Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a99c9c6b-8ce8-31f4-a448-3c740e27d48a.roa
File: a99c9c6b-8ce8-31f4-a448-3c740e27d48a.roa (raw, json)
Hash identifier: 5GQjG3Y4YltTJ7MmKxBahU3w399sZG+bDz5HX5fP6AM=
Subject key identifier: A2:6D:A5:8A:99:AC:11:C1:F4:1B:7E:D2:08:5F:62:5C:2A:B6:1D:A0
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F432858498339D74EF7148828056DDBC0
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a99c9c6b-8ce8-31f4-a448-3c740e27d48a.roa
Signing time: Sun 13 Apr 2025 13:01:01 +0000
ROA not before: Sun 13 Apr 2025 13:01:01 +0000
ROA not after: Sat 12 Jul 2025 13:01:01 +0000
asID: 16591
IP address blocks: 136.34.112.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:83:39:d7:4e:f7:14:88:28:05:6d:db:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: Apr 13 13:01:01 2025 GMT
Not After : Jul 12 13:01:01 2025 GMT
Subject: CN=eca48bf1-4e2b-449c-bca5-d92553def1eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:cf:72:90:6c:e8:88:2c:5e:24:0c:7b:74:59:
01:d9:3e:cd:d8:d6:db:a1:7f:2b:9b:1e:eb:c6:23:
a4:76:0c:ad:c0:04:66:77:ac:a3:02:57:77:55:41:
e7:f2:e2:bf:e6:84:78:32:3f:a4:be:31:2e:65:76:
9c:a2:0e:a4:7e:51:c4:97:34:ad:ed:d8:09:d1:2b:
7e:a6:18:50:da:0b:bb:62:07:c8:3c:3f:35:e6:97:
cc:7d:19:df:58:d6:30:d6:b2:53:17:6d:d6:16:c4:
57:e0:de:92:d7:5b:5e:5f:9b:42:20:8a:99:37:2d:
42:47:3c:05:c8:f0:11:0d:d9:4e:b7:49:92:6a:be:
15:29:5d:1a:b0:6d:df:cd:20:a9:06:fc:29:3e:e3:
f6:59:64:c1:a7:0f:e3:46:27:ec:ac:47:15:86:f3:
6a:7d:8a:30:b3:87:a9:40:22:f4:50:8f:67:d5:9c:
d7:e7:fd:20:ac:3c:bd:97:e3:80:c9:71:17:3e:ab:
5d:9d:50:0a:44:9e:8d:c8:00:25:5d:eb:74:f3:ae:
79:c4:6b:37:10:50:a6:53:82:13:c4:7a:56:e8:e1:
b0:d8:4e:4f:4f:b9:2b:08:5b:fe:bd:5f:61:be:74:
f7:7a:56:97:e3:e3:9f:db:2e:60:2b:0c:d7:26:67:
b6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:6D:A5:8A:99:AC:11:C1:F4:1B:7E:D2:08:5F:62:5C:2A:B6:1D:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a99c9c6b-8ce8-31f4-a448-3c740e27d48a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
136.34.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:06:a2:a4:7e:e7:97:dd:0a:97:9d:7c:0f:33:e3:85:e5:12:
28:6b:15:c6:c7:10:0c:95:86:ab:32:3b:c2:d0:cb:d8:89:12:
2a:45:ce:53:de:d6:28:40:c8:b4:2d:1c:d9:81:c3:51:cc:ff:
d8:ac:43:1c:be:c6:e7:80:5d:92:f9:59:9e:b3:42:3b:09:15:
f3:3d:5e:71:74:46:2c:cf:6a:b4:be:b5:e7:86:36:82:61:d9:
ae:77:d2:c2:da:f2:95:80:60:76:05:a5:5d:7e:57:93:04:a4:
87:1c:bb:ff:22:49:1e:1f:af:d3:fe:3f:5f:e2:b9:d6:29:8f:
b5:6f:6e:62:0d:44:a2:fc:4a:af:50:2e:74:e0:15:11:00:90:
1c:02:1b:ce:7c:85:91:6f:68:dd:71:cf:97:31:04:22:31:39:
7f:57:4c:c7:ea:ea:bd:9f:b8:94:60:71:78:7c:41:fd:9f:89:
50:6e:06:12:1d:59:e7:98:63:9e:21:26:54:73:42:e9:37:c2:
71:3d:2d:33:a0:c6:a2:4d:d8:b2:d4:a1:38:fa:f8:e1:69:cc:
13:d8:1d:e1:c3:ca:17:df:9a:27:9e:4b:39:fb:3a:a4:8e:39:
19:52:fc:be:18:53:6d:e5:a9:31:28:4c:cf:f7:b7:ef:13:70:
cd:2b:2d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:39 2025 by rpki-client on console.sobornost.net