Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/642928de-dbc1-326a-9a3b-fc9fc9cbd139.roa
File: 642928de-dbc1-326a-9a3b-fc9fc9cbd139.roa (raw, json)
Hash identifier: yvLK6wlXmxOwijqVq7fKd9ASJe1wIJrBx+UPAcnm3fw=
Subject key identifier: 2A:C6:5F:97:26:F9:A5:B0:EC:F0:0B:92:73:DD:82:75:7C:EE:1D:27
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F43285848A318AAD104A5A4C185C09500
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/642928de-dbc1-326a-9a3b-fc9fc9cbd139.roa
Signing time: Thu 23 Jan 2025 06:13:21 +0000
ROA not before: Thu 23 Jan 2025 06:13:21 +0000
ROA not after: Wed 23 Apr 2025 05:13:21 +0000
asID: 16591
IP address blocks: 136.35.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a3:18:aa:d1:04:a5:a4:c1:85:c0:95:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: Jan 23 06:13:21 2025 GMT
Not After : Apr 23 05:13:21 2025 GMT
Subject: CN=941f162c-4adc-4702-bcf0-0309bb46977e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:7f:24:8e:26:be:51:f9:0e:89:e6:ae:2e:b3:
88:01:43:4b:66:b8:48:a1:66:db:0d:38:7a:b8:b9:
fd:69:3c:9a:cb:87:1f:0b:2a:be:6e:94:9e:b2:bf:
f9:ae:8e:c9:90:de:6b:a6:ca:b4:18:d1:be:4a:23:
23:13:4e:07:0b:95:f4:a3:41:4f:b7:ce:3b:8b:1a:
66:a2:f7:3d:2e:54:85:ad:c6:09:6a:36:c2:2f:23:
aa:3c:3f:29:c2:e8:d3:f2:28:66:a5:b6:e8:f9:9d:
92:96:4a:fd:cc:25:54:8d:d0:bf:63:c1:72:eb:bf:
c0:6b:de:a6:b6:59:a3:62:6a:6b:b9:f6:8e:de:2f:
9a:c6:84:f1:30:f5:78:86:9e:8d:fa:c1:b8:68:40:
eb:89:5f:16:73:05:b8:e9:8c:7a:25:0c:3f:37:93:
9f:81:8d:62:b5:04:fd:48:a1:4f:fa:67:db:5b:03:
af:dd:ed:2b:87:80:8a:6b:be:10:0e:be:c8:07:fa:
8e:7a:db:fe:9f:ab:05:3f:d1:8f:22:d4:ec:6a:df:
84:f2:2f:79:93:3c:ea:59:72:c4:ef:73:21:e7:09:
1e:0d:cd:a3:1a:a5:87:fb:15:fb:79:61:2d:22:cc:
e8:ea:17:9e:2c:a8:ac:9e:1d:d0:2c:4e:5f:ec:c8:
94:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C6:5F:97:26:F9:A5:B0:EC:F0:0B:92:73:DD:82:75:7C:EE:1D:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/642928de-dbc1-326a-9a3b-fc9fc9cbd139.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
136.35.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:5e:b9:e6:1f:2c:a4:51:2d:c3:da:dd:dc:a4:4d:59:c9:08:
d1:e0:18:d1:44:b1:23:10:4f:1e:0e:8c:7e:84:3a:38:ee:89:
a6:94:10:fc:33:39:4f:c1:ba:7d:47:19:d4:9f:30:20:ea:93:
a8:97:c3:40:e3:bd:78:6c:b2:0e:10:85:0c:a4:27:ec:93:57:
97:b3:44:7b:f5:92:9b:36:4b:c1:f1:7f:70:f4:67:64:a3:71:
d2:e7:c7:f9:5d:eb:ae:34:98:97:d4:ff:76:c4:f1:1f:8f:be:
8c:ba:e8:1d:c8:36:d8:ab:84:90:69:83:73:cb:72:e5:f5:52:
2c:ef:f1:80:9d:17:b5:1b:7b:d3:b8:b1:2e:c5:8c:3a:4a:35:
d4:25:19:b5:90:f3:50:db:99:5b:81:83:08:a8:6b:c6:c1:0c:
ae:5f:0d:06:ad:50:45:a5:10:1d:ee:2c:fa:c6:76:25:52:90:
09:53:cc:1c:f4:3c:29:14:eb:cc:75:22:58:4c:15:b8:4c:f4:
7b:9b:1a:54:2c:14:72:fe:04:b3:7e:e2:49:7d:51:f7:8a:56:
c9:9a:14:d5:1e:1b:54:63:fa:50:cd:d6:39:47:4d:fc:72:7e:
92:f7:83:dc:7b:13:75:5a:b2:e0:30:bd:13:6d:e3:4c:8d:b0:
78:a9:81:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:40:49 2025 by rpki-client