Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/20d71fc6-63e2-35b5-8642-c8020055e79b.roa
File: 20d71fc6-63e2-35b5-8642-c8020055e79b.roa (raw, json)
Hash identifier: 1EHJbdQk/ySxlAWTZWff00+zrJyqcVX2HRaLiNFJ73U=
Subject key identifier: 81:72:6C:50:FD:EB:80:7C:48:F9:4A:F4:66:CD:3B:B5:3C:D4:10:65
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F43285848A318B0C19467E43C73E7B400
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/20d71fc6-63e2-35b5-8642-c8020055e79b.roa
Signing time: Thu 23 Jan 2025 06:13:24 +0000
ROA not before: Thu 23 Jan 2025 06:13:24 +0000
ROA not after: Wed 23 Apr 2025 05:13:24 +0000
asID: 16591
IP address blocks: 136.36.48.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a3:18:b0:c1:94:67:e4:3c:73:e7:b4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: Jan 23 06:13:24 2025 GMT
Not After : Apr 23 05:13:24 2025 GMT
Subject: CN=1a2b9274-4ae9-47a4-84b9-e2762e383ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b3:88:9c:7a:e7:a1:00:9d:ea:86:aa:6a:f1:
dd:a5:1c:06:d2:86:49:c1:b4:fa:1c:6a:c0:46:b2:
bf:4d:32:bd:27:2c:9d:a4:50:be:fc:22:ad:6a:a6:
35:47:93:ca:c2:73:fb:24:84:58:9d:e3:73:b8:b7:
08:42:a2:d4:65:2b:56:62:e5:3b:48:85:52:9c:72:
4d:7f:c1:30:1b:fb:44:74:45:a8:be:27:ef:cb:d4:
ba:55:d6:d3:00:31:55:30:f3:7d:e4:16:c3:16:36:
33:dc:3f:4c:b7:c5:b5:31:5d:b4:94:3b:fd:8b:7f:
0b:a0:3b:44:75:91:31:c5:66:7c:11:26:b5:15:8d:
25:f5:e2:60:88:bc:be:03:cd:61:0f:eb:59:42:a0:
7a:ec:b3:3f:18:d0:be:37:30:ab:ac:d2:31:e4:8a:
5e:d0:6c:d9:24:d7:f3:55:77:3f:7d:f8:62:ac:f3:
d2:08:5e:58:46:81:65:f5:95:0f:7f:01:e5:9c:cf:
5c:51:ed:4f:e7:f0:d4:c3:0c:67:ed:28:1e:0e:6f:
91:7b:92:24:fe:8b:c0:c3:32:27:fe:88:27:32:a1:
eb:07:6a:b4:04:5b:6b:03:dc:c3:91:41:56:5d:d7:
03:42:e4:bd:46:34:be:96:b5:fe:9d:69:dc:df:47:
c6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:72:6C:50:FD:EB:80:7C:48:F9:4A:F4:66:CD:3B:B5:3C:D4:10:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/20d71fc6-63e2-35b5-8642-c8020055e79b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
136.36.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:f0:aa:ca:4d:bc:2c:91:74:03:d4:67:4a:b7:f6:36:9c:3f:
12:ac:d1:82:da:7c:76:05:f4:60:9c:1e:33:8b:19:13:7e:83:
ee:d8:2d:d1:58:0c:1c:bf:30:ca:ec:55:00:fe:92:b2:1d:eb:
40:26:11:96:d1:e9:33:6b:6f:b1:3b:e5:fc:7a:c6:b1:88:ab:
25:6f:71:ad:2b:ea:6e:a3:7f:12:c6:c1:2a:75:bc:bf:a9:a1:
60:6c:de:c5:dd:23:ba:eb:f1:99:3e:0b:1d:f8:15:c3:99:9a:
fc:d9:cd:19:50:5b:d8:3b:37:62:af:5a:ac:43:59:8d:e7:18:
15:40:86:55:80:33:0d:e7:ec:20:57:d0:d5:b4:2b:f9:e3:c4:
45:1e:73:a9:73:da:1f:50:ec:a2:16:a1:66:c4:d4:19:bf:03:
e6:fe:40:fe:a2:dc:45:5a:1d:c0:5f:4c:6f:61:bd:36:fc:15:
b8:4e:c1:a4:91:9d:3d:24:53:16:e5:0e:4d:c8:48:13:03:1c:
1c:8c:96:85:0a:54:e6:89:9c:b4:c7:58:2b:ee:85:3f:f6:1a:
49:13:ea:65:f3:74:3b:d9:64:a8:29:20:a5:7d:94:fb:19:71:
0e:06:46:49:80:1c:b3:4b:7e:dd:3c:e4:a3:39:f0:26:0f:b4:
2c:36:69:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:30:57 2025 by rpki-client