Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/72af0589-5060-3a98-9b53-ea7be26f3c65.roa
File: 72af0589-5060-3a98-9b53-ea7be26f3c65.roa (raw, json)
Hash identifier: rbNGmDfTqm8vMjD0BCSbGvQp73LvbzaKoc0c8ykEHd0=
Subject key identifier: FE:34:26:65:76:F1:29:43:AE:A0:13:E6:CD:FB:AA:E7:8C:CC:0E:51
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F432858498339CE70A2A86D6D4D0AA600
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/72af0589-5060-3a98-9b53-ea7be26f3c65.roa
Signing time: Sun 13 Apr 2025 13:01:01 +0000
ROA not before: Sun 13 Apr 2025 13:01:01 +0000
ROA not after: Sat 12 Jul 2025 13:01:01 +0000
asID: 16591
IP address blocks: 136.35.208.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:83:39:ce:70:a2:a8:6d:6d:4d:0a:a6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: Apr 13 13:01:01 2025 GMT
Not After : Jul 12 13:01:01 2025 GMT
Subject: CN=d9e0270a-8064-45c1-96f6-f534a15efb8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0b:cb:80:bc:56:73:92:f0:1b:4e:1e:51:32:
ed:97:bf:a3:32:35:bc:f8:c3:1a:20:95:50:81:34:
40:25:b5:de:c8:16:bf:13:3a:ad:2c:59:ea:ee:08:
7b:c4:fb:ec:b7:34:a1:61:0e:79:67:8e:c1:c4:6c:
55:46:7a:77:5a:e9:66:d2:cd:d2:96:82:46:f0:c7:
c8:a7:5d:01:1d:40:29:32:53:21:a5:15:5c:a1:27:
e4:12:a0:25:03:78:b2:34:eb:63:ba:f2:a2:35:99:
ac:3f:58:db:e8:b6:34:6a:f6:82:c3:10:b9:79:cc:
52:c9:89:60:16:32:f8:9e:dc:b2:3c:33:7e:e9:88:
cf:2b:35:99:8d:26:0b:60:f9:54:e1:ec:9f:a0:31:
f8:f1:dd:9a:a1:e5:f4:4b:44:fd:c8:07:78:e4:a7:
78:4b:b7:28:a1:e1:7e:69:18:1e:41:cc:5c:58:6b:
33:ee:3e:c1:31:2b:bf:9d:90:0d:01:fa:dd:b1:4c:
30:13:a0:21:a5:2f:8e:26:ab:b3:d9:79:4f:df:e4:
c6:03:c3:54:53:c9:84:8f:2f:8b:ab:9a:7b:07:9e:
64:3d:c7:61:8a:51:c4:6b:1b:d1:a9:1f:31:e9:e0:
37:29:37:c4:a4:fe:08:57:ab:ae:cd:f4:29:5e:c5:
66:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:34:26:65:76:F1:29:43:AE:A0:13:E6:CD:FB:AA:E7:8C:CC:0E:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/72af0589-5060-3a98-9b53-ea7be26f3c65.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
136.35.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:6f:a6:36:d8:79:46:a6:61:cd:43:2f:b3:92:5b:a4:8d:ce:
ec:03:c3:fa:fb:fa:d7:df:ba:80:89:8c:72:bc:1d:84:8e:ee:
f1:5d:d3:d4:b2:89:88:a8:38:b4:dd:e5:0a:a6:bd:ab:36:b5:
57:ae:d3:40:2f:41:8c:61:f6:26:e2:31:4a:90:b7:dc:10:d2:
20:da:eb:6e:10:76:f1:a3:b2:75:27:6e:30:f1:65:17:3f:d7:
cc:25:e5:68:c2:21:61:5d:e9:4d:a1:5d:55:78:74:da:ed:fe:
ce:5d:89:a0:05:d2:ac:b7:e0:2f:04:f7:ba:ae:75:2a:17:a8:
da:6b:7e:96:8b:6e:f1:ae:39:1b:c1:3a:d9:74:b4:f4:ee:e6:
d1:ae:5e:27:b3:00:53:15:dd:74:3f:d9:ff:2d:be:0d:9b:24:
f2:f6:72:96:5e:69:75:4e:f3:f4:83:c3:53:96:da:38:96:aa:
af:ec:c9:65:d3:99:2c:20:06:2e:16:cf:af:ed:d6:64:23:9d:
23:57:50:7d:c3:d5:0c:fb:f0:42:eb:79:27:49:b5:8e:84:c1:
ec:c9:51:88:30:b7:e1:88:b1:90:72:0d:74:d5:19:ce:c1:57:
4a:7c:f6:1a:28:d9:f0:b5:e8:e0:05:c5:7f:ba:a0:f4:50:00:
f4:18:11:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:39 2025 by rpki-client on console.sobornost.net