Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e66e9871-8fdd-3387-b82b-f117a5d8b42e.roa
File: e66e9871-8fdd-3387-b82b-f117a5d8b42e.roa (raw, json)
Hash identifier: iBUyY5p6qq+wZZmw1G4uvz8dyB1FUygF3hA9Pqqn1NM=
Subject key identifier: 1C:81:00:BF:F2:80:65:94:0C:C6:44:79:BF:1D:38:23:5F:64:EF:5D
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F43285848A318A64264B429CC5047EF80
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e66e9871-8fdd-3387-b82b-f117a5d8b42e.roa
Signing time: Thu 23 Jan 2025 06:13:19 +0000
ROA not before: Thu 23 Jan 2025 06:13:19 +0000
ROA not after: Wed 23 Apr 2025 05:13:19 +0000
asID: 16591
IP address blocks: 136.49.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a3:18:a6:42:64:b4:29:cc:50:47:ef:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: Jan 23 06:13:19 2025 GMT
Not After : Apr 23 05:13:19 2025 GMT
Subject: CN=01cdccca-da47-441e-a147-40638ebf3e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:0f:a6:8a:f2:47:e7:a2:1f:f7:26:b8:50:52:
03:c1:81:16:b9:19:52:34:4b:6d:a6:7d:62:b7:cb:
32:74:33:77:ca:61:4e:5e:45:16:55:ec:4e:9e:c8:
18:65:a9:6d:43:c2:04:ce:ef:2a:0c:3c:56:72:63:
f9:b6:a1:ae:d7:7c:c6:91:d6:d6:b8:a7:df:6d:cb:
be:75:3c:6c:dc:66:a6:ac:47:8e:f4:a8:dc:02:cd:
4b:8e:9d:fe:c4:9b:10:59:0d:91:30:cc:89:91:ac:
29:c1:4e:d6:21:ab:4b:27:ca:61:19:82:5f:43:5f:
cd:b6:4f:5e:63:17:4f:51:83:6c:3a:e1:fd:be:60:
9e:87:08:b0:69:95:2f:75:af:fe:e9:76:b5:c7:e9:
8c:45:47:5e:14:f3:12:4c:36:bf:7e:5e:97:b2:e7:
20:d0:90:f0:7a:4e:c6:86:0b:5b:70:de:08:24:4a:
33:de:78:cd:af:c2:37:72:3c:6f:a1:a3:d6:eb:65:
dd:33:47:76:b3:2f:e2:a4:eb:62:38:af:73:46:ca:
3a:41:7c:82:2c:89:17:33:ef:93:c3:b5:8b:2b:bd:
cb:41:0c:43:05:b4:c1:73:a0:e3:7c:2c:78:03:4b:
3c:4b:8d:42:20:c4:93:92:d9:1a:a9:ef:6f:cf:f8:
1f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:81:00:BF:F2:80:65:94:0C:C6:44:79:BF:1D:38:23:5F:64:EF:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e66e9871-8fdd-3387-b82b-f117a5d8b42e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
136.49.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:2b:5e:9b:5f:f2:7a:20:5a:45:44:cb:26:33:92:ac:30:c5:
32:03:f7:3f:fc:12:57:29:d5:49:cb:9f:ac:ad:2e:82:7b:2a:
9a:69:fb:62:0b:a0:37:87:ea:8e:1b:c8:8d:bc:8a:d3:94:3c:
5f:f9:39:05:09:a5:e6:28:9e:d5:00:24:7c:3c:b4:a9:24:db:
b1:1d:1b:f9:65:d7:b9:2d:c3:25:16:89:c9:07:ac:e1:a0:ef:
f9:cb:0f:04:37:a6:e0:55:a1:6a:74:6f:63:ba:b7:35:4b:e7:
04:10:de:04:ec:f2:ca:d9:e5:af:8d:de:51:95:63:11:e0:ad:
fd:67:39:1d:3d:ac:7e:61:c3:65:b6:ac:74:d0:2f:d3:ad:6f:
4a:80:d3:0a:9f:fe:61:5e:ea:77:8a:26:7a:48:61:b1:bc:34:
b2:07:d1:c5:41:e4:8f:f8:f1:4e:f3:48:28:ec:8b:b6:ba:86:
16:a0:1a:8f:26:f1:07:da:84:70:10:9a:7e:f2:99:00:f5:1d:
3d:59:de:66:97:4e:da:f7:d5:66:4e:66:0f:98:24:d8:9b:67:
a2:2a:c9:56:fa:85:3d:73:17:e3:47:d3:28:81:f8:14:5e:11:
f3:97:aa:98:7c:d9:c7:d0:cb:d2:f8:fe:3e:ee:d7:0f:96:b1:
11:6f:c8:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:46:14 2025 by rpki-client