Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b748cc4c-b756-3a58-a5ef-2a205ba047e2.roa
File: b748cc4c-b756-3a58-a5ef-2a205ba047e2.roa (raw, json)
Hash identifier: gM1yMe20F1AvBl03cxANKjn7zjG/8p405MZj/gKOCXc=
Subject key identifier: 42:F7:0A:1A:68:81:2D:6A:8A:5C:E8:E2:87:D8:FD:68:78:A1:3B:23
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F432858498339D63D30FA35F3E10D4420
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b748cc4c-b756-3a58-a5ef-2a205ba047e2.roa
Signing time: Sun 13 Apr 2025 13:01:01 +0000
ROA not before: Sun 13 Apr 2025 13:01:01 +0000
ROA not after: Sat 12 Jul 2025 13:01:01 +0000
asID: 16591
IP address blocks: 136.32.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:83:39:d6:3d:30:fa:35:f3:e1:0d:44:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: Apr 13 13:01:01 2025 GMT
Not After : Jul 12 13:01:01 2025 GMT
Subject: CN=022d99e3-6b9a-4e8d-9204-33fe531e1173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:aa:a4:33:03:ec:a4:97:d4:43:8a:ff:70:46:
7d:01:e3:1a:41:c7:0a:4e:25:ec:74:52:90:8e:b2:
2a:54:ae:31:45:70:f2:b9:02:9d:a3:b4:53:c2:c7:
54:1c:d4:16:05:8a:91:3a:ff:12:d8:aa:3d:34:f2:
62:ad:bc:e9:36:0a:39:02:4e:dd:f5:34:61:f0:2b:
39:81:da:79:33:88:5e:0f:65:4d:61:c1:f6:fc:52:
1e:38:da:eb:f5:85:dc:46:92:fa:90:38:5a:9b:1c:
13:f9:66:b3:c3:80:7a:84:5f:f2:bf:13:f9:79:1d:
73:61:9d:62:04:aa:14:6b:c8:4f:44:47:e0:43:9b:
bf:6b:1f:2e:e1:50:be:e7:7c:59:eb:48:99:cd:ba:
53:7f:bc:06:77:a3:15:25:4b:1a:f1:ee:8b:09:45:
35:c2:2f:c7:07:e9:4e:30:c1:80:87:bf:eb:9b:71:
e2:01:b7:bb:f8:69:ed:61:22:3b:23:57:56:a8:4b:
35:1c:ec:9c:42:d4:84:40:14:ff:29:85:ae:27:54:
80:23:c4:5b:b3:42:45:4c:a0:df:c7:24:58:59:70:
ab:24:0a:da:cf:1e:a9:95:d4:16:f0:6f:2b:bb:02:
57:91:34:d0:7a:54:f3:c7:c5:12:56:17:df:d7:d1:
e4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F7:0A:1A:68:81:2D:6A:8A:5C:E8:E2:87:D8:FD:68:78:A1:3B:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b748cc4c-b756-3a58-a5ef-2a205ba047e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
136.32.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:db:70:7a:26:87:cd:a5:9d:b2:4d:51:fb:32:da:6a:97:00:
27:d0:a9:b4:69:77:8b:10:a5:da:9c:8c:8d:fb:f7:6b:a0:fb:
6d:0e:74:1f:61:7d:6b:35:26:46:40:59:ac:f7:45:27:c5:70:
f9:33:29:88:6f:51:23:cb:f1:3e:0f:18:09:50:29:e3:7d:12:
ca:d7:d6:e3:c2:07:b6:b5:fa:15:83:b8:ce:25:b7:ea:61:15:
9c:10:0e:d4:ed:11:db:9e:4f:1f:0d:2f:d4:1a:c5:40:6d:38:
37:1a:36:82:73:b6:28:80:f0:34:eb:7e:4b:59:c9:e7:99:dd:
ec:fa:c6:12:86:ac:16:22:21:03:f3:9c:9c:7f:1f:73:45:2d:
32:b4:52:49:7c:f1:77:16:65:81:d6:90:ff:07:c8:cc:86:be:
9c:76:11:cb:90:7f:58:2e:6e:9d:9f:7a:ec:c9:ca:22:96:3b:
a1:bf:f6:e4:43:59:7e:5e:79:19:96:43:b6:56:4a:a5:32:11:
8a:93:8d:27:28:f4:d3:e9:a1:d0:86:b5:0f:32:cd:3d:2c:6e:
e4:ea:0d:86:a8:00:d2:8b:c2:26:74:a1:10:4f:a9:74:ec:8c:
96:9b:36:a3:86:f4:11:bf:ec:1b:47:d0:5a:f4:a7:74:b2:1e:
6c:01:05:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:39 2025 by rpki-client on console.sobornost.net