Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/457728f7-f101-3968-af04-bee701511c93.roa
File: 457728f7-f101-3968-af04-bee701511c93.roa (raw, json)
Hash identifier: tnq3d/k8LlcdNyJ3Mdl8Q8Myq+gD1eYc+c/GwvaUUzg=
Subject key identifier: 9C:C6:36:88:58:02:37:3E:B9:F2:98:BB:F9:EC:9A:66:27:00:E3:9F
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F43285848A318A1E0CBBBED5D9FC72380
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/457728f7-f101-3968-af04-bee701511c93.roa
Signing time: Thu 23 Jan 2025 06:13:17 +0000
ROA not before: Thu 23 Jan 2025 06:13:17 +0000
ROA not after: Wed 23 Apr 2025 05:13:17 +0000
asID: 16591
IP address blocks: 136.48.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a3:18:a1:e0:cb:bb:ed:5d:9f:c7:23:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: Jan 23 06:13:17 2025 GMT
Not After : Apr 23 05:13:17 2025 GMT
Subject: CN=34ff7406-e06d-4cbe-a687-4386d6244300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:40:f7:f1:79:8d:28:3f:4d:2b:31:b8:30:6d:
89:5d:9c:42:51:27:47:4e:a1:68:45:32:9a:9a:e2:
7e:ef:60:4c:80:0d:cc:e5:60:9f:0b:0f:e1:e3:4c:
dd:18:f4:42:2e:3a:8d:10:7e:db:bb:69:0f:21:52:
e6:22:e4:b6:c7:d8:a0:0a:87:01:96:6d:82:a3:2a:
60:7d:6c:a1:ed:60:2e:f0:e8:67:3d:91:e0:6c:04:
90:4a:16:69:4a:66:ea:55:b6:5e:0b:d4:ec:b1:6e:
75:b7:cd:93:0e:0f:7f:4c:b3:85:92:0f:a7:a6:0b:
bc:52:ef:a8:73:4e:ef:01:f1:59:66:cc:3b:2f:98:
0b:e1:2b:a3:3d:47:6a:3e:a7:3a:25:3c:7b:80:d5:
a8:de:2f:93:6d:91:4f:d2:fa:0b:fb:5a:46:b4:76:
33:d6:97:2d:42:d2:27:2b:e8:82:bf:39:38:5f:8f:
b8:ad:ae:01:00:9f:84:50:56:26:a3:5f:e3:3f:f3:
f4:05:69:c3:c3:d7:41:6c:7d:07:73:fe:3e:5c:31:
36:6d:df:4c:30:23:3e:a9:22:57:49:b8:98:11:c2:
fe:c3:4d:92:cd:e2:e0:49:10:73:3b:5d:77:c5:91:
c4:fb:74:60:da:82:86:98:57:56:5a:f6:58:ca:d1:
45:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C6:36:88:58:02:37:3E:B9:F2:98:BB:F9:EC:9A:66:27:00:E3:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/457728f7-f101-3968-af04-bee701511c93.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
136.48.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:7b:af:bd:9a:a1:9b:b3:f3:98:c3:1b:c9:3b:16:31:f2:ed:
68:f3:df:f3:f7:94:80:d3:9a:03:dd:c9:fa:e8:7b:59:a3:1d:
92:09:d0:ac:5b:43:3a:a5:81:58:96:b7:9a:f5:3b:92:e7:69:
07:69:3d:05:ef:e3:f6:f4:7d:45:ab:20:c2:2a:85:db:98:2e:
3e:36:11:ea:4b:c3:09:f2:1a:ad:26:ec:b8:ea:d1:20:e1:d0:
05:4d:3f:69:76:08:75:6f:77:7b:da:b7:de:57:9d:87:56:39:
53:d3:50:f3:9a:f3:91:f8:4b:3f:5f:5e:4d:f8:5f:56:6a:1b:
15:8f:47:ac:c3:ae:73:66:5a:c5:24:52:eb:de:83:5e:d3:04:
ce:94:a5:7a:d0:d8:1b:d9:6b:fd:3d:8c:d9:bd:0c:71:79:ae:
0b:c6:cc:10:64:88:a3:6c:be:fd:3d:8b:62:d9:bf:d4:87:8c:
84:a7:c4:db:65:fa:ed:77:77:87:74:11:9b:2c:b1:ac:ae:77:
27:e3:05:e3:d2:0c:67:6f:ff:9e:86:c0:2c:50:13:b7:f0:05:
22:24:d5:31:f9:af:75:8c:14:e6:32:e2:1c:1a:c4:c6:2a:ac:
b3:73:f9:9e:47:b2:4e:9c:2b:10:04:39:e8:13:85:b9:43:e0:
8f:30:9c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:26 2025 by rpki-client