Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/8e884613-0648-3b68-9e50-523274653a85.roa
File: 8e884613-0648-3b68-9e50-523274653a85.roa (raw, json)
Hash identifier: aDkLglUyvQwdtAxdj+xlgPjEsbkVlA2wdfiVgLyuKd0=
Subject key identifier: EC:3F:74:CF:35:2F:01:FA:34:5A:26:1C:63:D5:C0:E6:10:87:15:BA
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F43285848A318A292095B9CDDF777D840
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/8e884613-0648-3b68-9e50-523274653a85.roa
Signing time: Thu 23 Jan 2025 06:13:17 +0000
ROA not before: Thu 23 Jan 2025 06:13:17 +0000
ROA not after: Wed 23 Apr 2025 05:13:17 +0000
asID: 16591
IP address blocks: 136.34.48.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a3:18:a2:92:09:5b:9c:dd:f7:77:d8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: Jan 23 06:13:17 2025 GMT
Not After : Apr 23 05:13:17 2025 GMT
Subject: CN=de5f5c26-322f-4c4a-be05-4cccf75e797a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b8:8d:8e:6d:94:30:f9:b3:bf:8d:98:45:70:
f8:31:b0:94:29:3e:95:b7:fb:f3:fc:84:2c:e0:cb:
7f:1f:57:c9:92:eb:02:f9:68:33:31:d7:f6:a2:c1:
06:aa:4e:df:47:bb:92:bb:ea:e2:bb:90:14:be:11:
43:8f:c5:42:7a:f3:e0:a1:80:d9:2e:f2:a9:7d:a9:
e8:a2:43:b4:1c:50:d4:e0:a4:5c:6e:55:1f:a7:12:
35:91:e4:23:fc:c5:75:4d:ac:b3:45:dc:56:0e:66:
ac:9d:72:03:49:94:c7:38:eb:12:40:d5:de:ac:6f:
c5:13:d8:d7:a4:92:0d:5d:df:08:db:b2:c9:b9:e8:
98:e2:2d:f3:e6:94:58:74:98:7b:bb:ad:04:81:fa:
13:53:9c:45:67:8c:b9:a8:fc:7c:10:a7:86:1a:93:
c4:7e:fe:88:ba:77:21:6d:bf:f4:62:e5:9f:75:db:
b0:69:bd:f8:e2:96:01:33:e9:95:be:a5:1f:64:0e:
37:ac:93:73:36:bd:53:fd:c1:84:43:34:98:fe:92:
bf:30:5d:57:3c:6a:50:a6:1c:24:7e:e7:0f:92:b6:
0c:ca:bb:e0:5f:ee:6d:5e:ce:94:ec:4b:4c:3c:67:
aa:7e:0c:12:5e:05:31:2f:67:54:63:b5:41:23:bd:
5d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:3F:74:CF:35:2F:01:FA:34:5A:26:1C:63:D5:C0:E6:10:87:15:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/8e884613-0648-3b68-9e50-523274653a85.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
136.34.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:7f:1f:40:8d:e8:6f:d3:79:2d:63:62:e9:49:2a:a3:fd:f6:
34:2f:80:81:c1:da:85:31:f2:17:0b:21:6f:d0:36:64:1b:55:
ae:b5:ac:9f:a6:0f:ea:d6:7d:69:53:cb:44:46:ec:2e:89:ec:
d6:8e:7c:1b:c5:eb:c9:55:98:2d:50:79:52:c8:cc:6b:9d:1d:
3e:ab:0d:33:c0:46:cc:e6:2d:d3:cd:1e:3f:10:1e:b7:c8:be:
98:26:73:13:01:0b:28:a5:e0:a7:1a:68:fc:29:89:71:3b:bd:
cb:18:22:d4:23:00:70:fe:8b:2a:b8:ac:50:a2:38:49:2e:4f:
c1:e5:6f:14:61:1d:d1:84:45:7e:6e:f3:f1:1d:68:ff:e2:31:
54:fe:b9:e0:e5:e5:61:bb:0e:50:c3:7b:a0:47:42:ed:71:7a:
49:17:1f:80:be:53:a1:11:21:4d:80:80:59:5e:ab:15:4e:74:
6c:f4:c6:26:92:8f:e1:c1:8e:04:fb:d7:c5:92:b6:b0:c0:61:
ff:5a:d6:11:f9:58:ae:50:18:6e:f6:65:e4:bd:7a:53:24:b0:
99:c3:71:fc:4d:64:6f:9e:e9:05:e8:f1:c3:c0:aa:70:6e:44:
13:ee:4e:eb:a0:b6:e2:83:cb:c0:da:01:e2:6d:ed:c9:5b:22:
33:75:ba:89
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEijGKKSCVuc3fd32EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh
MzRlMB4XDTI1MDEyMzA2MTMxN1oXDTI1MDQyMzA1MTMxN1owLzEtMCsGA1UEAxMk
ZGU1ZjVjMjYtMzIyZi00YzRhLWJlMDUtNGNjY2Y3NWU3OTdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7iNjm2UMPmzv42YRXD4MbCUKT6Vt/vz/IQs
4Mt/H1fJkusC+WgzMdf2osEGqk7fR7uSu+riu5AUvhFDj8VCevPgoYDZLvKpfano
okO0HFDU4KRcblUfpxI1keQj/MV1TayzRdxWDmasnXIDSZTHOOsSQNXerG/FE9jX
pJINXd8I27LJueiY4i3z5pRYdJh7u60EgfoTU5xFZ4y5qPx8EKeGGpPEfv6Iunch
bb/0YuWfdduwab344pYBM+mVvqUfZA43rJNzNr1T/cGEQzSY/pK/MF1XPGpQphwk
fucPkrYMyrvgX+5tXs6U7EtMPGeqfgwSXgUxL2dUY7VBI71d8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOw/dM81LwH6NFomHGPVwOYQhxW6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2
NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvOGU4ODQ2MTMtMDY0OC0z
YjY4LTllNTAtNTIzMjc0NjUzYTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj
MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5
YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0
MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCIwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC5/H0CN6G/TeS1jYulJKqP99jQvgIHB2oUx8hcLIW/QNmQbVa61rJ+m
D+rWfWlTy0RG7C6J7NaOfBvF68lVmC1QeVLIzGudHT6rDTPARszmLdPNHj8QHrfI
vpgmcxMBCyil4KcaaPwpiXE7vcsYItQjAHD+iyq4rFCiOEkuT8HlbxRhHdGERX5u
8/EdaP/iMVT+ueDl5WG7DlDDe6BHQu1xekkXH4C+U6ERIU2AgFleqxVOdGz0xiaS
j+HBjgT718WStrDAYf9a1hH5WK5QGG72ZeS9elMksJnDcfxNZG+e6QXo8cPAqnBu
RBPuTuugtuKDy8DaAeJt7clbIjN1uok=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:22 2025 by rpki-client