Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0a0c920c-71b6-3c53-8692-b76389a22c56.roa
File: 0a0c920c-71b6-3c53-8692-b76389a22c56.roa (raw, json)
Hash identifier: x9izrNYtRl3KtaML0BE0mkq6oj1yecSqk8s3GMx+Cc0=
Subject key identifier: F1:6A:5E:D2:9D:3C:30:F7:9D:2C:27:C9:87:93:F1:D1:5E:B2:A4:ED
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F43285848A318ADCAA1D5F558BD96B880
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0a0c920c-71b6-3c53-8692-b76389a22c56.roa
Signing time: Thu 23 Jan 2025 06:13:22 +0000
ROA not before: Thu 23 Jan 2025 06:13:22 +0000
ROA not after: Wed 23 Apr 2025 05:13:22 +0000
asID: 16591
IP address blocks: 136.52.80.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a3:18:ad:ca:a1:d5:f5:58:bd:96:b8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: Jan 23 06:13:22 2025 GMT
Not After : Apr 23 05:13:22 2025 GMT
Subject: CN=36824bc7-c12d-4033-983e-278aceca553c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:69:71:eb:ff:87:18:e8:e2:d2:37:8f:31:fc:
f9:3f:3c:a7:63:f8:fb:21:20:26:59:40:1f:0e:ad:
1f:2d:5c:dc:61:94:9b:fc:0c:0e:47:b8:7e:11:01:
0e:13:2a:d1:e7:15:27:77:55:44:f9:3d:0a:4d:c8:
c4:0a:e9:8b:ee:aa:ed:46:8b:28:f8:32:50:76:db:
8d:c3:33:48:88:6f:d2:41:1d:4b:3f:c4:b0:b1:35:
1e:2f:0e:a5:66:c2:e9:50:1c:c6:c8:77:dd:d1:8e:
7c:a2:85:78:e6:54:22:60:da:8f:1b:4c:5d:95:c9:
dd:8f:6b:65:62:3c:4c:5a:15:89:48:98:3a:6a:44:
42:20:b9:5d:85:e8:6d:28:4f:be:7d:36:73:90:2e:
71:48:db:48:a1:ab:c3:a8:22:6d:02:4a:ff:55:a0:
29:77:04:9a:76:9f:6f:de:1a:b8:ff:0a:bd:e0:3a:
96:09:86:e0:7d:37:eb:9d:22:f1:a3:37:f5:7d:10:
b5:ed:73:c8:5d:a8:73:fe:bb:10:7d:55:7f:a6:69:
aa:87:6b:ad:d7:9c:08:d2:82:e4:c4:f2:2c:ec:dc:
26:4f:a0:39:ea:49:29:a3:f9:41:14:00:aa:29:bc:
f9:82:35:9e:18:e5:70:6e:c9:3d:dd:01:7d:b1:55:
44:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:6A:5E:D2:9D:3C:30:F7:9D:2C:27:C9:87:93:F1:D1:5E:B2:A4:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0a0c920c-71b6-3c53-8692-b76389a22c56.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
136.52.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:15:d8:bc:da:f6:a2:16:b3:a1:ff:57:d2:94:20:8e:ea:f2:
a2:8b:00:e9:61:fe:cf:be:96:54:ff:1a:36:7f:39:98:a4:03:
52:17:48:17:76:ec:ab:17:ed:4d:7b:61:b3:a5:ac:70:ab:33:
10:81:a5:a9:4a:c4:03:f0:41:82:cf:f2:af:2d:15:a3:16:c2:
3d:fe:d8:e5:02:3c:3b:e8:80:8b:a2:0f:3a:d1:91:37:ca:e5:
3a:eb:c0:06:2a:ac:64:9b:b9:d0:be:8c:a0:bc:ad:2d:82:2f:
cd:75:38:2e:52:7a:4b:f6:79:ad:29:95:df:39:71:d1:65:77:
dd:37:7d:d3:07:21:8f:ab:b2:d5:dd:22:f9:9c:68:e6:c2:32:
93:d0:74:46:e6:74:36:e2:17:a1:04:23:a6:e7:d5:b8:2c:e8:
f7:c5:f1:9e:85:db:52:4c:08:1c:75:56:0b:40:8c:84:ff:b6:
08:8a:06:bf:25:2e:19:d9:00:6b:e9:0a:bd:c2:4f:13:27:76:
a0:df:87:40:e6:90:1f:04:67:0c:1f:c2:06:b8:72:6d:f3:22:
a4:2f:84:dc:d0:42:a2:19:a1:ae:06:49:c3:47:8b:c2:36:52:
a6:ce:23:b4:da:4b:74:01:f3:db:2e:3b:a9:8d:6f:dc:fc:d9:
3e:d8:fb:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:31:19 2025 by rpki-client