Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/642928de-dbc1-326a-9a3b-fc9fc9cbd139.roa
File: 642928de-dbc1-326a-9a3b-fc9fc9cbd139.roa (raw, json)
Hash identifier: nSVlPuhfLOgZjvMllatMaGfL9L690IXCAVfRjPRoVFQ=
Subject key identifier: 61:C6:BE:3D:6B:79:FD:03:1E:DE:6A:08:72:BB:14:13:DA:34:DF:13
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F432858498339D6A5D2D9BFF63385D440
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/642928de-dbc1-326a-9a3b-fc9fc9cbd139.roa
Signing time: Sun 13 Apr 2025 13:01:01 +0000
ROA not before: Sun 13 Apr 2025 13:01:01 +0000
ROA not after: Sat 12 Jul 2025 13:01:01 +0000
asID: 16591
IP address blocks: 136.35.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:83:39:d6:a5:d2:d9:bf:f6:33:85:d4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: Apr 13 13:01:01 2025 GMT
Not After : Jul 12 13:01:01 2025 GMT
Subject: CN=6b7824e9-9f0b-424d-ac24-22626c70659e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:be:ca:28:a1:59:28:fe:71:cd:51:cc:a7:d8:
a8:dd:57:f9:6b:db:70:83:b7:8b:59:30:a2:bf:39:
7d:7d:01:71:9f:a6:3b:4c:b6:50:48:2d:8e:58:c3:
16:64:ee:8b:b5:f3:9c:5a:42:52:c8:c8:48:32:12:
cc:f6:f7:0f:3c:b4:92:ca:25:06:6f:95:80:45:8c:
aa:b0:f1:e8:92:35:72:37:fd:bc:a1:60:5c:27:24:
9f:a4:3f:e3:c1:9b:4b:6b:a7:5b:52:1b:56:86:15:
a4:b1:45:7b:67:02:6e:5e:7e:d0:67:7f:e8:50:d7:
9e:31:a9:df:1d:1a:3c:a0:27:7b:cd:b8:2a:74:8c:
2e:0d:56:2e:71:c5:77:97:35:95:0f:2f:b6:8c:be:
25:60:e8:a1:68:6d:0a:66:08:9e:9f:23:f6:81:cc:
75:0f:39:3e:f0:b9:e8:99:4b:b7:89:f7:d6:f9:71:
38:08:5a:a8:18:d5:13:e7:78:cd:eb:de:f3:aa:53:
7c:0c:66:ad:27:d3:55:df:c4:8b:58:72:f2:06:eb:
66:c4:4a:8c:98:87:7e:b7:15:2a:59:7c:6b:38:23:
26:39:cd:21:ed:74:93:66:4f:8a:8d:a2:b1:8a:f3:
8b:14:59:36:c9:c4:0b:37:ef:1b:16:09:80:d3:76:
33:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:C6:BE:3D:6B:79:FD:03:1E:DE:6A:08:72:BB:14:13:DA:34:DF:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/642928de-dbc1-326a-9a3b-fc9fc9cbd139.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
136.35.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:9f:2a:1a:a5:58:2a:e4:5c:c8:4f:37:e1:b6:fe:09:0b:7b:
10:cf:cb:12:e3:93:82:a2:e7:b9:9a:c4:81:0e:ec:f4:00:26:
92:6f:2e:fd:0f:03:9f:b2:e5:21:71:c7:cc:ce:bf:77:8b:86:
b0:58:81:75:5f:e2:3f:ff:6f:1a:b2:d1:11:33:5e:a2:a7:6e:
82:61:49:07:66:33:93:47:a9:fb:2f:49:af:16:45:70:fe:a1:
21:73:78:84:c2:7b:d3:cb:ad:85:6b:d0:95:5a:d6:a2:a2:e4:
be:ae:46:cb:91:d6:08:94:31:fd:9a:00:17:c3:89:52:57:1b:
cb:c7:bf:ad:1c:d4:9a:b6:3c:1f:20:67:ef:86:1d:e9:2b:9b:
9e:9e:b4:09:67:f7:7e:62:62:bd:e9:60:a8:c8:ce:4d:8e:20:
df:b2:ff:71:2f:a9:72:ce:d7:fe:5a:3e:a3:e3:5a:2f:06:ef:
02:67:65:55:a9:04:a7:91:5d:33:cf:10:56:17:55:70:1a:52:
ca:3e:c9:50:06:92:a9:bc:9e:9b:49:f0:0e:ec:b7:0d:16:82:
21:86:43:21:9c:90:4a:8c:59:35:44:06:f9:36:01:db:61:7b:
58:97:cb:85:37:30:39:13:98:33:1d:80:75:41:d8:f9:8f:93:
53:7e:8e:8c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOdal0tm/9jOF1EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh
MzRlMB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk
NmI3ODI0ZTktOWYwYi00MjRkLWFjMjQtMjI2MjZjNzA2NTllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuL7KKKFZKP5xzVHMp9io3Vf5a9twg7eLWTCi
vzl9fQFxn6Y7TLZQSC2OWMMWZO6LtfOcWkJSyMhIMhLM9vcPPLSSyiUGb5WARYyq
sPHokjVyN/28oWBcJySfpD/jwZtLa6dbUhtWhhWksUV7ZwJuXn7QZ3/oUNeeManf
HRo8oCd7zbgqdIwuDVYuccV3lzWVDy+2jL4lYOihaG0KZgienyP2gcx1Dzk+8Lno
mUu3iffW+XE4CFqoGNUT53jN697zqlN8DGatJ9NV38SLWHLyButmxEqMmId+txUq
WXxrOCMmOc0h7XSTZk+KjaKxivOLFFk2ycQLN+8bFgmA03YzHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGHGvj1ref0DHt5qCHK7FBPaNN8TMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2
NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNjQyOTI4ZGUtZGJjMS0z
MjZhLTlhM2ItZmM5ZmM5Y2JkMTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj
MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5
YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0
MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCPwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ2fKhqlWCrkXMhPN+G2/gkLexDPyxLjk4Ki57maxIEO7PQAJpJvLv0P
A5+y5SFxx8zOv3eLhrBYgXVf4j//bxqy0REzXqKnboJhSQdmM5NHqfsvSa8WRXD+
oSFzeITCe9PLrYVr0JVa1qKi5L6uRsuR1giUMf2aABfDiVJXG8vHv60c1Jq2PB8g
Z++GHekrm56etAln935iYr3pYKjIzk2OIN+y/3EvqXLO1/5aPqPjWi8G7wJnZVWp
BKeRXTPPEFYXVXAaUso+yVAGkqm8nptJ8A7stw0WgiGGQyGckEqMWTVEBvk2Adth
e1iXy4U3MDkTmDMdgHVB2PmPk1N+jow=
-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:39 2025 by rpki-client on console.sobornost.net