Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a052141e-2294-3f24-975e-757e7b2823c6.roa
File: a052141e-2294-3f24-975e-757e7b2823c6.roa (raw, json)
Hash identifier: W7UXB+eNzu6NjTYDuuKv849UP578Amd/Fs4iqagf9CI=
Subject key identifier: 12:C9:E4:C3:6C:71:34:A2:BA:81:13:AA:DD:E1:F5:B6:A3:98:72:25
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F432858498339CC739D74C13457B63E80
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a052141e-2294-3f24-975e-757e7b2823c6.roa
Signing time: Sun 13 Apr 2025 13:01:01 +0000
ROA not before: Sun 13 Apr 2025 13:01:01 +0000
ROA not after: Sat 12 Jul 2025 13:01:01 +0000
asID: 16591
IP address blocks: 136.37.0.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:83:39:cc:73:9d:74:c1:34:57:b6:3e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: Apr 13 13:01:01 2025 GMT
Not After : Jul 12 13:01:01 2025 GMT
Subject: CN=1d174970-9fd8-496a-a65b-2056d4c48a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b3:44:70:56:29:cf:f8:81:c0:05:d1:e3:fd:
67:20:0a:cc:86:3d:c9:0c:e4:71:2c:a9:48:7d:a5:
29:8f:88:53:8a:70:7d:9e:cb:da:e9:22:e2:3c:16:
b2:62:18:f5:46:ad:52:af:d7:80:d4:13:29:db:da:
a6:45:23:60:75:20:7e:f5:08:3e:51:57:f7:de:9e:
3f:80:3b:99:23:41:96:c6:f9:c1:5e:3d:83:18:55:
56:74:f7:d4:be:5d:a1:89:39:1c:ba:a4:9a:1e:27:
43:15:b0:29:d6:78:91:a0:45:b6:18:bb:79:41:8c:
39:a4:16:33:a1:c8:ce:f4:8d:14:c2:02:ea:b0:e6:
ac:f2:20:b3:b9:fa:e4:3c:7a:04:bc:38:d1:3c:5c:
37:45:59:66:82:51:10:90:cf:6a:f5:f7:13:c4:6f:
da:c5:cc:84:23:27:51:1c:70:9b:7e:31:12:33:8f:
f0:84:de:f6:f9:b8:62:75:7e:0e:25:69:ab:63:e9:
5e:15:a3:85:4d:c6:62:56:50:5c:0e:01:40:cf:cd:
9b:c2:75:13:6c:a7:43:99:29:a3:63:9d:b6:80:d5:
bd:22:a4:c8:e5:1c:9c:b7:5b:d3:f1:f9:f7:bd:38:
ae:cf:78:89:c7:68:dd:c4:b1:d4:71:06:4e:61:18:
d2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C9:E4:C3:6C:71:34:A2:BA:81:13:AA:DD:E1:F5:B6:A3:98:72:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a052141e-2294-3f24-975e-757e7b2823c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
136.37.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:e4:82:4e:3d:35:b5:8c:60:8f:99:f4:1d:82:e0:e1:33:65:
aa:a9:6b:8b:bc:ce:ea:a1:20:d9:ca:82:e6:e5:41:05:b6:62:
e5:d4:71:3f:24:7e:eb:a9:13:5a:df:21:54:46:c7:7f:dd:c1:
04:66:71:4d:78:b7:9c:6d:6e:c9:37:3b:86:b1:91:2d:24:0e:
68:8f:c8:93:a8:8a:6e:bb:80:01:52:0c:8a:4f:4b:d4:d0:3f:
09:f2:68:05:d3:84:e2:68:ad:c6:2a:10:4a:d4:79:17:d9:7d:
e7:10:9c:b5:8b:ff:e2:d9:56:8b:d6:9f:07:96:9a:91:9b:dc:
1c:16:70:9f:6b:88:10:94:91:66:ee:31:79:44:43:77:be:35:
f7:4e:98:3b:6d:5d:3b:d0:29:55:46:d0:a0:27:27:08:f6:7b:
6a:e9:6c:17:7d:d5:44:c5:9f:43:1e:76:3b:63:9f:46:af:9b:
aa:0d:61:bf:c9:8e:c3:16:0f:23:dd:31:02:67:21:e5:a3:38:
52:d0:24:9f:0e:1e:c2:46:4c:56:93:2a:44:b0:6d:a1:bb:aa:
e0:aa:72:f6:9c:d3:b7:7d:70:b1:13:2c:69:91:56:97:ae:03:
c1:d4:5f:5f:df:4e:39:02:53:01:a6:0f:f6:3c:03:f5:e3:e2:
7c:3a:15:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:39 2025 by rpki-client on console.sobornost.net