Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/3f54756d-92cf-32d2-9d67-667c450979c0.roa
File: 3f54756d-92cf-32d2-9d67-667c450979c0.roa (raw, json)
Hash identifier: IWTk7qBx1IsNjiEMyjggjD3uO8LmB/GIfYess5EAZV0=
Subject key identifier: 55:05:79:85:27:FD:55:59:B9:47:76:E3:4B:D2:57:3F:55:94:EC:42
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F43285848A318AC268991A25E00449100
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/3f54756d-92cf-32d2-9d67-667c450979c0.roa
Signing time: Thu 23 Jan 2025 06:13:22 +0000
ROA not before: Thu 23 Jan 2025 06:13:22 +0000
ROA not after: Wed 23 Apr 2025 05:13:22 +0000
asID: 16591
IP address blocks: 136.36.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a3:18:ac:26:89:91:a2:5e:00:44:91:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: Jan 23 06:13:22 2025 GMT
Not After : Apr 23 05:13:22 2025 GMT
Subject: CN=07fe11f4-2f32-4a1e-8758-7c4d77d06b5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a3:db:7b:fa:48:aa:ef:70:5a:bb:a6:2e:16:
9a:a3:2d:b5:aa:96:a4:74:2b:24:a5:a8:4e:3e:eb:
84:1c:3b:de:c4:62:18:75:f5:66:d7:b9:d5:46:86:
aa:18:b4:bf:30:f3:b2:31:4f:9f:82:7d:c9:70:cb:
75:fc:bb:d7:3b:c6:66:b7:19:33:96:93:28:c3:f0:
69:56:a8:66:04:95:96:9c:24:01:f9:ec:aa:62:85:
60:f0:ba:3b:ea:b0:94:7c:be:9f:a3:42:91:76:79:
ae:86:d2:5b:77:8f:36:18:41:c3:e2:f7:93:6d:bb:
95:a0:d9:cc:73:5a:9f:42:0d:dc:fa:02:ce:cf:74:
52:5b:9f:a4:49:63:98:7b:e6:10:5b:fd:31:04:d1:
ef:e7:be:83:99:1e:64:ce:e7:f3:b8:1e:51:5d:4a:
57:8b:d9:84:aa:66:68:41:7e:98:a6:b0:29:97:4e:
06:e7:8e:76:29:e2:cb:f3:da:05:dd:ff:63:7c:23:
0f:e8:d9:c0:83:ea:77:42:43:b0:b1:0a:e3:ff:3b:
9a:12:92:43:b9:1e:7c:a7:8f:3d:9e:7e:54:b9:63:
51:92:7c:5f:c3:a8:95:30:0f:1f:f3:b9:6f:c7:61:
bb:00:f3:ab:04:7c:1f:1e:50:d8:bd:5f:2b:02:2c:
99:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:05:79:85:27:FD:55:59:B9:47:76:E3:4B:D2:57:3F:55:94:EC:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/3f54756d-92cf-32d2-9d67-667c450979c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
136.36.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:44:44:10:99:46:3c:0a:ec:13:42:ac:82:31:fa:15:4b:cd:
a3:9e:70:3a:66:61:73:28:04:92:57:83:8b:c1:1c:b7:90:a5:
c1:62:5c:0d:65:a7:90:22:ba:d2:22:37:f5:27:8f:b0:f1:19:
61:79:07:59:df:05:05:6a:5c:98:22:6e:2e:4e:e0:21:5c:cb:
ba:74:54:91:03:e6:d1:98:30:a7:7b:31:94:f2:f3:64:8a:8b:
c8:82:24:e6:37:c7:dc:b7:95:30:3f:7c:37:06:c0:ca:40:a9:
24:3d:00:52:31:5f:f6:45:70:c8:c1:82:db:6f:65:c8:bb:73:
8f:e4:27:cf:64:f0:82:eb:1d:5a:ad:3a:98:70:6e:ea:5a:60:
59:c4:47:15:85:c7:74:d1:bd:62:73:70:f9:9c:e0:ca:35:db:
f2:4d:90:bb:de:c5:a9:2e:45:85:ef:e3:e2:93:dc:2a:2f:f7:
03:57:91:02:cb:9f:2a:17:95:38:73:ed:39:65:93:bc:03:f2:
87:8c:d5:19:ab:31:f7:a1:07:6f:e9:c2:46:05:8d:f1:b1:75:
09:d6:f8:a3:f7:28:05:5c:24:55:55:2f:b2:5e:70:76:49:92:
9a:8b:02:6e:23:f2:34:0e:c9:8d:d6:8a:83:3c:ec:fe:be:36:
e7:25:2f:7a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEijGKwmiZGiXgBEkQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh
MzRlMB4XDTI1MDEyMzA2MTMyMloXDTI1MDQyMzA1MTMyMlowLzEtMCsGA1UEAxMk
MDdmZTExZjQtMmYzMi00YTFlLTg3NTgtN2M0ZDc3ZDA2YjVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaPbe/pIqu9wWrumLhaaoy21qpakdCskpahO
PuuEHDvexGIYdfVm17nVRoaqGLS/MPOyMU+fgn3JcMt1/LvXO8ZmtxkzlpMow/Bp
VqhmBJWWnCQB+eyqYoVg8Lo76rCUfL6fo0KRdnmuhtJbd482GEHD4veTbbuVoNnM
c1qfQg3c+gLOz3RSW5+kSWOYe+YQW/0xBNHv576DmR5kzufzuB5RXUpXi9mEqmZo
QX6YprApl04G5452KeLL89oF3f9jfCMP6NnAg+p3QkOwsQrj/zuaEpJDuR58p489
nn5UuWNRknxfw6iVMA8f87lvx2G7APOrBHwfHlDYvV8rAiyZ1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFUFeYUn/VVZuUd240vSVz9VlOxCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2
NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvM2Y1NDc1NmQtOTJjZi0z
MmQyLTlkNjctNjY3YzQ1MDk3OWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj
MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5
YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0
MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCSQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIdERBCZRjwK7BNCrIIx+hVLzaOecDpmYXMoBJJXg4vBHLeQpcFiXA1l
p5AiutIiN/Unj7DxGWF5B1nfBQVqXJgibi5O4CFcy7p0VJED5tGYMKd7MZTy82SK
i8iCJOY3x9y3lTA/fDcGwMpAqSQ9AFIxX/ZFcMjBgttvZci7c4/kJ89k8ILrHVqt
OphwbupaYFnERxWFx3TRvWJzcPmc4Mo12/JNkLvexakuRYXv4+KT3Cov9wNXkQLL
nyoXlThz7Tllk7wD8oeM1RmrMfehB2/pwkYFjfGxdQnW+KP3KAVcJFVVL7JecHZJ
kpqLAm4j8jQOyY3WioM87P6+NuclL3o=
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:50:58 2025 by rpki-client