6a:f9:02:
80:b4:16:ef:a8:98:0c:f4:f2:c6:46:1d:8c:2d:32:
54:00:ec:e4:94:28:da:43:0d:0a:01:3c:00:d2:84:
aa:be:44:dc:e5:6b:fc:3d:87:92:7d:94:ac:b7:78:
e9:70:ed:61:ef:63:27:a0:4f:64:7c:92:df:fa:ce:
7f:fd:97:8f:8c:6e:6a:c4:af:bb:5c:59:14:7f:19:
cd:c2:b2:cd:ab:f6:9f:89:d3:c2:b5:63:d8:40:b9:
86:9b:f9:2f:8c:f2:0b:26:47:b6:65:30:ce:9d:32:
c3:0a:ff:f0:5e:38:b7:60:47:3a:79:ae:63:a4:c2:
5c:d1:bf:1d:5f:96:5c:5a:1e:20:74:92:43:ab:0b:
7a:9d:5e:ce:13:2d:f9:54:99:7c:59:41:dc:23:43:
8c:5b:44:eb:a4:fb:2b:af:cf:4c:9e:45:2f:49:c1:
c3:b8:e2:0e:61:38:4c:8f:a2:ee:e2:8b:18:e6:10:
a5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:66:59:47:BA:F7:9A:5F:1F:F4:EC:F8:F6:BB:D8:2B:6C:E2:BF:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/428c695f-b851-3ba7-bd48-9c9714ffd37a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
136.37.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:61:2d:29:68:05:73:bc:6f:91:03:52:0c:68:6f:b8:a5:ae:
70:dd:1d:48:0f:be:8c:7d:9d:66:65:b4:cf:bb:f4:70:9d:2a:
23:16:46:21:8c:e6:fb:eb:f2:a0:44:4a:8d:10:9c:f8:1a:10:
09:7f:82:f3:03:df:5e:88:6b:2e:23:b8:44:26:14:89:f1:d6:
2e:b4:e1:e0:df:b4:75:3f:5e:85:f0:f4:e6:50:94:f9:5d:12:
b7:9b:27:08:96:e4:72:b0:d4:96:4a:d3:c2:79:3f:96:42:61:
9b:ff:59:e8:23:1f:e3:fd:2c:24:af:61:0a:b7:bd:ad:a6:34:
dc:82:ef:90:3c:7a:3e:11:0a:6a:b7:e1:1a:3b:8b:60:1b:a9:
9c:fe:ee:70:a6:34:b7:f1:0d:c3:f5:4d:92:e6:2a:01:89:f5:
e8:f4:0c:c1:a7:43:b2:1b:2d:6b:9a:12:9c:f4:fd:31:fd:cc:
c9:68:62:64:06:47:cb:d6:34:70:c0:88:66:e6:9f:25:01:1b:
86:a2:10:18:2b:33:db:0d:24:23:9c:5a:2f:e4:88:81:7d:90:
3b:e9:99:ec:8d:e4:09:17:c8:ba:48:77:8f:4b:bf:a9:e8:88:
7c:cb:86:3f:14:10:c0:44:27:8c:ca:0f:97:0c:9f:eb:3a:f0:
54:73:b8:e6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEijGK7eCivpWoBi8AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh
MzRlMB4XDTI1MDEyMzA2MTMyM1oXDTI1MDQyMzA1MTMyM1owLzEtMCsGA1UEAxMk
NWNiODBhOTctYmZiYy00NDg5LTg3ZTItNWFlMWE3NTAyNGU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZwt3wd85jTJwzxvTg9g/JdKMcWdHWFtUd8N
ja0iz8XYsBXyzg+8ODnGhTWf1R0UP4nSKUyZb1iUfbeD31RK0yLD166dPAlq+QKA
tBbvqJgM9PLGRh2MLTJUAOzklCjaQw0KATwA0oSqvkTc5Wv8PYeSfZSst3jpcO1h
72MnoE9kfJLf+s5//ZePjG5qxK+7XFkUfxnNwrLNq/afidPCtWPYQLmGm/kvjPIL
Jke2ZTDOnTLDCv/wXji3YEc6ea5jpMJc0b8dX5ZcWh4gdJJDqwt6nV7OEy35VJl8
WUHcI0OMW0TrpPsrr89MnkUvScHDuOIOYThMj6Lu4osY5hCl2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMNmWUe695pfH/Ts+Pa72Cts4r8kMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2
NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNDI4YzY5NWYtYjg1MS0z
YmE3LWJkNDgtOWM5NzE0ZmZkMzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj
MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5
YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0
MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCWwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEdhLSloBXO8b5EDUgxob7ilrnDdHUgPvox9nWZltM+79HCdKiMWRiGM
5vvr8qBESo0QnPgaEAl/gvMD316Iay4juEQmFInx1i604eDftHU/XoXw9OZQlPld
ErebJwiW5HKw1JZK08J5P5ZCYZv/WegjH+P9LCSvYQq3va2mNNyC75A8ej4RCmq3
4Ro7i2AbqZz+7nCmNLfxDcP1TZLmKgGJ9ej0DMGnQ7IbLWuaEpz0/TH9zMloYmQG
R8vWNHDAiGbmnyUBG4aiEBgrM9sNJCOcWi/kiIF9kDvpmeyN5AkXyLpId49Lv6no
iHzLhj8UEMBEJ4zKD5cMn+s68FRzuOY=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:55 2025 by rpki-client