Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/c34b8d11-65b9-3c19-98c9-ac8c00c9f09e.roa
File: c34b8d11-65b9-3c19-98c9-ac8c00c9f09e.roa (raw, json)
Hash identifier: tCZNJlefIuGlCAp57hvGm+YmroYp+4rt+gF3TpRah0Q=
Subject key identifier: CE:EB:E3:FA:9C:B5:2C:CC:3A:F1:56:D9:26:9F:B3:75:E8:3A:35:10
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F43285848A318A1968A09AFAE0C94E680
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/c34b8d11-65b9-3c19-98c9-ac8c00c9f09e.roa
Signing time: Thu 23 Jan 2025 06:13:17 +0000
ROA not before: Thu 23 Jan 2025 06:13:17 +0000
ROA not after: Wed 23 Apr 2025 05:13:17 +0000
asID: 16591
IP address blocks: 136.37.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a3:18:a1:96:8a:09:af:ae:0c:94:e6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: Jan 23 06:13:17 2025 GMT
Not After : Apr 23 05:13:17 2025 GMT
Subject: CN=93f38975-c717-490f-9dda-185b6253210c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ff:a1:72:3f:09:04:d6:04:3c:c4:4e:4c:35:
cb:a0:3e:fe:db:28:67:34:c6:3c:83:3d:b9:c1:f7:
c8:ad:89:ed:aa:fb:44:d9:1a:b2:a0:6e:9d:ae:52:
d4:4c:f0:93:92:5e:ac:a3:ab:77:f6:ce:31:79:d1:
c6:c8:66:97:ea:af:68:7b:ec:92:89:0b:e2:eb:f2:
95:90:cb:4b:2e:76:b5:df:ff:a1:31:41:5d:dd:09:
74:38:c2:61:6c:8b:05:77:38:d8:e3:18:c0:0e:b0:
b8:25:0c:7f:73:69:22:21:a4:34:11:28:d1:38:4a:
7d:bf:22:df:19:c7:46:66:5c:5c:d9:e8:12:5e:06:
e2:88:55:cf:92:37:bc:91:98:c8:ef:7b:32:fd:17:
ec:82:47:98:3c:4e:9b:f8:c0:5f:fd:8a:2f:dd:1f:
87:64:ee:90:2d:ad:70:d0:68:f5:06:cc:01:3e:6b:
34:40:e3:97:a2:8b:27:8b:17:4c:70:3d:69:7e:8e:
01:7d:fd:86:65:52:a7:c4:05:c8:d8:b1:7b:9f:60:
af:7b:2f:99:d5:04:f3:f6:4a:47:42:50:d3:00:0c:
f9:16:f4:d4:1a:4b:6a:fa:46:97:75:0f:00:8c:52:
88:cf:be:70:09:2a:b4:47:bd:5e:f9:f7:3f:1d:b1:
ff:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:EB:E3:FA:9C:B5:2C:CC:3A:F1:56:D9:26:9F:B3:75:E8:3A:35:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/c34b8d11-65b9-3c19-98c9-ac8c00c9f09e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
136.37.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:67:64:e7:a3:50:0b:13:22:b0:67:3b:c8:cd:97:32:89:0a:
e0:69:e1:3b:7d:92:7b:de:56:b5:e2:bd:5b:2f:33:a7:04:24:
e9:29:31:ff:85:02:c9:3f:5c:43:78:d3:1b:d1:3d:d3:bc:81:
7e:c1:35:68:5c:c5:df:05:05:05:de:25:1d:43:36:88:02:63:
a8:6c:8c:92:d2:87:a3:9d:e2:83:9d:1e:77:7a:9a:60:8f:4e:
ba:e4:30:6f:71:ea:4a:0e:99:52:fe:8e:c5:c8:b1:d4:ec:a0:
bf:1a:f1:f2:5f:ef:3a:ff:f5:c6:10:f8:07:d3:ed:68:88:ee:
af:d4:02:eb:2d:42:a1:ab:ea:f8:92:ac:64:ec:d8:68:1c:9e:
dd:e8:2a:c2:6b:c3:a9:e8:cc:4d:50:cd:3a:a8:63:6f:ff:24:
f8:28:c3:f8:49:5e:00:a8:1b:7c:1b:5f:01:92:64:3a:91:fb:
b5:2f:7b:05:22:d1:48:7c:ca:81:1e:9b:47:fd:3c:26:56:9e:
c6:cf:03:22:03:5b:fe:49:4f:5e:8b:69:3d:02:34:39:6b:d6:
d4:0d:1d:91:38:3a:48:15:8d:c0:af:91:4a:0d:84:2a:c3:9c:
ce:50:c2:36:fe:fd:0e:cd:17:d9:41:71:36:da:5a:2f:05:db:
84:6d:6c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:33 2025 by rpki-client