Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a3f536b2-f455-35c2-ba37-54a8ee9d66c7.roa
File: a3f536b2-f455-35c2-ba37-54a8ee9d66c7.roa (raw, json)
Hash identifier: pnxaCkRo6bdikc6tBbLcelQX3FNzcLq+JRuFl8pb+XQ=
Subject key identifier: D6:56:A2:DA:47:77:A8:F1:6A:82:C4:CE:E2:9A:9E:89:6F:53:DE:7A
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F43285848A318AE368B87621CF80CF000
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a3f536b2-f455-35c2-ba37-54a8ee9d66c7.roa
Signing time: Thu 23 Jan 2025 06:13:23 +0000
ROA not before: Thu 23 Jan 2025 06:13:23 +0000
ROA not after: Wed 23 Apr 2025 05:13:23 +0000
asID: 16591
IP address blocks: 136.49.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a3:18:ae:36:8b:87:62:1c:f8:0c:f0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: Jan 23 06:13:23 2025 GMT
Not After : Apr 23 05:13:23 2025 GMT
Subject: CN=fbdb0251-2470-4f92-8a7f-f7d7ce54d88e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ad:69:9b:29:f0:48:58:c4:3c:27:8b:98:95:
f0:3f:05:41:c3:74:b1:9c:3f:2d:4a:5e:71:2e:ca:
e8:30:73:21:16:93:b8:75:84:f4:4c:2c:b4:8b:e7:
88:e1:c9:ab:3b:aa:61:4c:6f:fd:7e:51:dd:71:cf:
83:dc:ac:81:6d:e0:40:b3:ed:fa:c6:94:59:2a:00:
77:19:6b:e5:28:ae:1a:56:33:10:5f:19:7c:36:48:
2f:2e:72:d1:19:5a:25:b0:4a:f9:42:a6:3d:f2:e9:
0e:08:1e:0f:6f:7e:fb:09:af:ef:1c:1f:44:d2:c2:
48:1e:49:43:18:fa:21:6a:45:58:b0:3b:02:71:09:
f9:1a:07:45:b7:bc:b2:37:c0:e9:be:2c:e6:df:21:
8d:7e:1a:54:ee:23:29:ef:12:45:85:86:d9:aa:91:
f5:b0:a4:14:97:7c:08:65:14:85:fe:62:ec:0d:8e:
c0:f1:00:c3:b0:3a:ec:26:73:e4:be:a0:01:a2:9e:
4d:8d:bc:72:21:42:40:cf:9a:54:22:e1:cd:ab:62:
dc:16:c8:57:6c:70:de:d5:fd:bf:b0:1f:d8:7d:4c:
d5:ca:e4:c9:5a:59:6b:f8:a5:f2:f6:2a:73:fa:c4:
55:0f:65:69:3c:ad:73:6d:94:1f:aa:06:fb:2c:c8:
20:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:56:A2:DA:47:77:A8:F1:6A:82:C4:CE:E2:9A:9E:89:6F:53:DE:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a3f536b2-f455-35c2-ba37-54a8ee9d66c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
136.49.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:f5:32:b6:1a:7e:03:ab:b7:3b:8a:dd:6e:77:1b:01:dd:0f:
ed:d6:c4:18:bb:cd:14:b0:16:2b:dd:c7:cf:0c:29:bb:83:d1:
af:bd:67:2e:9b:a5:1d:e8:1f:e1:8c:3d:7e:ca:40:74:e9:80:
3a:0f:0b:52:05:49:05:f8:0c:6c:af:db:63:71:ec:c3:9e:57:
d9:20:19:5d:98:15:a1:16:80:54:ba:95:1d:11:9a:ac:9a:73:
e7:84:ef:23:85:32:b7:7a:64:8a:08:01:80:30:ab:b9:ec:c2:
b0:6a:b4:da:22:6b:15:e7:f0:1a:58:dd:34:2c:a7:f1:cf:a1:
f5:ba:aa:99:af:07:a6:14:67:24:30:41:1f:bb:64:21:af:46:
d0:8d:c3:53:f1:07:2f:34:20:58:6f:30:65:a1:c4:77:ca:68:
28:99:ef:9d:9c:e9:1d:bd:bc:e6:a6:f5:86:21:ff:fa:ac:83:
92:8f:a2:69:aa:79:7b:98:0b:fc:10:1b:d4:5d:5d:42:ff:3b:
46:20:ab:0d:f3:64:10:03:62:ea:22:bd:66:b3:ba:94:df:d2:
d3:f8:0f:b9:d9:28:8b:b9:a0:d7:09:72:bd:9d:99:0b:f4:f4:
7e:5a:01:b3:0e:e8:41:af:d2:4a:7d:02:62:b0:d8:63:aa:b6:
93:62:e1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:52 2025 by rpki-client