Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/72dda1b5-1896-3122-a9fd-3eadfa41596d.roa
File: 72dda1b5-1896-3122-a9fd-3eadfa41596d.roa (raw, json)
Hash identifier: 3qRnCd77gARnRxdnI3gTMs9shUMOz1hyLGwx8xlGHw4=
Subject key identifier: 4D:F8:C3:F4:5E:57:9D:B1:78:04:93:12:08:FC:E1:35:55:80:BA:BA
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F432858498339D8085E3136224FAD3C80
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/72dda1b5-1896-3122-a9fd-3eadfa41596d.roa
Signing time: Sun 13 Apr 2025 13:01:01 +0000
ROA not before: Sun 13 Apr 2025 13:01:01 +0000
ROA not after: Sat 12 Jul 2025 13:01:01 +0000
asID: 16591
IP address blocks: 136.34.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:83:39:d8:08:5e:31:36:22:4f:ad:3c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: Apr 13 13:01:01 2025 GMT
Not After : Jul 12 13:01:01 2025 GMT
Subject: CN=973df052-0433-404d-b043-b1bbc1a195a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:92:84:07:03:b9:91:55:28:7b:d6:ae:15:f6:
43:cc:40:db:6a:4b:f2:c3:24:7b:b0:a9:24:82:2b:
5d:8c:50:c4:78:c0:7c:50:a1:3d:3a:69:df:1a:1a:
ae:b1:27:09:ae:59:82:78:c5:61:fa:e6:56:cc:25:
8a:11:f3:6c:a6:1c:52:4e:89:56:04:30:85:2c:f4:
4f:2d:8a:af:af:4b:27:de:b0:09:9d:e1:a2:cd:31:
5e:82:ea:8b:38:1d:3c:6a:6e:94:b9:39:90:43:c0:
a8:03:1d:02:4d:ec:d5:fd:21:55:31:2b:a0:59:04:
0e:cf:20:7a:68:ef:fe:e8:8a:05:8c:eb:ca:97:2f:
3a:17:b7:5e:cd:33:d3:ed:22:dd:8f:4a:55:a3:7c:
3a:5f:9c:78:1f:ee:ca:f7:5f:d6:a9:cf:c3:9d:5c:
8c:94:8a:53:55:cf:2e:02:ee:d4:7e:d7:18:88:be:
08:ed:05:86:56:01:57:f2:5e:b9:c6:bd:07:96:e8:
f1:21:1e:bc:f3:3a:57:4c:e3:df:d7:a6:44:f4:c7:
48:2c:35:ce:ea:27:3b:0a:39:25:cc:cc:2b:c1:d8:
1f:fe:81:3c:26:c8:82:a0:3e:5e:b1:c6:7f:80:36:
99:1d:5d:58:70:0f:5c:f8:a3:f4:74:9e:d2:7c:53:
95:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F8:C3:F4:5E:57:9D:B1:78:04:93:12:08:FC:E1:35:55:80:BA:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/72dda1b5-1896-3122-a9fd-3eadfa41596d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
136.34.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:94:05:4c:38:5e:1e:8d:c0:bb:0d:01:18:72:a3:43:b0:c2:
f6:36:41:7d:f3:87:59:f7:b2:b1:1c:c1:f6:64:9b:26:78:f7:
51:6b:95:38:f2:10:dd:53:37:3a:1b:67:e2:ce:40:23:dd:55:
58:49:de:d3:20:07:d3:6f:df:f6:8e:34:c8:4b:a6:4e:ea:09:
85:77:63:56:9b:ee:70:9b:8e:f7:6c:cc:33:5c:b7:76:f2:6b:
5a:29:e3:c3:9c:5f:0d:a1:44:00:f0:cd:61:c8:6f:78:f6:55:
b4:c9:69:5d:d5:d1:12:6e:19:20:f6:3e:76:71:36:b2:e9:df:
43:9b:2a:2d:1d:66:54:6d:0d:55:f7:f6:15:4f:59:42:17:7a:
56:e4:8f:2a:be:b1:25:14:c3:69:94:e5:c8:af:a2:7e:16:e1:
57:5c:1e:d5:6c:7e:7c:de:fc:2f:67:6b:93:eb:5b:21:99:21:
a0:a1:ec:ec:80:3b:34:61:ba:01:9a:bf:8b:ba:9c:cb:54:75:
24:58:70:4a:83:7e:b9:d2:fa:b8:2a:d1:cf:02:06:b1:c6:29:
ab:b6:70:e2:3f:37:6d:72:45:1f:ae:89:e9:dd:ec:f3:cd:bb:
84:98:74:77:d2:f9:fc:00:78:03:91:c4:66:18:34:0b:4e:5a:
dd:16:0b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:39 2025 by rpki-client on console.sobornost.net