Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e73304dc-a250-38ed-aa9f-e07a00448bff.roa
File: e73304dc-a250-38ed-aa9f-e07a00448bff.roa (raw, json)
Hash identifier: MIqhfbh92vmcg+nTNOzhwKMb5Y3kjYGpxlINa8mB0g8=
Subject key identifier: C7:41:E6:7A:6E:A8:31:82:5A:27:81:5D:1F:45:99:EB:73:77:B1:A6
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F432858498339CECD597B06A45354A040
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e73304dc-a250-38ed-aa9f-e07a00448bff.roa
Signing time: Sun 13 Apr 2025 13:01:01 +0000
ROA not before: Sun 13 Apr 2025 13:01:01 +0000
ROA not after: Sat 12 Jul 2025 13:01:01 +0000
asID: 16591
IP address blocks: 136.50.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:83:39:ce:cd:59:7b:06:a4:53:54:a0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: Apr 13 13:01:01 2025 GMT
Not After : Jul 12 13:01:01 2025 GMT
Subject: CN=56bc3518-a350-4e86-a0c1-bcebdbe28cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:64:4e:54:f8:61:31:2e:bd:96:42:98:06:48:
70:7d:64:79:5d:76:f4:08:97:d5:1d:7b:4e:92:40:
b8:84:6a:03:e2:d6:21:19:90:cf:bf:46:b9:ab:5d:
de:36:8d:a9:fe:27:80:9e:f2:3f:cf:54:99:17:bf:
bd:a7:84:9f:89:b7:9f:16:46:88:95:76:55:05:40:
8f:89:5b:78:ab:3b:a3:cc:70:4e:ee:e3:c0:27:79:
54:1f:02:bc:ed:2f:eb:1e:e3:53:d4:f8:e0:2c:8c:
58:45:dd:ea:3d:66:0a:55:e8:b3:9f:57:2c:9d:58:
25:ad:e5:51:38:2c:c8:c1:cb:28:a9:32:d9:5a:cd:
09:a2:12:44:7e:33:21:d5:eb:99:2f:38:ba:f3:d7:
42:b9:3f:e7:ce:40:42:97:a2:e9:eb:8e:d7:07:14:
d5:1b:a6:0f:25:35:27:33:ad:63:ad:dd:2d:70:c2:
02:a3:54:8f:4c:b5:40:8a:51:da:09:11:c7:60:9d:
4d:04:e1:25:b8:05:b6:f0:2c:79:4c:e0:94:6c:80:
c4:e5:74:2f:e5:b7:4f:57:ae:20:ab:b5:eb:8b:19:
18:d1:02:81:c4:b8:d2:a0:1d:23:1f:84:5f:78:a7:
20:11:08:5d:17:9e:6d:cd:cb:cc:62:e0:b9:fb:6f:
4f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:41:E6:7A:6E:A8:31:82:5A:27:81:5D:1F:45:99:EB:73:77:B1:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e73304dc-a250-38ed-aa9f-e07a00448bff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
136.50.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:0f:74:70:59:fb:af:9d:60:51:a0:d6:9a:f6:8a:a6:5d:b7:
c3:67:0b:3e:d1:09:64:b8:00:8b:2b:c5:97:a8:7e:d9:2a:76:
66:58:93:6d:53:ef:cd:65:f3:fa:2d:09:db:c2:69:51:65:b8:
6a:c2:f0:1f:72:b6:d2:88:03:29:9d:8b:7a:5e:71:bc:e7:20:
d6:35:f5:ce:be:e1:a4:46:77:d5:65:96:f4:6e:c8:a5:80:02:
ba:37:04:d7:64:e3:3b:2b:96:e1:aa:49:f9:5a:68:9c:43:50:
32:5d:c0:3c:38:f0:3e:2f:c7:ad:05:9b:63:6d:cc:16:e2:9e:
43:cd:70:c6:0d:1c:72:60:7b:7e:02:42:c2:50:83:36:0c:a5:
8b:c6:ea:bf:9b:b3:eb:cd:75:6d:7b:f6:59:3f:55:4a:e0:51:
24:ea:8f:32:14:11:d1:67:92:fe:4f:9a:a0:d2:50:3f:b3:d1:
bc:4f:1a:07:6d:d6:eb:a0:6d:c7:0f:41:6f:5a:bd:ff:84:28:
32:76:9e:08:f0:ea:23:83:ae:15:0b:eb:4c:5f:9d:9f:84:87:
a3:b8:90:c1:67:bb:f3:27:27:38:6e:2c:e8:67:a0:a9:50:47:
bd:90:52:a0:9f:2f:7c:18:6a:e2:2b:f5:b9:a5:66:50:62:ed:
3f:48:9f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:40 2025 by rpki-client on console.sobornost.net