Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/67235be9-e70f-35dc-8e56-2a5b56bdc270.roa
File: 67235be9-e70f-35dc-8e56-2a5b56bdc270.roa (raw, json)
Hash identifier: QZnbavD7s+cw9mI8KQkoiYDZwzkjnOd/0CzdiShADJw=
Subject key identifier: C0:EB:72:1C:F6:FA:41:2B:EF:8B:67:3C:4C:AA:CE:4F:B5:82:68:76
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F43285848A318A8D9E71F6531A78D9E70
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/67235be9-e70f-35dc-8e56-2a5b56bdc270.roa
Signing time: Thu 23 Jan 2025 06:13:20 +0000
ROA not before: Thu 23 Jan 2025 06:13:20 +0000
ROA not after: Wed 23 Apr 2025 05:13:20 +0000
asID: 16591
IP address blocks: 136.37.48.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a3:18:a8:d9:e7:1f:65:31:a7:8d:9e:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: Jan 23 06:13:20 2025 GMT
Not After : Apr 23 05:13:20 2025 GMT
Subject: CN=2dad06d8-9052-40ed-a353-178202e72161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:23:49:60:31:b8:92:64:62:ca:0f:93:53:54:
dd:4a:0f:e7:4b:7c:9d:27:3e:c5:62:07:8f:3c:06:
14:94:84:6e:72:ed:dc:d4:dc:9f:29:e5:c3:23:d7:
ef:de:1b:04:51:fe:03:ad:80:8d:f4:3a:26:6b:34:
34:92:d6:cc:e5:66:eb:4e:30:2e:38:75:03:19:e7:
c6:86:8a:0e:72:0d:ce:b6:f3:eb:f0:67:f9:87:27:
63:91:be:24:65:32:a3:19:04:6f:f1:9b:dc:18:92:
50:43:81:3f:a9:f2:64:c7:b6:0f:02:3b:90:6f:39:
71:91:48:4f:8b:86:8d:2a:17:13:4a:d8:b8:a5:c8:
4f:f5:77:45:61:5c:f9:2c:fd:01:0c:59:f1:6f:9d:
e5:4e:67:09:65:38:0a:bd:3a:6a:e9:d1:bd:6a:85:
4b:e9:4d:36:d0:26:3e:2e:8d:18:ba:38:e4:f1:d8:
ac:50:12:4c:0a:33:a4:17:e3:0f:6a:ae:6d:68:02:
bc:0b:ef:05:23:b5:82:c1:cc:3f:17:20:28:bf:9d:
2b:b4:2f:4f:a8:94:cf:6a:09:67:f4:0a:dd:a7:f4:
b7:00:30:d8:98:4c:21:20:c3:58:4e:8c:67:f2:fb:
8b:01:bb:d2:3d:8e:0e:75:52:44:c9:a6:61:47:55:
c6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:EB:72:1C:F6:FA:41:2B:EF:8B:67:3C:4C:AA:CE:4F:B5:82:68:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/67235be9-e70f-35dc-8e56-2a5b56bdc270.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
136.37.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:29:17:3b:24:9a:42:d9:a7:81:3b:93:8d:91:8e:21:4f:35:
bb:e3:09:6b:c0:f8:63:4c:b3:a1:c7:cc:94:61:2f:ef:aa:d6:
35:76:41:7c:f1:a5:fc:55:f2:c1:fe:58:0c:8a:83:5f:b0:c8:
6c:bf:f2:04:b9:6c:83:c7:e1:fe:24:83:75:58:47:78:aa:d8:
02:1c:63:5f:9b:f4:c7:10:f9:f7:c8:8b:7f:36:01:1c:20:b6:
a3:09:a7:57:47:f3:56:eb:06:35:cc:d1:e7:a1:7e:ad:ab:34:
4e:6e:b0:ea:7e:42:76:eb:17:75:30:ca:7d:25:42:69:17:95:
c8:72:6b:a5:1a:66:81:7e:ac:bf:fb:90:49:14:65:2e:bb:5a:
cc:1a:7f:b5:7e:79:de:1a:2c:7d:2f:44:5f:61:6c:fc:1b:d1:
0a:12:64:21:e3:9c:82:6d:66:16:0a:13:51:a9:bc:5c:c1:31:
54:33:a3:d0:7b:13:bc:c8:47:5c:e6:8c:ea:76:f1:f1:c8:d6:
16:93:14:f9:93:e4:ec:b4:fb:8e:5a:c0:dd:51:32:a6:5b:57:
fa:52:40:8a:da:e2:b9:4b:00:a4:f8:04:2c:25:09:92:a7:f9:
68:ff:db:a2:17:d6:87:6c:68:56:cb:c9:46:31:4f:cf:c8:ab:
36:ee:d3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:27 2025 by rpki-client