Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/69139122-8fe4-310c-9fd9-e581b953ea9c.roa
File: 69139122-8fe4-310c-9fd9-e581b953ea9c.roa (raw, json)
Hash identifier: fVuWfo0q55wZLSjZdi3pAl+na02T5YgHWN2TEK1agPE=
Subject key identifier: 88:4A:A0:20:07:E0:16:C5:27:F1:50:C1:50:5D:E7:73:B9:4D:28:25
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F43285848A318A239AF4EA4FB51A3B380
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/69139122-8fe4-310c-9fd9-e581b953ea9c.roa
Signing time: Thu 23 Jan 2025 06:13:17 +0000
ROA not before: Thu 23 Jan 2025 06:13:17 +0000
ROA not after: Wed 23 Apr 2025 05:13:17 +0000
asID: 16591
IP address blocks: 136.36.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a3:18:a2:39:af:4e:a4:fb:51:a3:b3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: Jan 23 06:13:17 2025 GMT
Not After : Apr 23 05:13:17 2025 GMT
Subject: CN=9ad16393-62fe-4acd-abf6-2ffdc60ae0b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4a:a6:97:0e:d9:aa:77:44:e7:77:c3:51:af:
62:31:d3:75:45:9d:5b:17:ae:16:f4:2a:9e:8e:b3:
67:82:51:4a:6b:74:60:7a:c5:77:d1:32:37:bc:68:
6b:af:f5:d8:41:f8:bf:52:31:36:19:41:34:89:c8:
c6:16:85:63:d7:49:51:dd:6e:14:35:07:a6:28:72:
39:6f:47:2c:ef:5c:4e:40:5c:98:a5:53:54:f7:81:
42:0d:9e:1e:f0:e5:ec:97:da:0a:bd:4b:ab:8e:15:
ea:85:c5:7a:9a:2b:cb:93:44:35:b3:fc:f1:31:c6:
5d:62:21:c4:3f:b5:58:53:09:89:c0:84:98:f5:f5:
3f:ad:fe:4d:10:b5:7f:94:b8:8b:ef:3b:d9:15:0c:
da:f2:90:fc:e9:8e:d8:97:84:2b:42:d5:71:1a:0d:
7c:63:50:91:3a:95:89:ea:e0:c6:6b:35:c3:be:5e:
80:f8:74:26:9f:11:21:cf:24:3b:3e:35:68:e6:c6:
cf:ef:49:58:a6:f9:95:51:07:9c:83:da:61:71:9d:
bd:15:cd:58:59:92:e8:35:22:b9:b9:1c:93:56:e7:
7c:33:03:56:8d:61:80:d9:40:8a:a4:06:5c:0f:35:
09:44:68:6c:b7:b7:e6:9a:df:d9:f8:c8:ce:b7:5e:
7a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:4A:A0:20:07:E0:16:C5:27:F1:50:C1:50:5D:E7:73:B9:4D:28:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/69139122-8fe4-310c-9fd9-e581b953ea9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
136.36.16.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:55:94:2e:b4:e9:f9:93:5f:be:44:db:7e:3c:0a:c6:c3:2b:
42:48:d3:85:5e:9c:bd:65:30:98:59:1a:c7:2f:3e:98:e1:bc:
c3:3a:dc:79:78:b5:bd:fc:8c:a3:5a:a6:56:38:9b:fc:62:f1:
3d:16:e9:73:e1:23:10:75:df:97:ae:73:02:2d:e6:91:25:8a:
68:a4:97:a0:29:41:7c:29:49:dc:f5:f7:e1:94:c0:ba:4c:b4:
d5:37:c3:dd:3f:7d:d2:ce:87:0f:14:38:c9:2e:29:ee:86:eb:
bf:f6:8b:4a:f0:45:80:e9:8a:0f:5c:94:06:43:49:32:f3:71:
4f:1b:b8:ec:6c:bf:64:17:5d:33:59:4d:46:c5:61:be:7d:7e:
7d:c2:8a:02:48:35:eb:cf:12:8c:fb:ea:35:be:e5:ea:f2:ae:
54:8b:73:96:2c:59:db:73:2e:de:cf:e4:55:cc:8e:26:e6:ed:
d0:a2:6c:66:d3:f9:ff:c6:06:c8:27:d4:ac:8a:c5:23:59:87:
e8:9d:c8:3b:5b:f0:94:a5:46:76:44:03:70:d0:37:ab:3d:61:
d7:9f:fc:71:32:c2:d7:68:59:98:d6:30:b5:45:67:95:d8:51:
d1:ee:b3:86:72:bf:17:be:91:72:d9:f6:2c:85:75:8c:49:ce:
5f:e0:0a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:16 2025 by rpki-client