Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a4c9fc1e-0d7d-3b3c-8443-64e1e8832d3b.roa
File: a4c9fc1e-0d7d-3b3c-8443-64e1e8832d3b.roa (raw, json)
Hash identifier: RoCz4GmY169QhiQrowi8ulFXyKO+QUrCABJ8HvX8cKg=
Subject key identifier: B5:9A:58:2E:B9:C1:1C:10:D5:55:E7:34:9F:C6:EC:09:C9:18:EE:A0
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F43285848A318AD4D64DDCECDBD0FCA78
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a4c9fc1e-0d7d-3b3c-8443-64e1e8832d3b.roa
Signing time: Thu 23 Jan 2025 06:13:22 +0000
ROA not before: Thu 23 Jan 2025 06:13:22 +0000
ROA not after: Wed 23 Apr 2025 05:13:22 +0000
asID: 16591
IP address blocks: 136.42.24.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a3:18:ad:4d:64:dd:ce:cd:bd:0f:ca:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: Jan 23 06:13:22 2025 GMT
Not After : Apr 23 05:13:22 2025 GMT
Subject: CN=2e8e6d39-df95-41a4-be31-00d2e9b0ed56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:49:20:ef:3e:91:20:a8:e6:b4:4d:85:f6:c9:
2c:e9:72:01:59:3a:69:50:d0:6c:f6:bf:07:0f:98:
2a:c2:64:f6:ac:99:85:f2:1e:e2:fb:22:74:22:d0:
e4:e7:19:e1:b0:3d:94:6f:af:b3:06:03:39:73:64:
bf:65:42:4c:ef:42:cb:1b:bf:80:88:64:af:03:ff:
1c:42:07:64:ef:55:c5:f4:d1:7b:34:43:47:c9:14:
cd:00:61:d0:24:ea:7a:e2:3a:85:d5:f0:13:13:7a:
a4:1b:51:54:4d:00:2a:86:25:a8:3a:50:c7:90:55:
4f:87:0a:24:c0:7b:78:64:b0:7f:4d:e3:20:a2:65:
e6:50:1f:58:dd:e9:49:df:09:a6:f2:4a:c2:5b:9d:
51:b6:0f:84:4b:7c:6b:a7:d9:83:46:8c:eb:2d:79:
de:a9:d9:b8:fa:58:6a:6d:a4:bf:49:81:62:d1:9d:
8f:f3:f7:ad:61:86:16:d2:da:db:da:67:2e:7e:43:
65:27:ec:44:8a:c3:04:83:9f:1d:7a:78:9d:41:b3:
fc:7a:36:18:56:05:37:e9:c4:0b:d2:32:e3:88:d3:
73:23:35:e2:f2:06:54:87:54:be:76:43:55:8d:a6:
74:cd:e5:e6:81:5f:26:f6:68:d2:37:7c:a5:5e:60:
d6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:9A:58:2E:B9:C1:1C:10:D5:55:E7:34:9F:C6:EC:09:C9:18:EE:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a4c9fc1e-0d7d-3b3c-8443-64e1e8832d3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
136.42.24.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:43:29:e3:a3:93:1e:03:a3:76:0f:07:ad:e3:a7:29:16:a1:
e4:72:7c:71:8f:65:c6:64:f4:0d:01:bf:37:b8:3e:e0:b3:2f:
42:43:4a:67:bd:f1:1a:c6:c2:07:d2:34:3f:63:55:76:f2:0d:
09:31:72:23:72:96:3c:b0:62:95:e6:4e:19:17:bc:81:c0:59:
03:5e:2e:cd:75:84:c3:3a:97:3c:e2:d2:b5:2c:30:86:f2:23:
1f:c6:af:67:bb:d2:90:7e:b5:7b:d6:9a:1a:e9:3c:9e:0c:1e:
ec:6b:6a:49:cd:63:cb:b6:7e:a3:db:12:dd:c1:ef:5d:d6:9e:
03:8e:10:9b:d7:8c:a7:52:83:61:8a:a1:5e:e8:e7:c9:9a:3b:
4d:a1:4b:d7:8b:97:b7:26:18:c0:02:d0:07:da:7d:7e:2d:fa:
d2:33:76:d8:28:52:91:1f:83:16:3f:51:e3:e0:ed:68:b2:3c:
c1:c0:fe:7f:00:f8:95:61:23:d0:e1:1d:40:9a:65:bc:a2:89:
70:1c:81:d8:ec:88:62:5d:38:2c:c5:12:b5:c2:f5:89:62:7c:
6b:13:4c:17:32:14:2b:17:d1:30:cb:a9:aa:70:41:88:74:de:
14:87:d7:1e:16:f4:20:e8:5f:45:43:05:40:03:87:e4:2b:ec:
68:d7:2e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:22:33 2025 by rpki-client