Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/41a5a0ef-03c9-3154-aea2-f8611c12e671.roa
File: 41a5a0ef-03c9-3154-aea2-f8611c12e671.roa (raw, json)
Hash identifier: 5NNl/oO2baZXKJ73K8miDCiBZx/NvQ+QaqTGxmX/afg=
Subject key identifier: 7A:65:59:7B:8F:72:B2:08:30:13:AB:1C:2C:D5:4C:D6:77:7C:01:21
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F43285848A318A113E18A270F479A9400
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/41a5a0ef-03c9-3154-aea2-f8611c12e671.roa
Signing time: Thu 23 Jan 2025 06:13:16 +0000
ROA not before: Thu 23 Jan 2025 06:13:16 +0000
ROA not after: Wed 23 Apr 2025 05:13:16 +0000
asID: 16591
IP address blocks: 136.57.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a3:18:a1:13:e1:8a:27:0f:47:9a:94:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: Jan 23 06:13:16 2025 GMT
Not After : Apr 23 05:13:16 2025 GMT
Subject: CN=71574555-1360-4edb-a695-4e92366a10a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:50:05:4d:5a:43:68:54:36:67:40:09:d3:7c:
0d:4e:98:ee:a3:ab:68:d8:2d:ca:36:42:c1:87:53:
9c:a1:00:75:5c:12:ff:bf:46:8e:a6:a2:05:13:ac:
3c:e3:f6:e5:06:c2:aa:49:21:f7:f4:f2:81:d4:5d:
34:ee:dd:60:a4:f8:a6:da:7d:da:d3:6c:a9:95:f8:
a3:4b:74:fd:88:8a:2d:4f:53:43:22:9b:06:f6:01:
a6:08:f9:9f:8a:09:ea:a3:81:91:88:72:16:3d:b7:
d5:78:82:61:70:e0:19:5f:3c:b7:44:d5:ad:57:d6:
34:2c:cf:a2:c5:0c:23:b3:a9:19:92:a6:37:2e:b5:
e6:8f:6c:dc:5d:40:e9:9b:31:16:28:36:9e:ba:93:
85:14:ff:a2:f5:e4:ca:bd:df:c0:1a:3d:85:bb:09:
04:09:3d:8b:17:96:0b:ea:99:f7:0a:6a:51:c0:4c:
0a:b4:09:84:2b:84:73:24:3c:27:66:00:fc:bd:31:
13:03:47:29:5c:da:10:60:99:db:b6:1e:2c:df:6c:
a5:85:30:f7:f5:23:db:e7:2c:7a:68:cb:72:7a:d7:
48:c8:e9:52:70:00:82:54:f1:90:98:23:4b:d8:cd:
55:43:79:ee:73:93:9a:a7:e5:50:30:39:9a:9e:0a:
b6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:65:59:7B:8F:72:B2:08:30:13:AB:1C:2C:D5:4C:D6:77:7C:01:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/41a5a0ef-03c9-3154-aea2-f8611c12e671.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
136.57.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:6e:cc:45:53:d6:aa:78:88:04:76:0b:6d:46:39:d9:55:11:
5b:e8:95:66:5f:ac:e2:0c:db:10:81:5c:e6:2a:12:50:d3:25:
d9:2c:df:9d:e4:fe:33:29:76:11:c3:27:e4:de:4f:25:07:e5:
fb:77:95:d9:ad:dd:2c:e8:fb:4e:d6:e2:5c:19:89:d5:93:b2:
3b:ab:33:34:aa:b4:a0:c5:b2:39:ca:ac:8f:ad:e8:30:b2:51:
55:a4:8c:17:2b:25:f3:e9:13:d0:d0:53:dc:b0:66:a1:03:49:
8d:ed:2f:22:49:81:4f:00:f1:5e:64:d3:ae:ee:3f:55:11:a0:
44:8f:39:c1:ed:63:d0:09:a3:9b:ff:1f:3a:29:26:36:41:aa:
98:86:af:6d:39:8f:9a:45:04:51:98:0a:44:76:4a:fc:9f:11:
cd:5d:ba:e2:1c:9e:6a:2a:d7:15:79:a2:4f:7c:eb:31:a5:14:
27:d8:89:62:75:da:4b:14:66:03:70:e3:5c:13:19:4a:91:fe:
b6:52:d2:2f:93:cd:cb:6e:36:b7:1e:c8:85:17:12:4e:3a:86:
0d:0d:cd:99:5e:30:37:3f:e0:24:2a:7e:4a:49:6d:89:dd:41:
9c:17:ee:0e:33:7a:50:48:38:62:41:08:b1:ef:22:83:06:f0:
36:7e:0f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:50:25 2025 by rpki-client