Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/8afb097d-bf51-3fc0-91b1-2046acbd3a80.roa
File: 8afb097d-bf51-3fc0-91b1-2046acbd3a80.roa (raw, json)
Hash identifier: 1Rny6tN/ZjJYHsfM81cvajMLNSYGkxNzMenVSQYLWeg=
Subject key identifier: B0:9B:FC:01:15:0B:AE:57:45:B6:93:43:6E:57:E5:97:48:89:6C:8C
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F43285848A318A91C98C52B73888FC1C0
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/8afb097d-bf51-3fc0-91b1-2046acbd3a80.roa
Signing time: Thu 23 Jan 2025 06:13:20 +0000
ROA not before: Thu 23 Jan 2025 06:13:20 +0000
ROA not after: Wed 23 Apr 2025 05:13:20 +0000
asID: 16591
IP address blocks: 136.38.224.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a3:18:a9:1c:98:c5:2b:73:88:8f:c1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: Jan 23 06:13:20 2025 GMT
Not After : Apr 23 05:13:20 2025 GMT
Subject: CN=41cc559f-0a92-47c9-9646-2bf004f239f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:97:3d:59:1f:a0:ff:71:6d:04:57:b3:c0:a9:
ea:74:98:fb:6a:3c:a6:d9:1c:8f:b3:b4:d8:6c:c4:
87:57:22:83:d8:88:4e:07:63:fe:49:fb:60:76:c8:
3b:8d:8c:b1:91:18:0f:b3:d5:4f:c5:bf:1e:5c:62:
af:22:2d:aa:c7:c4:92:ca:d8:62:a0:cd:ff:b7:8b:
32:61:5e:5f:20:8f:18:2b:bd:33:4a:3f:53:74:c6:
dd:3c:02:b8:1d:b4:aa:20:0e:6d:25:ad:e9:e2:26:
27:94:54:9f:86:7d:68:07:75:26:65:37:00:90:4c:
47:69:5e:f3:a6:cd:26:0f:6a:d1:75:04:90:19:97:
27:4d:cf:7d:ca:af:cd:a3:04:a9:61:0c:50:cd:d9:
8a:e2:e6:98:ab:fc:d5:34:27:5d:4f:65:fb:ce:63:
b8:9a:35:6d:18:a7:41:07:72:18:04:50:df:0d:68:
38:f9:61:b5:27:5f:aa:46:00:0c:d1:29:d7:b8:f4:
a0:eb:52:5b:fe:96:51:f6:ca:70:da:4a:5b:20:7f:
b9:52:6d:74:3d:81:bb:51:3c:38:1c:21:ae:60:3a:
c7:06:4f:42:b7:53:6d:21:23:2d:d2:6e:be:00:b5:
c6:b3:4b:72:8b:9e:73:70:53:5c:cd:6d:03:ad:68:
1b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:9B:FC:01:15:0B:AE:57:45:B6:93:43:6E:57:E5:97:48:89:6C:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/8afb097d-bf51-3fc0-91b1-2046acbd3a80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
136.38.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:e5:42:82:7a:13:3d:4c:05:01:78:74:8c:7f:d4:25:74:b2:
56:8e:ff:01:82:87:b4:04:37:03:4d:fa:ce:fa:e5:ea:46:16:
34:76:d6:c1:3b:8a:ae:46:57:b2:0e:f6:bc:72:1f:38:95:ab:
18:bd:58:14:f5:bd:4c:81:c8:a9:45:d3:19:5d:a4:43:a7:4d:
49:0f:01:de:98:19:bf:00:57:4e:80:57:56:af:e9:2a:19:ce:
fc:cc:e9:33:b3:79:9f:b9:ac:d0:7e:46:ee:05:c3:31:8f:a3:
59:d4:0c:62:a6:58:8c:18:7e:1b:f2:75:03:53:4a:17:aa:72:
df:a2:4f:8a:76:dd:aa:0a:8d:06:34:75:d3:51:ec:ad:a6:1d:
5d:f6:e4:dd:cd:ce:4a:0f:be:ee:af:6e:3f:5e:2c:8b:73:05:
bb:8b:16:b5:c7:cb:24:71:87:4e:8f:b3:eb:f5:25:50:ce:98:
62:13:6d:cb:11:06:83:6f:da:ee:a3:3d:bc:5c:bd:35:1c:26:
fb:6e:99:b0:93:15:b5:41:53:e4:14:2b:59:fd:10:de:77:02:
1c:48:9b:4a:3b:f8:8e:96:dd:04:11:6a:fb:a2:26:fe:41:76:
f2:dc:eb:d2:ed:9a:ad:c9:37:be:c9:21:17:ec:da:cf:9b:2c:
53:88:50:c2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEijGKkcmMUrc4iPwcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh
MzRlMB4XDTI1MDEyMzA2MTMyMFoXDTI1MDQyMzA1MTMyMFowLzEtMCsGA1UEAxMk
NDFjYzU1OWYtMGE5Mi00N2M5LTk2NDYtMmJmMDA0ZjIzOWYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pc9WR+g/3FtBFezwKnqdJj7ajym2RyPs7TY
bMSHVyKD2IhOB2P+Sftgdsg7jYyxkRgPs9VPxb8eXGKvIi2qx8SSythioM3/t4sy
YV5fII8YK70zSj9TdMbdPAK4HbSqIA5tJa3p4iYnlFSfhn1oB3UmZTcAkExHaV7z
ps0mD2rRdQSQGZcnTc99yq/NowSpYQxQzdmK4uaYq/zVNCddT2X7zmO4mjVtGKdB
B3IYBFDfDWg4+WG1J1+qRgAM0SnXuPSg61Jb/pZR9spw2kpbIH+5Um10PYG7UTw4
HCGuYDrHBk9Ct1NtISMt0m6+ALXGs0tyi55zcFNczW0DrWgbUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLCb/AEVC65XRbaTQ25X5ZdIiWyMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2
NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvOGFmYjA5N2QtYmY1MS0z
ZmMwLTkxYjEtMjA0NmFjYmQzYTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj
MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5
YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0
MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCbgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH/lQoJ6Ez1MBQF4dIx/1CV0slaO/wGCh7QENwNN+s765epGFjR21sE7
iq5GV7IO9rxyHziVqxi9WBT1vUyByKlF0xldpEOnTUkPAd6YGb8AV06AV1av6SoZ
zvzM6TOzeZ+5rNB+Ru4FwzGPo1nUDGKmWIwYfhvydQNTSheqct+iT4p23aoKjQY0
ddNR7K2mHV325N3NzkoPvu6vbj9eLItzBbuLFrXHyyRxh06Ps+v1JVDOmGITbcsR
BoNv2u6jPbxcvTUcJvtumbCTFbVBU+QUK1n9EN53AhxIm0o7+I6W3QQRavuiJv5B
dvLc69Ltmq3JN77JIRfs2s+bLFOIUMI=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:15 2025 by rpki-client