Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/881916d5-ef11-31e5-9d97-4820bcbafc92.roa
File: 881916d5-ef11-31e5-9d97-4820bcbafc92.roa (raw, json)
Hash identifier: ksl+sPsjI1rpbowi0tOoXLWxi0u2w2JeVZH1OtRwUf4=
Subject key identifier: 3C:48:31:8D:2B:B3:7D:43:70:0F:6B:B2:4B:01:B4:90:A7:E6:B7:B0
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F43285848A318AE5A4BCBE1A8360E1E80
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/881916d5-ef11-31e5-9d97-4820bcbafc92.roa
Signing time: Thu 23 Jan 2025 06:13:23 +0000
ROA not before: Thu 23 Jan 2025 06:13:23 +0000
ROA not after: Wed 23 Apr 2025 05:13:23 +0000
asID: 16591
IP address blocks: 136.57.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a3:18:ae:5a:4b:cb:e1:a8:36:0e:1e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: Jan 23 06:13:23 2025 GMT
Not After : Apr 23 05:13:23 2025 GMT
Subject: CN=ca849d6b-4db0-45b0-838a-beef32c1e239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cf:02:5b:89:8a:46:02:c4:0a:b2:9c:7c:2a:
f4:64:79:9d:25:95:b6:ab:e3:e4:10:51:18:4d:00:
00:71:1a:61:3d:be:c2:0d:de:b0:4d:88:1f:76:85:
bd:e5:39:a6:aa:b8:f2:65:18:34:b0:42:a0:7c:61:
da:9b:07:27:ab:c7:16:66:3e:06:6e:33:ff:a3:59:
89:23:4b:de:46:33:72:16:7e:3c:70:8c:cc:e2:42:
fc:cb:a3:83:96:6b:03:56:62:ab:86:ae:9d:b5:b3:
34:9b:73:25:67:59:87:2c:1c:fc:67:c5:13:4b:a6:
c6:05:f8:ab:9e:55:dd:08:b5:39:7b:53:1a:51:bf:
54:8b:b4:89:51:c2:95:d9:5e:44:fb:5b:67:c4:aa:
af:ef:10:4c:1e:e9:89:62:82:39:13:e0:17:7d:29:
cc:3e:50:13:3a:e6:24:f0:4d:99:74:13:7a:39:44:
53:d6:07:26:fe:f1:89:20:09:a9:33:1d:86:44:61:
61:dd:d7:9a:a7:73:1d:67:88:43:fb:b4:8b:3e:74:
07:d7:19:01:99:a9:7e:1d:ea:0d:99:28:02:37:26:
cd:e9:fa:cb:26:f1:fc:2f:52:49:82:fd:5c:31:c7:
f5:de:95:5a:eb:94:05:82:c3:43:3b:8b:20:91:26:
3b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:48:31:8D:2B:B3:7D:43:70:0F:6B:B2:4B:01:B4:90:A7:E6:B7:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/881916d5-ef11-31e5-9d97-4820bcbafc92.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
136.57.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:3e:54:0e:6e:b7:00:f5:68:5b:12:b0:f3:b0:52:81:a1:32:
5e:43:17:46:f0:99:48:28:8d:e5:f8:aa:64:39:69:41:32:60:
a9:98:d7:9b:c7:33:d8:96:8f:90:38:16:0d:4d:ea:2e:8b:f2:
60:9e:3c:f7:e7:ab:da:69:6b:9c:78:5b:cd:2a:6e:aa:63:39:
9c:21:da:b6:1d:25:00:11:c6:4b:ca:87:d4:b0:90:26:20:30:
20:e8:19:b0:ce:31:d2:a5:57:43:7b:33:46:ba:6e:f1:13:62:
8e:65:2f:ca:18:f6:7a:d7:fc:7b:81:5e:0b:31:ea:65:71:c5:
46:10:3f:1e:bd:4a:16:59:19:4c:30:b9:08:d8:8b:7c:e4:fd:
99:d9:f0:eb:15:20:34:21:3f:c3:c1:66:0b:5a:57:c0:e9:3f:
c5:c6:94:1e:87:cf:bd:b0:43:92:09:8f:17:cd:78:1a:4b:35:
f3:31:f4:ce:14:1f:52:5b:76:21:74:1a:27:1f:f6:88:a2:38:
4d:bb:be:3a:c3:12:9c:f6:85:42:04:d7:f8:06:bd:5c:71:ee:
4f:3e:d9:44:be:3c:a8:90:01:15:90:1c:3b:a9:1c:0a:5c:0e:
91:76:c2:93:5a:5c:ba:6d:80:f1:cf:13:98:4a:89:1b:98:0b:
1d:5d:68:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:59 2025 by rpki-client