Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f89fd7d9-7938-3cf9-a6cc-fd8d7e9b566a.roa
File: f89fd7d9-7938-3cf9-a6cc-fd8d7e9b566a.roa (raw, json)
Hash identifier: fRkbJCRVwfpiUXva2MGRPbDkl4xcgBwv8wAjzVztOI0=
Subject key identifier: A2:EB:EB:5C:08:29:41:BA:D3:23:E9:F7:04:93:06:37:23:F4:13:2B
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F43285848A318A30AEDE183F306DA1100
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f89fd7d9-7938-3cf9-a6cc-fd8d7e9b566a.roa
Signing time: Thu 23 Jan 2025 06:13:17 +0000
ROA not before: Thu 23 Jan 2025 06:13:17 +0000
ROA not after: Wed 23 Apr 2025 05:13:17 +0000
asID: 16591
IP address blocks: 136.35.224.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a3:18:a3:0a:ed:e1:83:f3:06:da:11:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: Jan 23 06:13:17 2025 GMT
Not After : Apr 23 05:13:17 2025 GMT
Subject: CN=8b2a0374-199f-4b5b-b56d-6e0f27842e48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:15:21:c8:8f:46:87:06:e2:43:50:29:7b:d2:
80:46:a4:78:29:f2:2e:d4:46:24:b8:9b:41:26:42:
9b:56:6a:46:99:72:d0:d3:87:82:7d:79:2d:fe:50:
a5:b5:51:19:29:17:6c:9b:3b:17:26:fc:1e:74:4e:
90:75:98:0c:fb:e1:89:06:16:b0:77:7b:a2:a2:52:
2d:16:86:7d:17:a4:61:f8:97:d0:79:86:0d:f8:14:
0f:74:08:6a:21:8e:82:ee:27:c3:40:e6:0e:f2:87:
96:1c:3c:69:89:d2:76:d6:f9:cd:51:93:e3:95:88:
55:11:6b:ea:ac:5a:5c:36:57:69:50:e4:0d:7f:6c:
24:64:e5:fa:a0:d2:2a:0e:ff:6a:bc:52:d4:01:ef:
a5:15:1c:e1:ac:e6:39:4e:6e:29:9d:46:02:71:bd:
58:4c:cd:b6:34:b8:fb:e3:1a:65:8f:62:ee:3b:d1:
b3:20:af:c8:4c:9d:00:6a:3e:3d:5f:5b:29:5c:84:
71:22:45:ec:4d:8f:e3:55:89:e1:4a:39:de:24:74:
ad:c4:3e:cf:e5:83:48:ac:ec:ab:38:91:6e:ab:f0:
0c:c0:35:27:57:e4:56:02:7c:a8:7f:22:e0:75:b9:
97:2e:bf:77:94:71:3f:f3:3c:35:9d:10:ac:62:1b:
43:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:EB:EB:5C:08:29:41:BA:D3:23:E9:F7:04:93:06:37:23:F4:13:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f89fd7d9-7938-3cf9-a6cc-fd8d7e9b566a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
136.35.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:db:61:14:a9:91:0d:91:38:a8:fd:34:96:e1:f3:f0:9a:12:
26:9d:b7:2e:ba:2a:85:2b:0b:f0:6f:16:5b:f4:d8:d5:39:de:
fc:69:a7:b9:3a:3f:71:b6:57:b7:09:a4:20:5a:d2:ad:fe:ef:
8e:60:60:e3:92:7e:5f:8f:a9:1e:75:23:61:48:ae:9c:58:12:
34:69:e3:b6:fe:ec:96:60:e2:f1:9f:ff:05:42:e9:37:ff:f4:
55:a8:56:1e:97:f8:61:83:20:0d:34:f7:86:16:55:3e:32:e4:
b2:24:65:bd:d3:7b:08:ef:aa:39:37:db:42:cb:7d:4e:1b:d6:
11:9e:52:2c:cc:0a:4a:52:48:dc:26:ba:ff:62:e6:9f:ef:f8:
56:c4:94:3c:39:77:47:0d:3d:68:9b:d8:ea:1c:9d:e0:8e:34:
81:47:3f:a5:38:ad:a7:a7:0c:95:29:95:33:d2:27:5b:e0:1e:
c0:8b:a3:9b:17:74:58:3c:a4:19:99:31:0f:ee:25:82:0d:16:
12:a0:72:ff:06:a9:3f:a4:e9:e9:59:40:6c:4f:62:a1:71:c5:
b7:0d:ff:d0:04:45:32:4b:fd:08:31:5d:3b:54:8b:78:0e:6f:
33:e0:3a:ae:3c:bb:d2:4d:3b:20:67:19:b0:60:98:8f:b8:ae:
c7:35:ae:08
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEijGKMK7eGD8wbaEQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh
MzRlMB4XDTI1MDEyMzA2MTMxN1oXDTI1MDQyMzA1MTMxN1owLzEtMCsGA1UEAxMk
OGIyYTAzNzQtMTk5Zi00YjViLWI1NmQtNmUwZjI3ODQyZTQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxUhyI9GhwbiQ1Ape9KARqR4KfIu1EYkuJtB
JkKbVmpGmXLQ04eCfXkt/lCltVEZKRdsmzsXJvwedE6QdZgM++GJBhawd3uiolIt
FoZ9F6Rh+JfQeYYN+BQPdAhqIY6C7ifDQOYO8oeWHDxpidJ21vnNUZPjlYhVEWvq
rFpcNldpUOQNf2wkZOX6oNIqDv9qvFLUAe+lFRzhrOY5Tm4pnUYCcb1YTM22NLj7
4xplj2LuO9GzIK/ITJ0Aaj49X1spXIRxIkXsTY/jVYnhSjneJHStxD7P5YNIrOyr
OJFuq/AMwDUnV+RWAnyofyLgdbmXLr93lHE/8zw1nRCsYhtDLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKLr61wIKUG60yPp9wSTBjcj9BMrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2
NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZjg5ZmQ3ZDktNzkzOC0z
Y2Y5LWE2Y2MtZmQ4ZDdlOWI1NjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj
MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5
YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0
MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCPgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACHbYRSpkQ2ROKj9NJbh8/CaEiadty66KoUrC/BvFlv02NU53vxpp7k6
P3G2V7cJpCBa0q3+745gYOOSfl+PqR51I2FIrpxYEjRp47b+7JZg4vGf/wVC6Tf/
9FWoVh6X+GGDIA0094YWVT4y5LIkZb3Tewjvqjk320LLfU4b1hGeUizMCkpSSNwm
uv9i5p/v+FbElDw5d0cNPWib2OocneCONIFHP6U4raenDJUplTPSJ1vgHsCLo5sX
dFg8pBmZMQ/uJYINFhKgcv8GqT+k6elZQGxPYqFxxbcN/9AERTJL/QgxXTtUi3gO
bzPgOq48u9JNOyBnGbBgmI+4rsc1rgg=
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:22:49 2025 by rpki-client