Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/8baccbe7-1913-3453-9a69-a902ed035ba8.roa
File: 8baccbe7-1913-3453-9a69-a902ed035ba8.roa (raw, json)
Hash identifier: WJKbxSncbfqrs8KYkusPiTgt1n+4BJMBsJt/tLvJKkY=
Subject key identifier: 9A:2A:1D:D2:7A:18:1F:A9:22:C8:84:4D:E8:AB:DC:58:1D:8E:EA:DA
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F43285848A318A897C25024CD28DD2371
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/8baccbe7-1913-3453-9a69-a902ed035ba8.roa
Signing time: Thu 23 Jan 2025 06:13:20 +0000
ROA not before: Thu 23 Jan 2025 06:13:20 +0000
ROA not after: Wed 23 Apr 2025 05:13:20 +0000
asID: 16591
IP address blocks: 136.47.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a3:18:a8:97:c2:50:24:cd:28:dd:23:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: Jan 23 06:13:20 2025 GMT
Not After : Apr 23 05:13:20 2025 GMT
Subject: CN=589046d7-c540-4b11-8d26-c41e478cec58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a7:0e:89:26:c0:57:a7:be:f5:9d:f2:0f:fa:
84:a9:fa:41:c8:f5:9a:d7:0d:d1:ef:10:bc:a0:97:
95:fc:2a:65:bc:73:62:c2:c3:9d:84:08:96:cc:59:
c6:fb:e0:8e:3e:40:c1:6e:2b:29:34:df:2b:b5:15:
97:99:f6:a1:89:61:f2:da:25:6d:ff:ef:e7:01:24:
bb:39:c6:bc:bb:8a:32:5d:a1:76:ca:cd:8c:1e:d9:
68:e5:d1:a5:bc:8c:b0:6c:f4:f9:d7:f8:75:44:a2:
c8:1d:ff:31:98:bb:b8:6e:4e:05:b1:6b:a9:e3:26:
d2:c0:f9:67:b0:4d:69:7c:3d:4c:e7:ad:5c:a9:a2:
aa:a8:31:01:62:5f:51:12:b8:7b:7f:31:c0:a3:46:
8c:b7:1c:aa:f4:e5:3c:74:99:a5:ce:a9:c7:fb:bf:
cf:b5:34:d9:c9:97:84:49:43:53:7e:12:df:27:a9:
25:0c:31:af:a4:6c:ce:ce:4e:d5:cc:a5:e4:64:11:
8b:52:65:fd:8d:d3:55:52:49:8e:a3:30:e6:2d:40:
1b:fa:27:57:cc:8f:0e:34:01:d5:5f:d4:87:2d:16:
93:fb:d6:5d:b2:aa:8a:92:c6:ee:0e:c8:c9:1d:f5:
70:6b:ee:ac:ee:f7:68:34:cc:38:d4:6f:8e:ce:30:
61:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:2A:1D:D2:7A:18:1F:A9:22:C8:84:4D:E8:AB:DC:58:1D:8E:EA:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/8baccbe7-1913-3453-9a69-a902ed035ba8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
136.47.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:65:05:aa:08:bc:16:9a:1b:31:52:bc:5d:e1:58:98:71:ba:
35:96:d8:6a:85:4a:e5:cf:62:9d:19:0b:c1:6d:f4:4f:93:2e:
33:ff:8e:47:b0:1b:5a:7c:23:0f:ad:17:0f:af:e0:58:a0:af:
0c:31:84:9c:e6:02:b7:a9:8b:50:f9:45:f7:77:4a:db:bb:ef:
e7:fa:85:28:25:4e:e5:48:a5:c9:23:25:98:1a:81:ee:52:3c:
40:89:45:16:3d:a9:ba:c4:94:5f:d1:0b:26:a7:df:5e:92:d8:
67:9d:ee:8a:63:b8:51:17:ca:0f:7e:87:ac:6f:8a:56:c0:6d:
41:84:6a:2a:14:53:1a:72:ce:13:87:9c:82:f3:bc:44:e4:c1:
51:36:60:f9:fc:d5:d6:02:05:ef:0e:69:98:11:d1:dd:df:b5:
74:32:e9:86:a7:8d:a6:c5:f9:49:68:e8:bb:09:23:42:31:6a:
f3:da:bf:20:3d:6e:74:e1:08:0a:ae:0b:fd:85:3a:8d:a2:bc:
36:51:45:ed:0f:09:0d:78:6a:ad:c3:6d:6b:d2:6d:3f:50:ad:
dc:b8:1f:bd:f9:81:4c:f8:66:a2:8f:1c:4f:3f:5f:fe:6d:53:
00:f4:43:eb:b2:c0:2b:44:f6:a1:31:24:69:71:d7:12:cf:f0:
22:cb:6f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:35 2025 by rpki-client