Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d734a8aa-d900-39cd-8237-58ac0d28e3c3.roa
File: d734a8aa-d900-39cd-8237-58ac0d28e3c3.roa (raw, json)
Hash identifier: X5q4pPAKvyoMN8xMm3OGGPb3T/9ADirSL0saUCyrpgc=
Subject key identifier: DA:31:46:5E:8B:B4:37:12:8B:E3:B0:42:09:C4:35:FE:4E:77:4B:D0
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F432858498339CF3AD5145732138E9FD0
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d734a8aa-d900-39cd-8237-58ac0d28e3c3.roa
Signing time: Sun 13 Apr 2025 13:01:01 +0000
ROA not before: Sun 13 Apr 2025 13:01:01 +0000
ROA not after: Sat 12 Jul 2025 13:01:01 +0000
asID: 16591
IP address blocks: 136.53.48.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:83:39:cf:3a:d5:14:57:32:13:8e:9f:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: Apr 13 13:01:01 2025 GMT
Not After : Jul 12 13:01:01 2025 GMT
Subject: CN=0690a864-8e7f-4c3a-9613-62256dd1c3e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3f:5e:00:ca:5a:38:11:8d:e5:94:1d:4d:b5:
10:54:b5:4d:02:16:42:0f:e0:93:0d:1f:75:88:8a:
11:b1:d8:48:f9:ea:58:15:7d:69:f8:3f:d7:28:a2:
14:46:8a:02:c5:51:db:ac:fa:7c:88:2f:39:59:ba:
cf:da:0e:e5:1d:a1:50:c0:fe:25:cb:2c:3f:d1:a0:
6c:e5:3a:86:66:06:e9:9e:be:6e:c8:63:30:f7:c5:
12:49:a3:80:7d:06:e6:79:a0:c6:3b:d6:58:7c:ae:
7d:79:a2:e4:fd:d2:50:7b:de:6b:46:13:cc:94:74:
62:5a:da:72:da:07:d1:13:89:69:1a:00:ce:2a:d5:
84:82:fa:9a:99:7a:8a:93:96:be:33:e1:80:d4:bb:
8d:12:9a:55:09:7c:df:12:24:d8:7e:5c:24:1c:c0:
d1:40:cf:d3:0d:73:10:ff:42:83:2b:6f:ac:30:5c:
f3:04:5a:e6:d0:e0:6c:6b:ef:72:de:4a:b2:fa:a2:
ce:a2:52:ad:0e:f9:a0:a9:31:6b:9d:54:de:5b:20:
58:eb:fd:64:76:a8:5c:33:21:83:49:72:aa:3f:bb:
37:fb:e8:6c:00:3a:62:b2:ba:a1:2c:95:59:f5:88:
9c:e6:e9:a5:b8:3e:d4:88:39:29:41:c4:58:de:e6:
75:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:31:46:5E:8B:B4:37:12:8B:E3:B0:42:09:C4:35:FE:4E:77:4B:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d734a8aa-d900-39cd-8237-58ac0d28e3c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
136.53.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:94:f4:2e:b3:7b:5d:32:64:2d:eb:5b:a7:12:48:19:aa:61:
7d:fc:d2:23:5a:4b:d1:c4:bb:5a:12:c2:af:e7:14:10:af:d4:
43:08:eb:90:08:f9:0b:33:4f:fe:bb:43:b8:36:1a:8f:db:d9:
54:6a:8b:0c:24:d2:58:45:cc:d8:9d:b5:fb:1c:58:98:aa:94:
f9:3b:d9:ac:8a:a2:03:be:6b:39:37:2f:89:3a:dd:ac:15:51:
fb:88:ba:86:a2:77:7e:f4:6e:64:7b:f7:93:4a:dd:a9:b0:d6:
43:af:95:7c:84:d3:40:c0:b4:61:39:11:d6:a1:55:d9:1a:59:
b4:bb:06:bf:84:3b:13:b1:8d:60:79:98:f0:08:c6:9c:59:dd:
2c:62:d6:74:47:44:c1:62:57:1c:fa:a6:ce:76:f6:e9:6d:56:
3c:cb:44:67:ed:22:ea:24:e3:2e:11:8a:99:ad:16:d3:c4:56:
1f:c1:a7:1d:70:a1:bc:e2:46:49:e4:51:e1:42:7c:0c:ad:41:
ba:61:fb:73:b3:eb:f1:89:df:0b:1f:3e:c5:8a:86:bd:d5:c5:
0a:c1:76:c8:1b:ae:88:fe:98:2d:d5:30:6f:72:4f:f9:b4:5e:
8d:83:3b:3d:12:ab:03:e7:4b:09:66:f8:a2:63:21:ba:9c:0a:
7f:83:54:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:40 2025 by rpki-client on console.sobornost.net