Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/7414e153-6a51-342c-a0c1-785f5d538a41.roa
File: 7414e153-6a51-342c-a0c1-785f5d538a41.roa (raw, json)
Hash identifier: oZDjs2JClMrhY73B1XCq4QbY2BweyAL+85CsSpWSUMk=
Subject key identifier: 3A:62:55:B0:F9:93:24:74:D0:41:75:AE:76:45:AF:1F:7E:E2:1E:F0
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F43285848A318ACF61FA7047609967E20
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/7414e153-6a51-342c-a0c1-785f5d538a41.roa
Signing time: Thu 23 Jan 2025 06:13:22 +0000
ROA not before: Thu 23 Jan 2025 06:13:22 +0000
ROA not after: Wed 23 Apr 2025 05:13:22 +0000
asID: 16591
IP address blocks: 136.38.32.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a3:18:ac:f6:1f:a7:04:76:09:96:7e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: Jan 23 06:13:22 2025 GMT
Not After : Apr 23 05:13:22 2025 GMT
Subject: CN=abf0d7d4-4a39-4739-9d71-ee9d4aa82a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e5:ab:4b:fd:c3:9a:cb:97:11:76:6a:5d:9b:
cc:ae:81:8b:61:a9:ad:98:28:ea:d9:40:dc:a8:54:
89:d0:6e:e9:96:2e:e7:1a:c8:2a:4d:39:22:c4:5f:
75:31:16:8f:8a:27:92:84:8c:b2:d2:10:8e:72:ba:
23:f4:ff:3d:67:b5:78:f6:f2:f8:bc:23:20:fb:dd:
9a:45:8a:b1:e6:b4:ab:71:23:5b:3a:fb:7e:d3:b7:
88:23:30:fd:3a:f9:90:8a:d7:54:43:37:58:39:43:
c8:4d:0b:57:a9:ab:8b:8a:22:3d:f0:cf:b4:72:02:
6c:1b:83:1b:69:43:e1:05:46:f4:e0:49:2a:a6:8c:
42:40:e9:d1:f0:b5:6e:7b:6e:f7:70:88:15:07:21:
f8:11:24:35:1d:db:8b:d9:96:7a:5a:14:9f:2e:1f:
a6:49:6d:14:8e:61:21:4c:44:86:0d:f2:03:b8:5d:
53:8e:3c:0a:3b:cc:19:70:86:74:74:79:6c:79:8b:
88:8b:89:db:40:f5:fb:94:55:ca:44:a9:1f:29:94:
0d:79:60:22:3e:c7:e7:e8:3f:04:2d:2b:84:a1:6f:
85:21:a2:36:18:e2:17:76:4b:4a:ec:f8:bf:14:a5:
56:be:01:d2:e0:0e:d9:eb:0f:d4:70:52:48:2c:9a:
98:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:62:55:B0:F9:93:24:74:D0:41:75:AE:76:45:AF:1F:7E:E2:1E:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/7414e153-6a51-342c-a0c1-785f5d538a41.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
136.38.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:8d:ac:58:d7:98:1f:82:cb:c3:31:e3:c7:a1:9a:a8:64:59:
08:fe:30:59:fb:8a:f6:af:d8:ef:cf:e4:e9:8f:39:4f:9e:88:
3e:2a:c6:7a:7c:48:78:2c:3b:5f:d5:07:89:c1:ff:56:05:bb:
6b:ba:cb:0a:b5:23:ab:3a:b2:94:ec:bd:e6:14:0f:24:00:ec:
2f:f8:92:64:a5:8e:ef:d4:d8:a0:45:dc:c9:4b:a3:2d:a7:74:
9e:7f:19:ae:90:72:56:9f:f3:12:81:a9:34:2c:a3:83:97:82:
4a:ce:d2:af:4b:31:e7:88:63:bd:e7:3d:35:bf:4a:96:36:c0:
e2:14:2e:29:38:b3:6f:28:f8:36:50:1f:70:23:99:44:65:08:
44:0d:22:63:36:85:0a:79:f7:2f:18:25:29:05:b9:5e:ff:48:
1b:fc:02:73:ba:64:3b:d7:a2:7b:7e:bf:25:57:3a:98:d6:81:
65:87:20:8a:e7:0b:12:87:98:fd:e6:fd:b2:da:79:8a:b3:95:
85:e5:90:46:d6:65:16:c9:e6:cb:91:fe:1c:da:a4:ee:5d:26:
2e:b3:52:90:15:9e:e8:57:e9:3a:43:81:7d:6a:f2:2f:ac:d9:
99:92:ed:9f:28:70:c1:dd:2f:be:d1:02:46:8b:27:4c:64:6a:
9c:88:4b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:30:49 2025 by rpki-client