Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/6cf7128d-e69a-3f3e-8ab7-26aa9f740bd2.roa
File: 6cf7128d-e69a-3f3e-8ab7-26aa9f740bd2.roa (raw, json)
Hash identifier: dMdNcTeeS2puxbtfW+Usyjro7WRO4vbblMCWMqc++UY=
Subject key identifier: F4:72:AE:07:D3:DF:26:73:83:93:86:0D:5F:F2:EC:02:DF:E1:1E:40
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F43285848A318A94DE7D0B5FA1542E956
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/6cf7128d-e69a-3f3e-8ab7-26aa9f740bd2.roa
Signing time: Thu 23 Jan 2025 06:13:20 +0000
ROA not before: Thu 23 Jan 2025 06:13:20 +0000
ROA not after: Wed 23 Apr 2025 05:13:20 +0000
asID: 16591
IP address blocks: 136.47.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a3:18:a9:4d:e7:d0:b5:fa:15:42:e9:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: Jan 23 06:13:20 2025 GMT
Not After : Apr 23 05:13:20 2025 GMT
Subject: CN=2657128b-d015-45b2-b08d-5c2d3e0f552c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:1e:2c:61:8b:46:cc:ed:c7:4b:16:39:14:09:
3b:ee:3b:1d:1d:22:41:1d:0b:9f:43:39:b6:bf:d9:
ca:0a:73:7f:34:63:ec:6e:72:3f:da:8e:89:6d:a0:
92:e8:d7:2d:31:7a:bf:67:03:2d:a7:5e:e0:60:a0:
3d:7e:a0:3c:ef:c8:87:85:38:32:01:8b:c2:74:89:
f2:e4:b6:6f:48:a3:2a:82:57:f3:a9:2c:86:7b:c7:
6d:a2:7c:08:34:c2:39:47:cf:31:dd:88:3c:94:2b:
5a:d4:d9:95:b2:8c:3b:78:7e:f7:44:e4:14:c6:93:
9a:d0:d3:52:d4:3c:94:7f:06:2f:82:b8:aa:6a:55:
ff:74:1a:8d:57:29:62:17:c0:93:45:43:29:21:9a:
0e:7e:a9:77:27:47:dd:1b:b8:ff:85:d6:e4:86:4d:
29:c8:d1:51:30:f9:aa:5f:6c:df:02:b3:16:22:db:
12:2f:c3:49:12:e4:93:2f:b2:d1:98:e9:25:a2:3a:
7e:3a:88:ab:0e:01:a8:f2:78:32:fb:dd:42:2f:a3:
8a:40:ea:5c:10:5e:65:b9:86:af:b0:dc:31:36:33:
13:0b:85:cc:5b:cd:b7:ad:38:c3:e0:aa:0a:0a:25:
1e:48:77:96:b3:b5:53:d9:a5:45:00:23:cc:d7:d9:
b3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:72:AE:07:D3:DF:26:73:83:93:86:0D:5F:F2:EC:02:DF:E1:1E:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/6cf7128d-e69a-3f3e-8ab7-26aa9f740bd2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
136.47.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:ea:70:4b:fc:d6:8b:85:98:1f:4c:80:8c:ec:71:52:8f:2c:
71:26:9d:cd:7b:24:8f:ab:d9:a2:de:d4:6e:ad:96:a0:83:4e:
9e:da:7a:70:2b:60:0f:1d:be:09:4c:75:88:b1:73:ff:4d:43:
3b:b9:f5:d3:96:32:42:da:8d:df:36:46:90:d0:94:98:da:38:
a0:11:fc:b4:73:08:64:45:2f:c6:34:9e:ca:6f:d8:30:a6:a2:
83:4d:ae:4a:0b:12:58:11:17:6d:07:ba:2d:87:2a:db:4a:a3:
0c:29:8a:d1:30:08:87:24:8c:6a:fd:42:a8:b7:68:49:2d:89:
c4:27:f2:ba:55:d5:26:a0:4d:b9:02:8a:a3:38:a7:e9:15:ed:
dd:2d:0e:b0:94:ef:09:bf:89:a3:b1:36:e5:a3:7d:4a:76:cc:
86:26:f2:f0:d8:fd:f3:af:7c:78:ba:73:0d:17:7c:f8:7c:40:
b6:46:d6:ec:bb:df:c3:ae:8a:52:a5:51:6a:fc:10:cd:02:22:
1b:88:e8:71:7b:ab:51:99:42:16:5c:4c:97:9d:a6:ac:60:24:
2e:ad:bf:d3:73:16:80:ea:ee:7c:b9:01:4e:d8:80:cb:fa:32:
f1:c3:67:fe:67:a8:f4:ab:e6:97:a9:51:38:2a:7d:da:f1:ee:
3e:5d:21:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:47:54 2025 by rpki-client