Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/85518d6e-ecd0-388a-8a60-134ada0e2ae9.roa
File: 85518d6e-ecd0-388a-8a60-134ada0e2ae9.roa (raw, json)
Hash identifier: f0TL7TGqgwSPgKMdIN+xAAhwxmCGM0yL46gkEvdOl5c=
Subject key identifier: B7:04:BA:1D:3A:14:F9:0C:E0:03:5C:67:EC:2F:94:FD:01:69:8E:77
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F43285848A318AD94FA1B628B0E1BB780
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/85518d6e-ecd0-388a-8a60-134ada0e2ae9.roa
Signing time: Thu 23 Jan 2025 06:13:22 +0000
ROA not before: Thu 23 Jan 2025 06:13:22 +0000
ROA not after: Wed 23 Apr 2025 05:13:22 +0000
asID: 16591
IP address blocks: 136.35.192.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a3:18:ad:94:fa:1b:62:8b:0e:1b:b7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: Jan 23 06:13:22 2025 GMT
Not After : Apr 23 05:13:22 2025 GMT
Subject: CN=90d8014a-1f94-4611-9477-915ff5795f33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:00:42:e3:b4:d1:27:c9:85:1d:c6:f0:22:12:
e5:7e:f1:ff:21:0a:ff:5b:4a:78:dd:7c:db:c7:97:
2f:1d:c5:47:15:0d:b8:bb:00:9f:07:a6:6c:5e:8a:
88:4e:85:0f:91:2a:4a:6b:a2:bf:be:c2:3f:f8:f7:
2c:b6:fd:ad:72:4e:74:1b:4a:3b:a8:10:91:85:2f:
f6:c5:82:72:02:14:07:3a:15:95:22:2f:f1:ae:72:
80:a9:fb:e7:51:4d:b9:92:e0:69:6d:9f:b4:fe:ff:
ab:45:d8:cc:40:64:3f:eb:37:97:0d:2b:1a:a1:80:
59:ed:34:9f:50:e7:47:ec:aa:8e:ec:a2:88:a8:eb:
6b:b7:a2:58:4a:56:97:ab:5c:fb:72:df:75:34:49:
ee:6e:c2:09:34:24:99:95:b8:e8:c8:0c:c0:d4:7e:
d7:9b:83:59:43:47:f8:fa:0b:be:2f:ab:f6:d7:7e:
a3:56:5f:7f:ad:4e:23:4f:8d:54:02:ba:bc:d6:83:
76:b3:58:8b:6a:a9:1a:6a:3f:16:76:1e:90:64:da:
3f:71:75:f8:04:c3:05:c3:10:ac:32:ea:87:b4:1e:
6b:99:77:e0:7b:e6:3d:16:ac:e1:b8:88:61:2e:f3:
9f:07:57:0a:04:1b:04:e0:0a:e4:a2:ee:41:66:60:
b1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:04:BA:1D:3A:14:F9:0C:E0:03:5C:67:EC:2F:94:FD:01:69:8E:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/85518d6e-ecd0-388a-8a60-134ada0e2ae9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
136.35.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:fe:74:8a:c5:bd:e1:2c:8e:f4:13:5d:82:9c:25:2f:83:9c:
ee:00:db:56:bb:08:f5:78:3e:cb:36:c6:35:f8:02:38:93:ab:
6b:66:ba:6d:e2:49:43:e9:82:3d:3a:0d:c8:23:5c:25:25:a3:
44:73:41:a8:22:c1:c6:62:65:af:65:a1:51:d0:75:5a:a8:c9:
08:c7:ae:1f:3c:7c:76:97:49:69:9d:94:75:e3:47:03:54:ab:
c2:86:b4:3d:d5:26:6f:66:ee:db:d6:d8:cf:c0:d7:86:12:37:
31:a0:cd:0b:9e:a5:a4:8b:57:a6:b3:09:d0:78:f3:6b:ef:cf:
c1:64:92:75:78:28:da:a5:d0:b9:48:40:9f:9b:13:92:c2:6f:
05:e6:ec:ab:b4:85:28:06:39:51:de:1a:91:21:d9:fa:af:fb:
7c:0c:8b:63:2c:bb:a9:45:c5:ee:8e:14:3e:d9:23:f3:26:05:
df:6e:8a:1b:c7:af:8f:6a:8c:5a:3e:96:9a:bc:3d:cb:f9:b5:
ac:5c:37:b6:d8:53:d9:27:ea:53:e6:6d:20:00:34:21:ce:bd:
60:7a:92:83:fc:8f:c3:b3:f5:14:c3:d6:a2:2a:ba:3a:3d:3d:
b8:7d:fb:ba:3f:da:7f:02:d7:0d:a5:97:81:19:3f:bf:f7:a7:
2b:c5:13:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:30 2025 by rpki-client