Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bb8ba5a4-a6e8-362a-b275-ee0704dcd21a.roa
File: bb8ba5a4-a6e8-362a-b275-ee0704dcd21a.roa (raw, json)
Hash identifier: cU+L8pRC8WwQGLEzZNAF3UJ4VgpWBI54AXtDbSF0ByQ=
Subject key identifier: E2:3E:77:EB:25:DD:DA:04:2C:E3:94:A5:88:5B:CF:96:3E:A4:4B:40
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F43285848A318B17AF9E48395E2508300
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bb8ba5a4-a6e8-362a-b275-ee0704dcd21a.roa
Signing time: Thu 23 Jan 2025 06:13:24 +0000
ROA not before: Thu 23 Jan 2025 06:13:24 +0000
ROA not after: Wed 23 Apr 2025 05:13:24 +0000
asID: 16591
IP address blocks: 136.57.64.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a3:18:b1:7a:f9:e4:83:95:e2:50:83:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: Jan 23 06:13:24 2025 GMT
Not After : Apr 23 05:13:24 2025 GMT
Subject: CN=b738a0e1-a0d2-4473-81ce-ba511e90ec8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:41:8b:c9:66:63:52:b3:0b:34:c2:ea:ff:ff:
5b:48:6a:6d:cd:c6:e4:b7:be:3e:f9:3b:a2:8d:e4:
7a:e6:23:62:7b:04:4d:89:66:b9:ae:1c:cc:fd:6d:
1b:a3:1b:49:c5:b8:5e:97:03:10:d5:28:bf:23:ce:
0b:0b:a1:94:9c:31:ec:1e:88:a8:e1:e4:62:a7:84:
fb:83:76:87:31:db:f4:65:4d:07:4e:9b:d8:3f:16:
07:1b:0c:a9:49:40:97:ba:3a:2e:d4:d1:8b:64:c8:
e1:56:6b:c0:9f:87:71:80:ea:98:7e:da:d5:a3:df:
be:c5:55:01:de:be:65:8a:8c:27:9e:e1:f9:54:fa:
80:45:1f:03:43:25:52:06:e6:3a:70:55:8a:4d:61:
80:98:28:f5:d1:53:b9:07:54:73:9e:d1:f6:f3:66:
24:ca:db:34:af:a5:41:32:c1:7a:bd:8f:f0:3d:ea:
44:26:a9:69:22:e4:90:57:c5:d2:fe:51:19:9a:d5:
49:91:17:52:b8:18:18:9d:98:b1:7e:61:c9:ac:c5:
81:96:28:d6:41:ac:a7:e0:46:83:09:d0:9c:24:6d:
06:26:50:c0:fa:41:6c:4c:3b:7f:8a:f1:5c:81:1a:
36:1d:7f:e3:f6:11:9c:88:89:ba:40:22:70:87:1e:
f8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:3E:77:EB:25:DD:DA:04:2C:E3:94:A5:88:5B:CF:96:3E:A4:4B:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bb8ba5a4-a6e8-362a-b275-ee0704dcd21a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
136.57.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:b7:f2:e5:9f:b6:21:ce:10:8a:96:53:9f:95:97:6c:b1:95:
7e:7f:14:77:f0:9b:ce:36:8a:b5:c3:f9:f5:63:48:06:13:4f:
ef:b2:b3:ae:db:c7:dc:9e:2f:74:f3:1f:85:ef:5e:a4:9a:45:
0d:30:f8:1b:20:aa:6d:cd:2f:6a:4b:91:b7:93:1b:90:cd:3b:
00:f7:21:37:f3:5b:29:ab:bc:1f:5e:e0:13:6a:a7:f9:ed:7a:
52:e5:bd:d7:fd:fa:bf:f6:26:5f:99:f6:45:46:88:68:38:74:
af:e7:8b:53:3b:4c:f1:93:24:ba:32:64:aa:57:fa:2b:ce:09:
0f:0d:4e:c3:0f:bb:ce:ae:35:a9:37:15:d7:cd:b8:25:27:33:
65:c5:ad:5a:f7:18:0f:3a:07:4f:32:36:9f:28:cf:98:af:f2:
e8:f8:4c:23:0f:ea:f0:25:a3:a0:5f:62:d4:03:6f:78:db:fc:
31:eb:ee:24:45:a3:94:17:48:45:c9:61:21:72:f1:74:2f:de:
4e:42:23:a3:33:8e:2d:5e:e1:e9:13:83:ac:88:ad:af:47:c4:
91:e8:61:1e:0f:0e:31:0a:d5:91:a8:43:8b:03:ce:96:8c:e9:
b5:84:17:d1:ba:42:e0:87:37:1f:2d:21:40:30:7f:1a:80:2e:
05:24:e6:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEijGLF6+eSDleJQgwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh
MzRlMB4XDTI1MDEyMzA2MTMyNFoXDTI1MDQyMzA1MTMyNFowLzEtMCsGA1UEAxMk
YjczOGEwZTEtYTBkMi00NDczLTgxY2UtYmE1MTFlOTBlYzhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0GLyWZjUrMLNMLq//9bSGptzcbkt74++Tui
jeR65iNiewRNiWa5rhzM/W0boxtJxbhelwMQ1Si/I84LC6GUnDHsHoio4eRip4T7
g3aHMdv0ZU0HTpvYPxYHGwypSUCXujou1NGLZMjhVmvAn4dxgOqYftrVo9++xVUB
3r5liownnuH5VPqARR8DQyVSBuY6cFWKTWGAmCj10VO5B1RzntH282Ykyts0r6VB
MsF6vY/wPepEJqlpIuSQV8XS/lEZmtVJkRdSuBgYnZixfmHJrMWBlijWQayn4EaD
CdCcJG0GJlDA+kFsTDt/ivFcgRo2HX/j9hGciIm6QCJwhx74EQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOI+d+sl3doELOOUpYhbz5Y+pEtAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2
NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYmI4YmE1YTQtYTZlOC0z
NjJhLWIyNzUtZWUwNzA0ZGNkMjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj
MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5
YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0
MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDlAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFu38uWftiHOEIqWU5+Vl2yxlX5/FHfwm842irXD+fVjSAYTT++ys67b
x9yeL3TzH4XvXqSaRQ0w+Bsgqm3NL2pLkbeTG5DNOwD3ITfzWymrvB9e4BNqp/nt
elLlvdf9+r/2Jl+Z9kVGiGg4dK/ni1M7TPGTJLoyZKpX+ivOCQ8NTsMPu86uNak3
FdfNuCUnM2XFrVr3GA86B08yNp8oz5iv8uj4TCMP6vAlo6BfYtQDb3jb/DHr7iRF
o5QXSEXJYSFy8XQv3k5CI6Mzji1e4ekTg6yIra9HxJHoYR4PDjEK1ZGoQ4sDzpaM
6bWEF9G6QuCHNx8tIUAwfxqALgUk5uk=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:21 2025 by rpki-client