Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d8195a94-d522-37ad-be84-a7f37ca7a347.roa
File: d8195a94-d522-37ad-be84-a7f37ca7a347.roa (raw, json)
Hash identifier: J56SvZYnifpvHyPAF+r7xZWlZ4WhewH21rz9aoTjnBg=
Subject key identifier: 76:CC:95:B6:36:09:34:5E:8F:4E:17:4B:C6:D4:A1:63:CD:79:E8:D1
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F43285848A3189FA19902662536FCD8A0
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d8195a94-d522-37ad-be84-a7f37ca7a347.roa
Signing time: Thu 23 Jan 2025 06:13:16 +0000
ROA not before: Thu 23 Jan 2025 06:13:16 +0000
ROA not after: Wed 23 Apr 2025 05:13:16 +0000
asID: 16591
IP address blocks: 136.48.0.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a3:18:9f:a1:99:02:66:25:36:fc:d8:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: Jan 23 06:13:16 2025 GMT
Not After : Apr 23 05:13:16 2025 GMT
Subject: CN=13f5b110-bd92-4e7e-b6c1-95363cceb254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8e:b8:43:15:49:68:5c:53:bd:4c:d4:4c:4d:
21:99:f8:75:00:2e:df:b4:19:98:04:9d:e6:fb:b2:
43:c2:f4:96:84:e1:c4:f0:fc:7b:26:08:68:8e:d4:
1a:c3:20:ff:e0:dc:5f:3f:ac:82:1f:5f:88:30:81:
8a:c3:64:a4:5e:77:e6:e7:59:f5:5a:f0:85:f6:cb:
ac:28:5d:07:8c:df:0d:7f:4c:31:8f:ad:da:8e:8b:
6c:76:f5:0e:e7:26:f6:b9:35:47:fc:34:82:20:ee:
59:43:cd:f2:29:ec:db:99:03:f8:9b:be:10:c8:20:
58:b7:30:42:84:18:b4:54:b8:6f:2d:d2:49:8b:e1:
d6:53:15:57:c5:60:9b:72:de:85:9a:50:86:4f:d2:
12:0e:c7:1a:d8:df:89:65:14:71:87:35:8a:d9:52:
ad:9d:fb:89:ed:35:b7:6c:97:52:d5:43:e5:49:6c:
f9:af:32:d3:6e:1a:39:38:8c:53:51:ff:98:97:20:
7e:e2:12:f7:fd:9c:bc:15:0c:77:a2:55:12:c7:9a:
cd:04:1e:b6:6e:0b:02:05:ee:92:e8:da:9b:07:58:
23:e3:7b:bc:ce:dd:bd:ec:df:59:eb:90:ee:89:02:
40:18:3c:7a:25:4e:99:e5:9a:e8:20:48:5c:ed:dc:
0f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:CC:95:B6:36:09:34:5E:8F:4E:17:4B:C6:D4:A1:63:CD:79:E8:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d8195a94-d522-37ad-be84-a7f37ca7a347.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
136.48.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:97:7e:1c:c7:41:a3:eb:00:97:bc:f2:4d:fc:bf:b5:e4:b2:
18:26:fa:03:64:60:0f:4e:d5:8d:bd:7e:35:8f:38:b5:8f:08:
85:d1:87:6d:bf:53:5a:83:78:05:a6:2b:a1:25:fb:aa:33:9b:
a1:0f:49:78:50:01:fd:60:9a:01:17:e9:d8:2d:df:cb:55:f0:
2d:67:c6:dd:2b:eb:61:b7:8f:d0:25:d7:c9:ff:b5:23:c3:d4:
be:7f:a1:0d:7d:1a:62:7f:6a:96:1f:5e:dc:12:87:5e:fb:b3:
42:a8:1d:73:f0:f0:56:d2:84:f2:e2:ac:68:91:02:22:67:c4:
74:a1:39:06:f6:c8:80:f5:20:4a:fc:f1:36:ed:3a:41:c8:8c:
d5:4d:9b:33:07:15:03:5c:4e:b3:52:b9:56:50:3f:5f:66:92:
93:8b:11:1e:a4:7f:7e:ca:09:c3:99:c1:24:34:a5:d0:15:5f:
d6:5c:97:da:8c:32:14:d9:66:d6:79:9d:c0:ee:39:92:3f:b9:
fa:ee:22:e1:db:1d:d8:3e:85:0b:56:4c:f5:b4:01:e4:f9:ce:
34:73:93:6c:25:4d:4d:9d:29:03:cd:a4:b7:3a:95:3b:16:f6:
d8:ab:02:2d:1c:62:90:2c:37:99:7b:1f:a4:c3:03:29:72:32:
e6:c2:5c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:07 2025 by rpki-client