Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/3b17455d-ed9b-356b-93a3-021986d9b8c9.roa
File: 3b17455d-ed9b-356b-93a3-021986d9b8c9.roa (raw, json)
Hash identifier: xGgirz/TE6D79hn8eSLUEr/QAFSbEG/LQ02YrNmksCQ=
Subject key identifier: CF:AD:C7:FB:29:C0:75:04:04:95:69:CB:9D:32:FE:2B:05:31:6A:D3
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F43285848A318B02947D9704E61046900
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/3b17455d-ed9b-356b-93a3-021986d9b8c9.roa
Signing time: Thu 23 Jan 2025 06:13:23 +0000
ROA not before: Thu 23 Jan 2025 06:13:23 +0000
ROA not after: Wed 23 Apr 2025 05:13:23 +0000
asID: 16591
IP address blocks: 136.32.0.0/11 maxlen: 11
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a3:18:b0:29:47:d9:70:4e:61:04:69:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: Jan 23 06:13:23 2025 GMT
Not After : Apr 23 05:13:23 2025 GMT
Subject: CN=e13d4198-a93d-4ff7-a57d-ebfe053e47a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1e:bc:3c:b8:b7:f2:0c:fd:bf:68:f7:b8:41:
ad:78:94:c2:aa:a6:6d:8d:9e:68:e6:b1:02:ff:15:
7c:ac:ff:2b:b3:ae:30:3a:68:07:b3:90:52:26:e3:
39:b3:01:45:7f:18:73:3b:cb:36:2a:d4:8f:06:32:
45:5f:15:cb:03:17:6f:3f:4b:28:bf:d1:04:7a:2a:
49:61:2c:b1:a0:0c:31:71:d2:e1:30:3c:cc:51:ef:
54:6c:61:45:18:8c:7b:82:ca:b9:4f:65:a0:e0:d6:
1f:2b:b1:4b:d9:9b:c2:bd:17:1a:6d:6d:a0:26:08:
35:d8:fa:7d:05:d0:d1:ac:09:96:b0:cc:96:e4:0b:
19:97:9a:bc:25:b3:7f:77:62:41:06:9c:ce:91:bf:
97:b4:8d:f4:0f:b8:bc:5e:d4:4e:9a:53:8d:5a:38:
31:95:ae:35:ed:67:e9:ac:a5:d9:75:89:54:d1:8a:
ea:87:38:17:c3:38:19:30:1a:a8:3f:7c:45:f3:08:
d1:b9:4c:03:1f:a3:e7:c5:b3:89:cf:37:a4:fd:3d:
c8:0f:03:92:34:a6:cd:d3:45:c4:20:d8:91:f8:28:
65:48:0d:9b:07:86:e7:8e:bf:fc:e9:67:f9:b8:87:
77:b1:28:ff:2a:c2:6f:0e:b0:05:27:3b:33:5d:aa:
b2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:AD:C7:FB:29:C0:75:04:04:95:69:CB:9D:32:FE:2B:05:31:6A:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/3b17455d-ed9b-356b-93a3-021986d9b8c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
136.32.0.0/11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:df:02:2f:62:99:d9:19:11:cd:1e:78:8e:cc:42:f2:87:7b:
45:dd:8e:53:24:6e:e9:f5:1d:64:c8:25:cd:e1:22:c0:f1:46:
e3:a1:45:88:25:59:9c:88:15:48:b2:60:e5:ed:55:4c:3f:5b:
bf:5e:96:29:db:b5:58:f3:96:c8:42:99:1d:e3:df:8c:be:28:
81:1b:85:b1:d6:55:0b:72:4e:81:13:7f:64:f2:f5:cf:d6:2c:
e2:58:40:2b:5c:0b:52:a9:ba:81:d6:bf:27:b4:72:16:92:bd:
b9:a2:1f:80:56:9c:e5:d5:c6:60:d4:a6:7c:af:bd:af:ba:7c:
50:2c:d5:90:b6:b6:2b:1a:1f:5b:82:b6:54:5c:48:4b:68:ea:
1d:bd:1c:82:ce:6f:ea:f8:2c:b4:79:c6:ea:2e:85:c2:fa:85:
4c:a7:3d:db:51:af:a7:ee:86:a1:90:9b:07:35:2c:4f:71:47:
35:45:01:2c:94:7d:99:c2:d4:eb:fd:63:a4:fc:c7:6d:f4:a4:
32:db:12:dd:ac:03:18:ca:02:b5:50:99:a6:dd:36:50:27:bf:
0b:aa:83:c8:a5:75:9e:74:bb:92:47:61:02:64:5d:90:34:bc:
79:0e:55:4d:ef:b2:3d:c4:8d:05:eb:e8:3c:24:5b:b4:da:c9:
fe:e1:03:d2
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEijGLApR9lwTmEEaQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh
MzRlMB4XDTI1MDEyMzA2MTMyM1oXDTI1MDQyMzA1MTMyM1owLzEtMCsGA1UEAxMk
ZTEzZDQxOTgtYTkzZC00ZmY3LWE1N2QtZWJmZTA1M2U0N2EyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApB68PLi38gz9v2j3uEGteJTCqqZtjZ5o5rEC
/xV8rP8rs64wOmgHs5BSJuM5swFFfxhzO8s2KtSPBjJFXxXLAxdvP0sov9EEeipJ
YSyxoAwxcdLhMDzMUe9UbGFFGIx7gsq5T2Wg4NYfK7FL2ZvCvRcabW2gJgg12Pp9
BdDRrAmWsMyW5AsZl5q8JbN/d2JBBpzOkb+XtI30D7i8XtROmlONWjgxla417Wfp
rKXZdYlU0YrqhzgXwzgZMBqoP3xF8wjRuUwDH6PnxbOJzzek/T3IDwOSNKbN00XE
INiR+ChlSA2bB4bnjr/86Wf5uId3sSj/KsJvDrAFJzszXaqyfwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFM+tx/spwHUEBJVpy50y/isFMWrTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2
NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvM2IxNzQ1NWQtZWQ5Yi0z
NTZiLTkzYTMtMDIxOTg2ZDliOGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj
MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5
YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0
MDZmOWEzNGUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMFiCAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAZN8CL2KZ2RkRzR54jsxC8od7Rd2OUyRu6fUdZMglzeEiwPFG46FFiCVZ
nIgVSLJg5e1VTD9bv16WKdu1WPOWyEKZHePfjL4ogRuFsdZVC3JOgRN/ZPL1z9Ys
4lhAK1wLUqm6gda/J7RyFpK9uaIfgFac5dXGYNSmfK+9r7p8UCzVkLa2KxofW4K2
VFxIS2jqHb0cgs5v6vgstHnG6i6FwvqFTKc921Gvp+6GoZCbBzUsT3FHNUUBLJR9
mcLU6/1jpPzHbfSkMtsS3awDGMoCtVCZpt02UCe/C6qDyKV1nnS7kkdhAmRdkDS8
eQ5VTe+yPcSNBevoPCRbtNrJ/uED0g==
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:25:57 2025 by rpki-client