Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/72dda1b5-1896-3122-a9fd-3eadfa41596d.roa
File: 72dda1b5-1896-3122-a9fd-3eadfa41596d.roa (raw, json)
Hash identifier: +nE9OrBoHT/C7o1+AAsxemdOcVJ+lWdhBn4XYUroEJY=
Subject key identifier: 63:1B:A9:42:E4:4B:F7:99:01:02:49:CD:1D:EF:D8:83:1B:69:CF:1D
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F43285848A318AC045B5FF175E82B1740
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/72dda1b5-1896-3122-a9fd-3eadfa41596d.roa
Signing time: Thu 23 Jan 2025 06:13:22 +0000
ROA not before: Thu 23 Jan 2025 06:13:22 +0000
ROA not after: Wed 23 Apr 2025 05:13:22 +0000
asID: 16591
IP address blocks: 136.34.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a3:18:ac:04:5b:5f:f1:75:e8:2b:17:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: Jan 23 06:13:22 2025 GMT
Not After : Apr 23 05:13:22 2025 GMT
Subject: CN=73d350fe-23e6-4d05-a296-8c1900c185a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:60:30:38:3e:7e:5a:6b:57:64:77:99:de:09:
a4:68:42:37:cc:30:ef:de:48:b7:5f:6f:a9:8b:e2:
21:81:75:fd:7c:59:c1:ef:5e:cf:73:ef:d4:41:7b:
f4:56:74:d7:fa:4d:9b:97:03:c2:cc:2f:d4:fc:93:
f1:d4:e0:94:8e:a6:15:f9:2c:3e:67:47:51:e8:80:
c1:9c:9b:df:d6:92:88:3e:0c:42:af:70:60:e5:79:
9e:e2:6f:0f:5e:88:68:ed:c9:76:8e:73:48:fe:ff:
91:37:45:75:dd:46:d6:38:26:b0:0a:21:83:57:56:
ba:86:bb:c4:e4:aa:bf:ec:7f:04:41:da:e4:7a:35:
51:23:e0:bd:33:a1:85:eb:c8:a3:e9:70:3e:82:9d:
ff:2d:e8:26:cf:49:91:bf:51:60:89:91:84:fd:72:
1a:76:89:5e:f4:c1:87:74:92:fd:fd:10:a7:a1:5c:
7d:e1:bf:66:b0:ea:56:fd:5f:39:f1:3c:73:0f:f2:
4a:6c:73:ae:29:67:c3:8f:90:5e:fb:2d:75:8a:f7:
78:91:86:ce:80:b3:53:03:13:01:b4:18:6f:ec:5c:
27:16:c4:47:d4:68:74:12:3e:78:50:46:09:fe:ad:
51:48:63:a5:ea:2f:88:df:54:07:93:f9:af:00:28:
c1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:1B:A9:42:E4:4B:F7:99:01:02:49:CD:1D:EF:D8:83:1B:69:CF:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/72dda1b5-1896-3122-a9fd-3eadfa41596d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
136.34.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:77:ee:18:63:2b:0b:ee:d5:2f:4d:30:9c:2a:29:b1:8f:d0:
78:43:dd:14:4b:f0:4c:80:4d:69:d8:e7:2d:d6:f4:55:aa:c6:
78:aa:52:a4:e6:52:4c:a3:33:0a:a1:04:15:0d:64:c9:0d:07:
a5:65:a1:10:1c:44:c1:cd:37:5e:f5:4f:88:03:40:4a:dc:aa:
40:6e:1f:9c:ea:42:fb:74:28:2c:a3:c1:ab:09:37:1b:79:9d:
dc:62:c9:22:df:ce:1d:12:94:91:27:54:0c:f6:6d:8d:c5:e4:
18:11:22:4d:b9:4b:dd:bc:cb:b4:11:d1:20:b7:1f:c6:4d:b8:
30:9d:79:a5:43:f9:63:65:01:b0:3e:3e:91:cd:5b:a0:c8:7d:
7f:37:cb:fc:17:bb:85:fd:10:56:0b:d1:f7:da:a4:be:91:d2:
b9:08:8f:ea:8b:7a:85:d2:01:4e:bc:64:53:a1:57:ec:14:c9:
ff:59:b1:7c:62:d0:c8:42:5b:62:d1:a9:5f:c2:8b:f6:b6:6c:
8e:79:33:61:70:d7:1f:66:74:97:f6:71:64:f5:99:e7:51:c7:
29:f8:f9:aa:05:6a:b4:e8:ac:69:45:06:f4:ce:bc:ce:a0:f0:
5e:d1:c9:55:86:05:e5:a9:82:5d:98:d5:7a:23:c1:9e:4d:85:
9f:81:6b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:24 2025 by rpki-client