Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0be371a6-479e-3c51-a61d-3d40223861af.roa
File: 0be371a6-479e-3c51-a61d-3d40223861af.roa (raw, json)
Hash identifier: nd7hQitKB+UWtqeBdi7sJmXIj43yp3qEhjlJY5/DIXs=
Subject key identifier: BF:46:37:73:57:56:BD:0C:36:7E:0A:DF:E8:F5:12:FE:9B:41:99:27
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F432858498339D36F7199D4F973B6C8B0
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0be371a6-479e-3c51-a61d-3d40223861af.roa
Signing time: Sun 13 Apr 2025 13:01:01 +0000
ROA not before: Sun 13 Apr 2025 13:01:01 +0000
ROA not after: Sat 12 Jul 2025 13:01:01 +0000
asID: 16591
IP address blocks: 136.38.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:83:39:d3:6f:71:99:d4:f9:73:b6:c8:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: Apr 13 13:01:01 2025 GMT
Not After : Jul 12 13:01:01 2025 GMT
Subject: CN=2ad076bc-395a-4fc9-bef9-032912db4a2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:89:b5:71:ab:b2:d7:e0:a6:15:c5:51:71:61:
b9:ba:31:ad:13:ea:19:19:9c:aa:b3:87:ac:21:b4:
6a:3c:eb:90:ec:0c:a0:ac:fb:40:d0:2b:6e:0c:65:
ff:e7:34:0b:21:93:6b:d3:15:64:e3:55:4f:f3:d3:
62:c3:83:82:db:c4:bc:38:26:86:cb:7d:d8:cf:2e:
db:df:d8:f9:48:d2:24:c0:30:05:5d:e2:f4:f8:87:
e6:4f:27:62:4d:68:66:ad:1c:d2:4d:52:e0:a3:bb:
b7:25:b3:02:ef:70:f9:b6:68:51:dd:6d:f4:aa:13:
74:2b:b5:85:1c:bc:da:7e:c7:b3:b3:ca:21:96:f9:
37:fc:f3:29:29:b8:72:de:c6:91:f4:de:31:a8:4c:
29:07:3f:20:55:84:6d:88:3d:8b:1a:83:97:7d:d3:
a3:3f:d2:62:b6:5c:4f:e1:40:e8:e0:76:b2:53:ec:
44:aa:a1:87:ce:13:2a:a8:47:05:8e:bd:c5:50:9b:
47:e4:48:bd:46:44:e7:6b:9c:4b:dc:63:84:d5:f5:
4b:2a:7e:0d:b8:44:b7:1c:2e:5f:11:b3:62:5a:99:
b4:bb:a5:0a:20:36:29:00:5a:ad:24:02:65:27:ff:
9f:66:bb:1f:4e:93:51:07:98:ad:fb:73:d7:ab:71:
da:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:46:37:73:57:56:BD:0C:36:7E:0A:DF:E8:F5:12:FE:9B:41:99:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0be371a6-479e-3c51-a61d-3d40223861af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
136.38.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:fa:4d:56:d2:c6:81:75:d4:61:57:2f:be:71:eb:99:5c:aa:
55:69:08:71:7b:41:2f:62:32:76:bd:0c:cb:6a:a5:b2:85:0e:
8a:48:5b:12:16:a6:84:db:0f:89:2b:6a:e6:ef:c1:54:a3:75:
32:44:7c:a8:b5:0c:dd:6c:0a:e2:8a:ea:96:2a:89:36:87:79:
64:53:9f:04:f5:09:74:57:9d:56:a5:41:56:7f:6e:a8:0a:9f:
bf:ed:51:89:87:0e:03:9f:23:32:b6:60:d9:9b:68:f3:0f:bb:
73:df:62:fb:52:f5:1a:a5:be:0b:16:1f:aa:52:57:6e:1b:95:
1e:b7:fb:a7:99:38:ee:94:95:2e:95:76:9e:63:12:fe:c4:b7:
25:4d:74:b0:66:53:d6:65:99:dd:a4:2e:e6:9c:73:66:a8:ce:
05:73:4e:56:8a:92:79:8b:52:61:a3:e3:df:d7:d4:1f:00:7b:
a9:3c:87:54:7e:fd:ad:f0:56:a3:9a:e9:07:76:cc:c2:13:03:
8a:1f:33:af:b7:ce:ae:73:b7:5c:f8:60:1d:8f:d8:bd:10:f0:
c1:ed:1a:e7:c5:91:fe:4e:40:60:8a:9e:a9:14:d6:1c:be:bd:
ea:22:8c:b3:e0:fd:3a:08:ed:67:74:5c:da:53:74:57:d2:ef:
53:17:2e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:38 2025 by rpki-client on console.sobornost.net