Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a4c9fc1e-0d7d-3b3c-8443-64e1e8832d3b.roa
File: a4c9fc1e-0d7d-3b3c-8443-64e1e8832d3b.roa (raw, json)
Hash identifier: X/VPI34ejZOp+kKA+xcNHUfGbPIOK1SvUrZvC64c9/Y=
Subject key identifier: FF:82:A9:86:8C:79:18:64:B5:4A:CD:49:23:E2:87:5E:E2:43:C0:D3
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F432858498339D9494F8BA9E57E23C380
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a4c9fc1e-0d7d-3b3c-8443-64e1e8832d3b.roa
Signing time: Sun 13 Apr 2025 13:01:01 +0000
ROA not before: Sun 13 Apr 2025 13:01:01 +0000
ROA not after: Sat 12 Jul 2025 13:01:01 +0000
asID: 16591
IP address blocks: 136.42.24.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:83:39:d9:49:4f:8b:a9:e5:7e:23:c3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: Apr 13 13:01:01 2025 GMT
Not After : Jul 12 13:01:01 2025 GMT
Subject: CN=503afec0-e454-4e5d-9091-3d4ed1f3f7d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5b:c3:b3:58:3b:a8:6a:8d:db:30:a1:2c:c8:
69:8c:17:64:5d:d9:b2:54:9a:d4:c4:24:89:7d:d4:
1c:b8:86:2a:cc:73:a3:f7:5a:5f:5a:8a:6a:cc:d3:
10:f9:dc:b8:89:c1:70:39:33:f5:a6:16:ae:53:72:
53:a6:75:63:57:53:37:29:6c:f7:f8:76:7c:8e:d7:
91:46:ea:3c:12:06:81:3a:97:a3:ae:e1:cb:e3:af:
c6:f1:00:c3:13:98:0d:28:95:2b:3e:52:75:66:ac:
d2:cd:26:41:26:67:7d:31:eb:99:d5:81:0d:6f:78:
cc:dd:03:e5:c3:64:9f:cf:47:ee:80:c1:0a:3b:1b:
3b:a1:dc:65:3f:e4:56:9c:d1:24:c5:e8:e3:e0:92:
de:f1:3e:27:82:11:e4:f1:05:e9:09:11:8c:d6:42:
fe:5e:9f:7d:57:5f:c6:1d:7c:f5:f2:cc:f7:4c:1a:
69:04:79:bc:f2:25:e2:29:e6:31:26:c7:17:bc:6f:
9e:16:e7:9f:cd:8b:35:2f:98:9f:24:01:1b:a9:5f:
ff:05:ae:e5:6b:dc:ae:60:f9:3e:5f:27:e3:65:f2:
81:08:9f:64:cc:c1:fa:60:a5:01:08:62:ed:34:c4:
ff:9a:84:8f:ca:92:05:a9:71:cb:09:d2:bd:ca:37:
e0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:82:A9:86:8C:79:18:64:B5:4A:CD:49:23:E2:87:5E:E2:43:C0:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a4c9fc1e-0d7d-3b3c-8443-64e1e8832d3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
136.42.24.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:4a:0d:fb:b5:17:0d:24:1b:23:7a:84:81:20:ac:9c:73:44:
b1:9e:38:b4:55:21:a4:b5:b4:a9:f9:ed:8e:f2:a1:43:46:22:
2b:3b:eb:a0:11:24:59:03:89:e4:bf:85:52:e2:c4:d0:fa:46:
49:9f:dd:6c:4a:e9:52:15:b9:d3:9b:a7:dc:57:7b:1d:1d:f2:
78:07:2e:90:5e:68:de:dc:c6:77:0a:33:79:56:34:ca:8f:2a:
59:37:74:f5:43:7b:8f:28:c9:84:e6:4e:03:89:58:14:b3:ce:
18:78:17:3c:e6:9f:dd:b9:c1:8a:2a:2e:8f:a8:3f:63:16:dc:
d5:8d:53:f6:dc:a7:ca:ad:1c:fa:0e:86:20:c4:39:69:04:a0:
4f:56:34:60:a2:89:26:73:34:c2:10:47:77:c1:00:59:20:10:
d6:e8:7b:1a:16:e9:b5:db:a1:cf:90:43:40:6b:b2:cc:59:29:
65:a1:bc:95:a0:e6:f1:47:58:38:bb:cd:be:b9:93:34:1e:6f:
9c:30:c8:8b:6b:57:26:2a:7f:f4:d6:ca:d5:eb:f2:6a:91:81:
0d:83:9e:ab:4c:6d:50:40:d2:bf:34:9c:2c:05:61:85:8f:8f:
a1:6e:ba:ee:72:3d:8a:8a:c7:b4:8e:5a:d1:27:5c:54:ac:d8:
29:f7:44:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:39 2025 by rpki-client on console.sobornost.net