Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/5b456bf4-139a-3442-9f58-1b5e542b743e.roa
File: 5b456bf4-139a-3442-9f58-1b5e542b743e.roa (raw, json)
Hash identifier: S+dgGP6XnXFndWy1fQGeF2gGWEpAW5REd6i6Bkj5oWE=
Subject key identifier: F5:2E:58:16:7B:4C:0B:07:55:15:6D:C1:7C:4D:52:28:76:6F:C2:2C
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F43285848A318AA7C6AF23AF62F6813C0
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/5b456bf4-139a-3442-9f58-1b5e542b743e.roa
Signing time: Thu 23 Jan 2025 06:13:21 +0000
ROA not before: Thu 23 Jan 2025 06:13:21 +0000
ROA not after: Wed 23 Apr 2025 05:13:21 +0000
asID: 16591
IP address blocks: 136.62.224.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a3:18:aa:7c:6a:f2:3a:f6:2f:68:13:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: Jan 23 06:13:21 2025 GMT
Not After : Apr 23 05:13:21 2025 GMT
Subject: CN=a179e966-aad6-46e4-8339-1da9d0d91b14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:11:56:d5:d8:13:cc:39:eb:2c:8d:dd:8e:0d:
36:fe:7e:7a:b7:46:2e:8d:24:3c:11:cf:08:a7:3d:
ca:a7:98:cb:92:64:75:0a:ad:d1:9a:81:ed:36:70:
9e:38:70:63:30:96:bb:af:b3:ea:53:3f:86:7d:f7:
1b:0f:a6:23:e4:f3:73:d4:30:d5:f4:65:54:a0:23:
be:dc:a3:2c:6a:f6:06:2a:3a:f2:9c:ea:2c:c9:bf:
4d:9f:39:7d:33:61:df:bc:5d:f6:a6:31:e9:59:97:
22:4b:de:ea:36:ad:ec:70:f1:96:4a:6b:0c:8a:80:
3d:9d:c0:25:b7:fe:3f:85:a5:b4:40:43:45:86:0b:
dc:29:72:eb:11:96:f8:dc:ba:ae:07:34:6c:a0:8a:
bb:c1:5b:c5:6f:15:21:56:18:c2:2b:88:da:1e:dd:
86:40:1d:bd:e3:22:15:e7:68:30:29:91:8d:c6:92:
6f:46:2c:d7:95:18:4c:22:62:19:ef:3a:ff:c7:c8:
52:8f:ca:e1:0b:d8:4c:df:0d:c3:d6:90:f3:a4:fd:
75:c5:98:dc:7a:bb:cd:c9:6f:8e:88:4e:dc:4d:a9:
00:28:d0:f5:2b:a9:de:dd:1e:ac:5f:96:30:5f:79:
57:0f:e2:24:67:6d:2d:d7:f9:06:06:44:ea:08:93:
a5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:2E:58:16:7B:4C:0B:07:55:15:6D:C1:7C:4D:52:28:76:6F:C2:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/5b456bf4-139a-3442-9f58-1b5e542b743e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
136.62.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:71:88:2d:39:d0:78:be:f4:88:0d:a9:01:a4:9a:3e:6c:35:
86:7a:ad:fd:a2:10:fd:06:d2:4a:eb:6e:ff:d5:0d:1f:92:3e:
59:b2:91:66:9d:65:4d:12:16:7a:e6:86:f6:e1:86:9a:05:cd:
88:2b:b0:4f:59:ad:fc:6e:a6:4c:19:a4:d2:de:7b:36:14:15:
83:89:50:fc:ac:62:f7:5d:c4:14:e0:48:25:09:f4:eb:4d:94:
32:7d:99:5d:01:a2:b3:88:9e:69:af:e6:08:41:8f:6a:78:8c:
13:ff:bb:4f:f2:2a:04:df:f5:2b:d5:00:89:a3:12:1b:94:b7:
91:ff:20:ea:7e:ac:f7:18:23:ee:08:96:06:79:dc:e8:4f:6b:
a6:81:f4:bd:f2:80:f8:20:72:56:71:d4:4d:bb:37:fd:f6:a5:
0c:e9:cc:32:84:7b:55:78:07:82:e2:62:60:ac:27:30:48:fe:
d4:81:c6:e3:41:0d:67:c9:22:13:ee:99:da:31:ae:be:d2:0b:
0f:e8:93:3e:67:bd:2f:c9:ea:12:e1:33:4a:81:bc:d8:2d:4b:
98:da:92:58:17:d1:55:30:27:ce:41:b2:90:25:0e:4d:a6:9a:
57:be:3e:00:04:28:f1:ae:93:db:43:a6:fd:01:ce:36:f3:0e:
bc:fe:42:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:50:50 2025 by rpki-client