Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/9ee0e93f-8f9e-3874-bbe5-fd090dc8967c.roa
File: 9ee0e93f-8f9e-3874-bbe5-fd090dc8967c.roa (raw, json)
Hash identifier: 3L3hjm5t4haGT+LYYfGpoJNPCwnR3kqTXGaW1x7ndO0=
Subject key identifier: D9:61:C6:90:DF:2A:AD:9C:1D:94:D5:43:00:4B:70:AF:F0:56:E9:59
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F43285848A318AF4846BA61777C866940
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/9ee0e93f-8f9e-3874-bbe5-fd090dc8967c.roa
Signing time: Thu 23 Jan 2025 06:13:23 +0000
ROA not before: Thu 23 Jan 2025 06:13:23 +0000
ROA not after: Wed 23 Apr 2025 05:13:23 +0000
asID: 16591
IP address blocks: 136.38.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a3:18:af:48:46:ba:61:77:7c:86:69:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: Jan 23 06:13:23 2025 GMT
Not After : Apr 23 05:13:23 2025 GMT
Subject: CN=c910103f-9327-4178-8557-17265d053c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:69:77:4f:c8:f6:81:94:9a:e1:7f:34:06:d6:
e3:e6:43:85:ae:42:d8:bb:86:18:3f:b3:8b:2d:c8:
20:25:d3:2b:db:ee:ea:33:90:9f:0b:b0:a9:fe:81:
c3:04:4e:3c:89:47:de:7b:cb:9f:bc:df:1c:7f:82:
09:94:d8:82:0a:dd:ca:2f:f6:43:61:47:3a:dd:07:
b5:8c:15:4c:73:b9:d9:4b:21:a7:e8:49:4f:c4:9b:
22:cb:a1:24:24:68:35:15:72:3e:5d:49:9b:a8:c6:
36:63:97:cc:aa:40:ff:1e:20:20:5b:c4:3a:f3:ff:
43:a7:23:a2:eb:46:0f:b3:eb:db:95:1e:ae:a4:11:
e3:32:0a:e2:9f:8a:11:fe:23:19:fc:3d:d1:d9:e1:
94:04:37:46:a9:cd:0d:13:22:42:e9:4f:c2:00:b7:
a1:dd:a6:31:1f:d1:a3:2b:08:7b:7a:3b:bd:9b:30:
81:ad:8b:2f:5d:7a:ec:21:bf:23:8a:7b:62:24:cf:
9b:a2:36:a5:fe:a3:86:03:bc:a0:ce:d3:5d:c0:4b:
a6:22:08:e3:01:20:f8:64:fe:17:2b:49:8b:22:c2:
b1:53:0f:27:2f:11:bc:d6:06:97:a5:ce:02:31:76:
7d:47:8a:a4:e1:12:67:4c:14:90:ad:09:6a:d8:fa:
19:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:61:C6:90:DF:2A:AD:9C:1D:94:D5:43:00:4B:70:AF:F0:56:E9:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/9ee0e93f-8f9e-3874-bbe5-fd090dc8967c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
136.38.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:9c:c6:0d:53:e5:77:26:28:95:fc:e7:9d:5d:d1:78:fe:8f:
eb:b1:a1:0f:bf:ea:0a:ac:3a:fe:69:5f:6c:7e:d2:14:a6:36:
8f:68:4f:3a:d3:be:12:d1:37:fc:e8:48:93:f2:c3:e4:ca:d5:
45:a9:f1:c9:96:a4:19:a0:ed:16:54:c3:d8:03:82:f3:ea:79:
6f:41:a9:a0:09:2e:13:7e:31:9b:a1:12:6f:ab:74:ba:87:3a:
96:4d:8d:9a:bc:18:85:b2:2f:5b:d6:9e:48:d8:80:b2:ee:4c:
ef:33:ee:66:71:c9:84:95:46:7a:f8:61:dd:79:c1:92:c0:9c:
b2:4f:eb:a1:9c:6c:14:f6:77:d7:9d:cb:71:25:4d:99:6a:ff:
e9:4f:49:6c:9a:01:cd:4f:ec:1f:59:46:eb:b8:ac:34:20:5f:
32:f0:c0:34:9f:30:5d:21:b9:c8:0d:dc:d0:bf:57:e2:fc:e5:
a8:a7:58:f8:63:db:1a:72:ad:1a:60:98:72:e2:83:13:7b:58:
f1:af:d8:80:7b:f2:3c:53:e5:d1:eb:92:ba:a4:21:5a:86:9f:
27:87:5a:c2:db:ef:9a:f5:ae:40:7b:f5:0a:01:1e:2b:5c:96:
56:46:ae:20:50:a6:27:79:57:2a:ba:6a:5a:ce:b9:54:94:f7:
50:f1:2e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:19 2025 by rpki-client