Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b7425900-332d-3a03-9ce3-e45b79bee266.roa
File: b7425900-332d-3a03-9ce3-e45b79bee266.roa (raw, json)
Hash identifier: eA4WKTHQy/87sI4GUGDo2s+utqPQ4/BPUM2Tlz/4rpQ=
Subject key identifier: A7:E1:98:77:48:20:ED:F1:87:51:B3:4A:9D:0E:5E:08:BF:EE:DD:8B
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F43285848A318B062B28F96796F9F2B80
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b7425900-332d-3a03-9ce3-e45b79bee266.roa
Signing time: Thu 23 Jan 2025 06:13:24 +0000
ROA not before: Thu 23 Jan 2025 06:13:24 +0000
ROA not after: Wed 23 Apr 2025 05:13:24 +0000
asID: 16591
IP address blocks: 136.57.0.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a3:18:b0:62:b2:8f:96:79:6f:9f:2b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: Jan 23 06:13:24 2025 GMT
Not After : Apr 23 05:13:24 2025 GMT
Subject: CN=2ee699a9-78aa-4a00-8a5a-f9d1b89ad2e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b7:b5:98:3c:23:e7:5c:10:dd:1c:25:67:7b:
0a:ea:8a:1e:e1:87:98:2e:5f:94:e5:c5:1e:66:4e:
f6:1d:74:d0:5b:29:69:ec:4f:45:87:b3:d9:1b:ed:
e2:39:c8:64:22:ba:00:cc:5c:ab:f1:aa:b3:f4:ce:
c3:e8:4a:b8:79:f6:b9:cd:f1:33:0a:10:49:1a:49:
bf:17:1b:f9:47:e0:78:ed:38:f7:d4:6c:e4:42:ee:
ff:34:3f:0e:b7:91:cf:92:17:4a:19:6b:fc:24:7b:
df:5e:58:3c:8c:23:ec:ca:8b:57:92:01:76:af:48:
e9:fa:c5:7a:90:46:bf:97:96:5e:07:21:6b:8b:b6:
44:c9:2a:31:09:01:37:91:30:22:f7:f4:12:39:e4:
1e:27:e4:9c:8a:eb:ec:fc:76:5c:1c:8b:ab:c3:34:
26:62:57:91:67:83:c0:02:a9:16:24:9d:70:34:b3:
fc:69:2b:24:63:69:a8:d6:4e:95:7a:10:37:d5:3e:
9c:57:e4:23:27:86:ea:62:34:50:48:91:43:42:ca:
8c:6b:95:d8:38:60:c0:53:89:7d:1a:5a:de:8d:a1:
97:9a:65:91:97:c7:b2:de:d0:a4:1e:0d:ed:75:f4:
67:43:00:ac:f6:41:01:57:65:f3:71:4c:cd:13:46:
ca:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E1:98:77:48:20:ED:F1:87:51:B3:4A:9D:0E:5E:08:BF:EE:DD:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b7425900-332d-3a03-9ce3-e45b79bee266.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
136.57.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:9e:b2:0b:ea:a3:f5:cb:25:4b:9e:cf:c3:fa:89:a6:d5:52:
70:11:41:26:88:0e:3e:ca:40:29:f3:a2:dc:00:03:a0:cf:c0:
65:e5:87:54:d3:31:ee:0d:cf:c3:0f:fa:d6:fb:55:0a:f4:29:
84:e0:69:2c:81:59:ed:0a:5f:bd:8e:7e:59:16:90:2f:8c:03:
76:22:08:94:25:ae:11:1c:e8:ae:e2:26:0b:86:24:9d:70:f8:
20:17:08:60:16:ca:7b:e0:7c:65:35:58:bd:86:88:9e:53:44:
34:97:31:2d:f3:c8:80:d7:e7:36:bd:b0:91:33:9d:1b:e9:84:
4b:a1:bd:b1:48:e1:a5:ef:c3:6c:be:4b:e3:31:f1:4c:58:e9:
cd:11:5c:52:b0:dd:15:14:09:2a:88:90:5b:19:40:19:0e:c9:
a4:14:8e:1d:96:72:d5:6f:7f:b0:b6:d7:51:93:15:73:bd:49:
8b:a7:e5:5e:c3:55:99:a9:ee:c3:c6:8b:c9:c8:63:64:25:82:
12:ff:61:ed:f6:da:05:5a:a8:86:16:6e:29:08:00:24:d6:cd:
f3:99:d8:85:a8:8c:af:6b:6b:fc:f2:96:5a:ae:2a:cf:4c:9d:
95:88:f9:1c:f4:c3:0e:74:73:fe:30:8f:6a:ac:d0:0b:ad:c0:
94:42:04:e3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEijGLBiso+WeW+fK4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh
MzRlMB4XDTI1MDEyMzA2MTMyNFoXDTI1MDQyMzA1MTMyNFowLzEtMCsGA1UEAxMk
MmVlNjk5YTktNzhhYS00YTAwLThhNWEtZjlkMWI4OWFkMmU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7e1mDwj51wQ3RwlZ3sK6ooe4YeYLl+U5cUe
Zk72HXTQWylp7E9Fh7PZG+3iOchkIroAzFyr8aqz9M7D6Eq4efa5zfEzChBJGkm/
Fxv5R+B47Tj31GzkQu7/ND8Ot5HPkhdKGWv8JHvfXlg8jCPsyotXkgF2r0jp+sV6
kEa/l5ZeByFri7ZEySoxCQE3kTAi9/QSOeQeJ+Sciuvs/HZcHIurwzQmYleRZ4PA
AqkWJJ1wNLP8aSskY2mo1k6VehA31T6cV+QjJ4bqYjRQSJFDQsqMa5XYOGDAU4l9
GlrejaGXmmWRl8ey3tCkHg3tdfRnQwCs9kEBV2XzcUzNE0bKSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKfhmHdIIO3xh1GzSp0OXgi/7t2LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2
NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYjc0MjU5MDAtMzMyZC0z
YTAzLTljZTMtZTQ1Yjc5YmVlMjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj
MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5
YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0
MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDkAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFmesgvqo/XLJUuez8P6iabVUnARQSaIDj7KQCnzotwAA6DPwGXlh1TT
Me4Nz8MP+tb7VQr0KYTgaSyBWe0KX72OflkWkC+MA3YiCJQlrhEc6K7iJguGJJ1w
+CAXCGAWynvgfGU1WL2GiJ5TRDSXMS3zyIDX5za9sJEznRvphEuhvbFI4aXvw2y+
S+Mx8UxY6c0RXFKw3RUUCSqIkFsZQBkOyaQUjh2WctVvf7C211GTFXO9SYun5V7D
VZmp7sPGi8nIY2QlghL/Ye322gVaqIYWbikIACTWzfOZ2IWojK9ra/zyllquKs9M
nZWI+Rz0ww50c/4wj2qs0AutwJRCBOM=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:52 2025 by rpki-client