Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/4b899db3-55d6-3a3c-8b71-7fcce45f09b7.roa
File: 4b899db3-55d6-3a3c-8b71-7fcce45f09b7.roa (raw, json)
Hash identifier: Poy5Zyy/ZtV/Gh6e18O3/bcVQG6AmdlseuDC65/GpoA=
Subject key identifier: 09:97:65:2F:6B:5D:C4:A5:F2:07:7F:A4:CF:FD:F2:27:29:8B:0B:77
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F432858498339CEEBB70AA635B09FBA00
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/4b899db3-55d6-3a3c-8b71-7fcce45f09b7.roa
Signing time: Sun 13 Apr 2025 13:01:01 +0000
ROA not before: Sun 13 Apr 2025 13:01:01 +0000
ROA not after: Sat 12 Jul 2025 13:01:01 +0000
asID: 16591
IP address blocks: 136.61.208.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:83:39:ce:eb:b7:0a:a6:35:b0:9f:ba:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: Apr 13 13:01:01 2025 GMT
Not After : Jul 12 13:01:01 2025 GMT
Subject: CN=685294bd-8ef1-4cb5-89eb-7c75f25c5f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:31:fc:ae:95:90:8f:0c:14:62:b2:a9:b3:59:
c0:64:3e:8a:4d:b4:6e:8f:70:9d:9d:62:a3:3a:14:
66:6d:bd:07:65:be:3a:d8:d6:dd:05:d2:4f:95:6c:
5f:ad:46:4f:03:75:71:53:6a:a9:3c:d0:39:b7:81:
75:6c:33:e2:e1:7b:90:61:19:d9:39:37:eb:c1:db:
3a:f9:87:9b:13:f3:23:d4:f2:f3:8a:c1:9e:28:24:
21:ed:a2:d5:c2:21:75:f7:d4:46:b9:06:6f:ea:ad:
ef:db:44:1a:cb:08:1c:8d:94:71:65:bf:46:5b:93:
4f:a8:f9:76:cb:ee:5d:f2:59:de:84:67:41:91:8b:
65:db:ae:9f:27:0a:a1:50:70:19:5d:fa:99:52:52:
27:83:47:a7:f4:6c:f5:a8:a8:df:f0:43:8c:68:92:
63:24:6f:cf:e5:b3:c7:e5:17:60:05:9b:8a:a2:92:
d9:f9:e2:5e:85:db:55:76:2e:67:aa:14:0c:1f:da:
6a:2e:6b:b4:f1:28:02:06:37:0a:86:ff:2e:d9:22:
a0:96:42:dd:9c:e0:89:6d:6e:c3:0d:68:25:fa:63:
96:b7:05:ff:1a:f1:fb:50:a7:b2:25:0f:1d:07:18:
01:0c:14:d9:e2:5c:f5:3e:f0:66:31:93:e0:4e:15:
31:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:97:65:2F:6B:5D:C4:A5:F2:07:7F:A4:CF:FD:F2:27:29:8B:0B:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/4b899db3-55d6-3a3c-8b71-7fcce45f09b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
136.61.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:5a:c5:83:b6:6a:c0:60:f7:95:3f:fd:20:3f:35:04:3d:cf:
83:e3:bc:87:77:8b:14:76:f4:e5:bf:f6:c1:ae:5b:df:7d:52:
51:7c:0f:e5:4d:77:4a:3e:d8:24:de:82:84:c9:6b:1b:5f:bf:
6f:c4:9f:78:03:08:ca:a5:f0:4a:d0:70:66:6c:3d:90:54:61:
78:03:6a:48:0a:ef:50:81:69:55:76:fe:7b:42:4a:81:95:57:
72:d4:f0:53:0d:47:d1:69:9a:56:e4:62:1a:eb:82:17:12:94:
53:e4:d1:71:38:1b:a7:cb:55:3a:a5:71:91:77:a8:80:4d:2e:
29:28:a0:d0:f1:a8:8d:2e:10:84:03:bf:10:f3:19:d7:87:92:
bf:d4:68:08:2a:74:3f:1d:40:4e:6b:04:52:5a:fd:af:70:a2:
1f:eb:84:29:05:fd:01:1b:b4:c3:b1:7b:37:c1:6b:81:9b:5b:
ba:df:ff:c1:b4:4a:d7:4a:17:7c:ee:4e:ed:60:5e:a4:34:80:
7e:03:6d:f4:a9:77:01:5b:a8:6a:b2:f3:54:90:aa:8d:ff:da:
20:0c:ef:e1:8e:75:19:39:7f:db:9c:8d:03:4d:f8:24:e1:66:
55:b5:1c:1d:73:66:a3:db:85:b1:7d:c5:49:82:c4:bb:69:7e:
d9:5c:5e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:39 2025 by rpki-client on console.sobornost.net