Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a2091dbe-0412-3f1a-9898-f8d8dd235ee5.roa
File: a2091dbe-0412-3f1a-9898-f8d8dd235ee5.roa (raw, json)
Hash identifier: HFwo85775RV1eaUWSAsm6P8RFQuUBn2/M7sL3E+V560=
Subject key identifier: 81:1E:84:6D:CF:14:83:43:82:F7:30:9E:72:1F:70:5E:69:5D:27:FD
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F43285848A318A104B55773AE4B547380
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a2091dbe-0412-3f1a-9898-f8d8dd235ee5.roa
Signing time: Thu 23 Jan 2025 06:13:16 +0000
ROA not before: Thu 23 Jan 2025 06:13:16 +0000
ROA not after: Wed 23 Apr 2025 05:13:16 +0000
asID: 16591
IP address blocks: 136.57.160.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a3:18:a1:04:b5:57:73:ae:4b:54:73:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: Jan 23 06:13:16 2025 GMT
Not After : Apr 23 05:13:16 2025 GMT
Subject: CN=768bcca2-d85b-4438-bfc5-b0e49102f35b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:eb:bc:13:97:27:18:58:32:21:e8:1e:8c:0c:
56:18:0d:e4:59:6b:d5:48:38:5e:69:69:ab:e8:81:
74:f0:3e:94:09:dc:90:7f:c1:20:87:15:6a:ab:d7:
c4:9d:42:49:2c:81:f0:5b:fa:74:51:28:c2:0f:ad:
1b:77:1c:79:12:a0:5e:99:fe:d5:de:4a:94:37:70:
40:92:03:91:56:66:84:82:d9:50:d5:23:0b:53:9a:
93:f3:73:1f:e6:8d:42:44:4b:7b:dc:bb:7f:86:23:
e3:47:49:44:a1:e8:7b:8f:7a:3d:30:b6:dd:06:eb:
3c:fa:06:c0:25:06:02:cc:75:90:c7:fe:e7:79:b5:
4c:da:3f:5e:40:37:6c:19:9e:18:f7:fb:7c:6e:90:
0c:fb:90:8f:03:d7:cb:34:bb:6d:74:f6:7a:d3:88:
dc:25:b0:54:d4:0b:96:c5:24:9f:94:f0:79:8b:36:
49:4e:dd:09:0f:e7:62:55:4c:d7:15:fb:e3:54:e2:
3a:40:4f:a0:2e:86:a8:73:9b:cc:90:d9:ec:50:dc:
ec:fa:36:ac:cd:17:2e:b5:79:17:45:2d:f6:77:f6:
3f:29:f1:ba:38:54:a1:73:8a:fa:6b:d8:0e:20:63:
10:b3:ea:2f:21:b3:2c:48:f7:cd:af:5d:30:04:98:
1c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:1E:84:6D:CF:14:83:43:82:F7:30:9E:72:1F:70:5E:69:5D:27:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a2091dbe-0412-3f1a-9898-f8d8dd235ee5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
136.57.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:45:2f:a0:c4:66:19:fc:21:c2:7c:c8:2c:3f:db:58:66:be:
9c:4e:37:03:8a:57:a8:14:a4:6b:69:ec:76:43:7b:c9:2f:24:
5d:4c:73:8d:3c:6f:d8:36:ff:b9:47:1b:38:a7:2b:d8:a1:4f:
e1:5f:09:2b:3f:54:5a:8b:e2:e4:ca:7f:0c:bb:08:2d:9b:cf:
d1:9e:6c:92:90:01:5c:85:b0:b3:9d:9d:c6:46:70:4b:25:2d:
52:12:a3:33:14:99:14:0d:26:31:94:8d:c1:ec:97:59:4b:c3:
c4:95:91:3c:65:ce:fb:fa:69:88:76:71:c9:ec:d3:0a:b9:c3:
5b:46:99:59:d9:91:55:b9:34:41:f0:cb:af:fb:64:e4:cc:1c:
ac:62:23:c3:03:43:c9:9c:56:1a:6a:e2:88:14:d7:54:e0:be:
3b:88:bc:c1:82:dd:23:7a:d6:70:a7:7e:7f:cd:27:b1:24:a6:
ce:81:aa:62:85:e9:f3:36:56:69:0c:37:35:f5:1e:11:fd:a1:
b3:10:a1:1c:b6:56:46:ca:5b:82:41:00:7c:ad:fe:55:e6:52:
4d:14:fc:7c:6b:43:78:07:f1:c0:74:a4:bf:b6:6a:cd:c3:81:
21:3c:1c:91:24:20:e7:63:8a:da:03:24:16:50:a7:05:25:67:
cb:ba:4e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:53:43 2025 by rpki-client