Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a436ac52-91aa-3c41-8e92-858df4f15e6d.roa
File: a436ac52-91aa-3c41-8e92-858df4f15e6d.roa (raw, json)
Hash identifier: NZh+180UKV24q2Snc0yDJ2XnZkVa3V3SAuq0X9+gK84=
Subject key identifier: A5:D6:8F:30:28:ED:96:36:61:99:3D:62:36:DB:6E:F2:EA:81:2A:1A
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F43285848A318A812FBCF3F469A069600
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a436ac52-91aa-3c41-8e92-858df4f15e6d.roa
Signing time: Thu 23 Jan 2025 06:13:20 +0000
ROA not before: Thu 23 Jan 2025 06:13:20 +0000
ROA not after: Wed 23 Apr 2025 05:13:20 +0000
asID: 16591
IP address blocks: 136.32.224.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a3:18:a8:12:fb:cf:3f:46:9a:06:96:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: Jan 23 06:13:20 2025 GMT
Not After : Apr 23 05:13:20 2025 GMT
Subject: CN=6bed972e-748a-455c-b076-5c774e1b36a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f6:85:21:af:bf:3f:5c:ce:f8:fa:51:35:e2:
8c:2f:e2:7b:cd:a0:4a:86:c4:90:9e:e1:38:60:e7:
48:27:d3:12:f9:60:7b:30:1b:9a:05:f8:fc:3b:80:
71:cb:72:29:9e:23:f5:cf:a6:92:a5:07:d5:45:73:
07:6b:4f:b4:52:3b:0c:45:f8:9d:25:fa:e1:43:c3:
41:07:cc:92:c1:d7:f1:cd:20:00:2f:3d:b3:c9:b0:
82:dc:4e:05:fa:f2:fb:91:24:61:66:b4:04:8e:58:
92:33:1d:34:d2:43:00:75:25:82:3c:af:78:ee:01:
f4:43:3b:2e:a6:03:cc:55:c3:68:1e:e3:0a:89:e2:
aa:3f:c3:06:8d:e5:de:30:4d:99:de:09:94:5a:34:
a9:cb:5c:12:17:dc:88:9e:df:ba:0d:3e:02:cf:e8:
c1:f9:8e:30:2e:b4:85:4c:8b:1d:3f:e3:93:8e:46:
46:5b:3e:fd:74:5d:ce:0d:15:c3:a6:f3:e0:6d:d7:
7d:17:a5:3e:0e:c8:28:22:bb:7a:ba:cf:0f:e1:02:
88:2f:14:bd:5a:13:78:d1:2e:9f:22:76:3e:c2:21:
7d:43:fb:73:79:a3:d8:f0:12:8e:b2:9d:ef:f0:c3:
ba:e2:5d:1a:87:7a:ce:f7:34:17:2f:46:a7:7a:71:
99:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D6:8F:30:28:ED:96:36:61:99:3D:62:36:DB:6E:F2:EA:81:2A:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a436ac52-91aa-3c41-8e92-858df4f15e6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
136.32.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:63:e6:05:d9:fc:6c:4b:41:03:c9:14:07:86:3a:4b:7d:bb:
e4:aa:d2:ea:24:49:4c:50:fb:11:24:bb:c4:5b:6f:b9:38:c4:
a9:15:21:1f:4e:2f:b9:6b:3c:17:00:a5:83:03:5c:06:48:84:
d9:5a:85:10:2c:c5:82:13:64:41:eb:3a:21:aa:53:9e:78:6c:
39:8e:35:5f:c2:83:0e:fc:fd:40:e7:44:df:13:22:f8:80:68:
a9:4d:83:6e:1c:04:cf:86:c8:44:63:a4:ee:92:84:82:21:78:
ac:b5:7f:ad:0f:5d:88:9a:8c:4e:5a:8b:3f:b5:d0:b8:7f:db:
57:09:ea:35:ac:63:c9:f9:10:6e:db:f8:cd:f2:c4:ec:02:9b:
b4:0c:b8:d6:2d:17:9e:ec:e6:d2:5a:40:c6:8d:11:37:1d:f1:
7e:dc:79:44:a0:c9:10:7b:26:28:6f:12:81:ff:ed:9e:95:60:
d6:05:6a:ed:9f:ea:7c:f8:7d:57:9b:bb:ac:77:4d:25:a8:b6:
3d:31:63:32:a5:77:6d:f4:84:ed:aa:ca:14:9f:f1:db:39:aa:
49:9c:68:06:52:a1:fc:e7:8c:a8:75:40:a9:ab:51:ae:7f:6d:
07:58:d1:ca:96:2f:1a:80:c7:d9:b3:7c:e0:3e:81:32:9b:a3:
2e:77:32:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:01 2025 by rpki-client