Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/62c08158-0e7c-3b09-b973-f35c8fe33560.roa
File: 62c08158-0e7c-3b09-b973-f35c8fe33560.roa (raw, json)
Hash identifier: Q88uUlm1FxpDZDbvHHo6oHrJBjJtiBov4p1daqpTb7I=
Subject key identifier: B7:B3:FF:A1:E9:FB:80:99:29:69:68:C8:D8:AC:49:15:71:88:4F:A9
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F43285848A318A844D37937639CA5CAC0
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/62c08158-0e7c-3b09-b973-f35c8fe33560.roa
Signing time: Thu 23 Jan 2025 06:13:20 +0000
ROA not before: Thu 23 Jan 2025 06:13:20 +0000
ROA not after: Wed 23 Apr 2025 05:13:20 +0000
asID: 16591
IP address blocks: 136.32.0.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a3:18:a8:44:d3:79:37:63:9c:a5:ca:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: Jan 23 06:13:20 2025 GMT
Not After : Apr 23 05:13:20 2025 GMT
Subject: CN=838f248e-0e5b-4ae9-b1a7-67599cda94f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8c:17:5f:1e:f9:84:02:9d:3e:bf:ab:83:9a:
17:91:f2:0f:0d:53:12:55:85:62:0a:54:46:28:35:
02:1f:ef:25:e7:c2:6d:97:ab:8d:c7:12:a3:d0:20:
18:22:5a:55:d8:01:9b:5e:33:9c:2f:2f:3e:d5:44:
ec:fe:a7:28:9f:03:35:7b:3e:7b:07:53:00:36:26:
e4:f7:92:ea:9c:e7:3a:1e:b6:89:71:30:9b:67:c6:
2a:ea:ac:d9:77:ea:e1:32:49:6d:c8:76:fd:44:a5:
d0:b7:9f:50:1d:ee:d1:cb:e4:c7:2d:ab:f2:22:39:
a8:4d:6f:94:84:3e:30:ee:b8:13:b4:d0:ea:3e:c3:
95:a9:e1:a5:f4:ee:a5:8c:f1:b4:e1:65:a3:93:03:
1e:bb:74:36:22:97:d1:72:65:b1:c8:45:a2:8b:66:
01:b8:7e:89:26:a4:5a:de:cd:1d:e0:64:db:b4:c9:
b0:92:2b:95:d5:8c:48:49:d5:e0:f0:e5:11:f7:c0:
f9:ee:d9:20:3d:d9:fb:65:17:c4:67:a7:5c:22:e2:
7b:04:ae:ce:49:ca:99:67:0e:d5:f6:fe:db:01:e8:
1e:7c:79:5e:df:fd:fc:7a:91:58:69:65:27:92:97:
f2:8a:1e:18:39:39:9d:a5:0d:9c:0e:31:d1:83:37:
cf:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B3:FF:A1:E9:FB:80:99:29:69:68:C8:D8:AC:49:15:71:88:4F:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/62c08158-0e7c-3b09-b973-f35c8fe33560.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
136.32.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:a9:8a:de:42:e1:13:13:8b:2e:2a:10:c7:8e:ce:2e:ab:28:
44:f4:fb:1b:f5:eb:74:15:e2:48:83:31:a0:2f:ba:08:2a:2c:
97:1d:ce:ab:3b:7a:d5:95:4b:c9:a0:6c:ec:03:61:ee:2f:7a:
b1:66:ea:49:ef:d7:12:34:5b:2c:9e:60:ab:1d:51:fc:65:11:
06:86:21:25:d7:cc:7b:13:36:13:2e:ea:9c:87:53:95:e5:08:
ed:3a:c4:4d:0f:d0:a5:07:90:8a:a0:6f:e6:b4:ba:2c:33:4b:
73:e3:6c:e8:70:a1:ae:69:70:e1:3e:11:e1:5b:9b:24:90:b8:
2e:c4:e4:34:7f:1b:cc:00:c3:2c:cd:6c:4a:46:90:d3:e1:be:
66:3c:2b:13:ed:ab:8b:e6:35:09:85:87:6b:99:74:12:ce:37:
6a:71:21:ff:42:aa:49:7a:96:b4:3b:bd:07:1c:6a:94:05:92:
cd:5b:9e:88:76:b3:b9:89:bc:f0:57:0c:40:ad:ab:d9:8e:01:
50:f0:b1:ef:7d:4e:8d:73:8e:0d:af:02:21:94:26:94:6b:2a:
95:38:e3:c2:b9:80:76:59:ad:dc:93:df:b1:ad:f4:b7:67:86:
dd:34:e7:de:56:ae:c9:bc:fa:62:5c:83:33:f4:11:03:46:f1:
c3:1e:64:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:29:55 2025 by rpki-client