Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/2840b8e9-69ab-3a8f-ab85-f83d852b0c1d.roa
File: 2840b8e9-69ab-3a8f-ab85-f83d852b0c1d.roa (raw, json)
Hash identifier: DJNzWCwSSIsWo75/juh57WdJ4qPfcO9AnDsnAB81SSk=
Subject key identifier: 58:B3:9F:09:BE:14:46:28:21:11:2B:31:65:77:D5:98:65:8C:FE:E5
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F43285848A318AE24A53B2666C90E2F00
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/2840b8e9-69ab-3a8f-ab85-f83d852b0c1d.roa
Signing time: Thu 23 Jan 2025 06:13:23 +0000
ROA not before: Thu 23 Jan 2025 06:13:23 +0000
ROA not after: Wed 23 Apr 2025 05:13:23 +0000
asID: 16591
IP address blocks: 136.57.192.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a3:18:ae:24:a5:3b:26:66:c9:0e:2f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: Jan 23 06:13:23 2025 GMT
Not After : Apr 23 05:13:23 2025 GMT
Subject: CN=928a0190-4ce1-4963-9c1f-fe6d0db5997e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:df:da:cf:e5:85:93:67:27:85:51:4d:59:04:
31:5d:2c:02:0c:26:2d:8e:65:c8:d7:99:3f:42:b5:
42:d3:f9:aa:c0:d5:1d:e6:c7:4f:38:12:d1:a3:f0:
07:be:e0:85:27:f1:fb:37:91:89:9f:ec:bc:75:71:
a1:49:03:de:07:ce:d3:3a:f5:05:c0:c6:5b:2b:c5:
4e:da:8f:cd:94:c8:d3:c7:fe:5d:f3:ec:00:52:4d:
24:d0:e4:15:cf:44:0a:f2:a4:2b:8a:73:bf:45:ad:
56:3e:ae:a7:d0:8e:df:63:23:1f:a1:ee:1c:5a:64:
73:f8:b9:12:3f:8b:d9:6d:c7:7c:75:91:e0:38:e4:
17:03:f8:21:69:ec:dc:40:6b:ab:26:6f:22:14:72:
c7:40:d9:50:55:dd:4f:01:17:21:e6:44:8e:8b:8e:
d5:65:f1:6b:4a:ce:3e:ea:4c:ad:98:27:c1:65:ff:
72:e4:66:14:37:0b:88:44:02:59:8e:47:77:66:a2:
8a:69:71:af:1a:a3:26:41:10:a4:d8:3d:58:86:aa:
69:b1:1c:a0:89:4a:da:9c:eb:86:4b:ee:30:6b:5e:
59:cd:91:7c:ec:f7:bc:c3:9b:77:a6:20:7c:0a:22:
69:69:1a:d9:80:a3:f4:e0:d2:17:ec:b9:23:3d:46:
e7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B3:9F:09:BE:14:46:28:21:11:2B:31:65:77:D5:98:65:8C:FE:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/2840b8e9-69ab-3a8f-ab85-f83d852b0c1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
136.57.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:0c:d2:a8:da:09:46:54:a1:96:51:f2:73:37:93:2d:59:73:
6e:4e:db:9c:8b:4d:07:b5:40:2d:5e:f9:c7:0f:b6:82:7e:1f:
74:37:14:22:a8:6a:6f:c9:a7:54:d3:3c:84:38:3f:4a:94:0f:
28:1c:62:d2:d4:42:12:90:5e:bf:9a:50:7a:be:1e:42:6d:67:
67:86:15:99:a4:7e:ab:79:8f:fc:79:dc:f2:51:51:36:ba:9d:
87:ec:20:b1:66:07:f6:2f:33:b8:81:bd:fb:20:72:f1:35:30:
d8:36:a9:60:90:5a:9f:75:17:e0:03:a7:52:5d:bd:aa:c1:9a:
df:a8:31:c9:81:af:63:ca:cd:f0:0a:56:00:14:9b:be:1a:2b:
e4:f6:7f:9a:d5:d5:67:aa:ff:70:ec:86:77:79:d2:bf:05:cd:
61:a1:26:2f:4a:4e:e7:92:71:fb:a6:22:2b:30:8d:b0:be:55:
99:de:cf:db:ba:63:6b:2a:72:65:29:57:06:b9:ec:e9:84:46:
83:7e:02:4c:fc:2f:49:88:fa:92:f9:67:ae:ae:29:c7:ad:76:
1b:d3:96:6f:b0:75:8a:9b:95:9d:73:39:ac:32:1f:7f:24:d5:
56:f2:99:2e:55:d0:67:06:b0:3f:08:ad:3f:1c:44:9c:b8:9a:
a6:74:b1:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:47:46 2025 by rpki-client