Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d8195a94-d522-37ad-be84-a7f37ca7a347.roa
File: d8195a94-d522-37ad-be84-a7f37ca7a347.roa (raw, json)
Hash identifier: lHu9/t1+hV/3r8I2hc3a+trNntfEjNtEvLJkN6yG1CE=
Subject key identifier: F0:64:E6:B1:FE:DA:34:6F:86:E6:48:07:54:4E:31:F3:27:4F:6D:0E
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F432858498339C72D42E96C9943A91A80
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d8195a94-d522-37ad-be84-a7f37ca7a347.roa
Signing time: Sun 13 Apr 2025 13:01:01 +0000
ROA not before: Sun 13 Apr 2025 13:01:01 +0000
ROA not after: Sat 12 Jul 2025 13:01:01 +0000
asID: 16591
IP address blocks: 136.48.0.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:83:39:c7:2d:42:e9:6c:99:43:a9:1a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: Apr 13 13:01:01 2025 GMT
Not After : Jul 12 13:01:01 2025 GMT
Subject: CN=e0c27b9e-b7c5-4f23-a68c-4daffb5f23e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:50:84:df:d9:83:2e:13:80:c0:08:1e:4c:6a:
85:3d:c4:2a:1c:56:de:f9:a8:dd:d8:d2:67:21:37:
75:7b:ec:0b:03:6b:b5:61:cd:41:ed:a5:f2:e2:85:
87:4e:8f:5d:65:db:57:b5:e0:7e:42:ba:7c:89:fc:
a0:fb:9f:07:6f:ad:e0:b8:ab:ca:bb:e8:41:bf:64:
18:fe:15:e6:16:99:4b:4a:72:c8:35:d9:19:0c:68:
47:71:84:46:ef:6a:56:a2:2d:c7:cf:80:de:c8:a9:
c7:78:11:f8:36:d1:16:91:6b:cf:57:6c:10:d8:5a:
b7:9c:64:ed:cf:3e:99:87:21:01:4c:56:9a:fb:c7:
ef:9e:df:79:65:24:11:d6:c7:2d:0a:f0:d1:c1:7c:
62:90:65:79:ab:15:a1:74:ef:17:29:0a:f0:8b:0f:
6f:32:8c:69:8b:97:4f:1f:64:5e:f0:76:c6:f7:37:
65:1d:04:1c:c7:a3:e6:32:ff:36:51:42:8f:1e:69:
7e:41:a7:28:84:a8:60:f2:7b:75:66:85:db:f0:dc:
28:e7:34:d8:a3:17:48:38:2d:04:5e:45:75:25:ff:
68:00:11:08:4e:db:73:d5:6a:94:53:65:b1:a2:1a:
94:17:7b:d4:74:27:6e:29:2f:15:7d:7e:bf:6f:f3:
9a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:64:E6:B1:FE:DA:34:6F:86:E6:48:07:54:4E:31:F3:27:4F:6D:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d8195a94-d522-37ad-be84-a7f37ca7a347.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
136.48.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:60:70:df:43:51:82:a4:7e:24:bd:59:14:52:53:5a:72:32:
55:70:76:92:c0:e1:c6:f9:68:22:ee:37:c8:da:e8:08:13:de:
97:57:bd:cd:ac:f1:7f:4e:21:6b:c7:b6:ec:cc:6c:34:ef:bf:
a7:80:b4:9a:7d:26:8f:09:a6:b6:d7:41:92:9e:4f:75:b8:79:
b3:ea:b0:e4:8e:07:ae:a3:cb:36:a3:da:94:3f:90:54:4b:b9:
16:b1:2f:6c:09:c6:b0:af:99:41:8f:db:42:ff:89:83:79:ff:
09:fe:b8:37:bb:78:ba:28:c5:01:fe:f9:50:5f:d3:03:7a:a8:
8e:81:1c:26:5e:ec:a5:e6:e8:4e:1a:17:de:3e:a2:20:4b:ba:
58:aa:98:07:27:d1:96:1f:68:87:1a:f7:c8:07:30:91:93:a0:
2c:fd:e7:4a:a7:e6:a0:0e:0d:40:c7:e4:f5:69:7b:59:b1:30:
31:df:0c:45:cb:b9:92:39:d7:ea:57:ab:a4:4d:12:48:84:cc:
42:8d:ca:f0:bb:f3:3e:f0:57:50:75:90:bb:bc:bf:f8:16:6d:
42:7b:1e:6e:12:d0:33:4f:4d:46:ed:28:93:8a:7c:e0:ea:76:
ea:57:18:59:fc:e2:44:32:16:47:26:b5:23:d2:c1:f0:2b:7e:
9c:c3:04:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:40 2025 by rpki-client on console.sobornost.net