Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f9f83642-2862-3b8b-a6ca-e7ce0ad6d4fa.roa
File: f9f83642-2862-3b8b-a6ca-e7ce0ad6d4fa.roa (raw, json)
Hash identifier: CyOdF34N+YpdkvPZOz8BKpnvIxQQtorq1IQj708B8GI=
Subject key identifier: 94:6C:C4:B1:33:91:F5:4F:5F:51:A6:CD:CE:4F:FB:87:75:D5:E3:DD
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F432858498339C9A1856F4BA99501D120
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f9f83642-2862-3b8b-a6ca-e7ce0ad6d4fa.roa
Signing time: Sun 13 Apr 2025 13:01:01 +0000
ROA not before: Sun 13 Apr 2025 13:01:01 +0000
ROA not after: Sat 12 Jul 2025 13:01:01 +0000
asID: 16591
IP address blocks: 136.58.80.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:83:39:c9:a1:85:6f:4b:a9:95:01:d1:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: Apr 13 13:01:01 2025 GMT
Not After : Jul 12 13:01:01 2025 GMT
Subject: CN=0e49a6b3-ebfe-4d7c-804a-7405519fffe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9e:e8:35:eb:9f:cb:06:94:77:05:32:05:ef:
7f:ba:49:00:79:3e:76:cb:6a:2a:47:8d:cb:39:4e:
d1:c9:12:fb:5e:2a:44:d4:6c:5b:5f:ef:a7:7f:3b:
ca:82:c4:af:3d:f3:98:0c:24:40:4e:ff:8f:bb:7d:
54:49:6e:fa:27:26:2b:46:7e:22:29:0d:2f:7c:21:
95:eb:6b:95:fd:84:01:da:61:44:d3:71:2d:bd:41:
e6:a3:6a:25:75:9a:ea:b0:dc:67:35:b7:2d:e6:91:
94:25:60:88:40:63:46:52:6b:a4:df:62:78:63:23:
57:c0:be:3a:f3:95:3d:02:18:8a:0b:8d:34:8d:f2:
92:0d:54:1c:46:16:65:46:c3:36:30:a5:88:06:2d:
76:87:39:dc:76:66:ef:c9:22:86:07:6d:72:58:37:
4f:43:81:fd:4d:42:07:e9:3e:e2:7d:bc:9c:e2:47:
e3:65:21:50:60:85:7b:d5:f3:89:dc:e8:0b:c6:ff:
81:73:df:ab:f1:ed:21:17:76:f1:61:00:e2:8a:06:
97:d7:73:2a:7c:75:54:02:ee:59:f9:e2:a7:4c:24:
e5:1f:1a:2a:d0:ad:9d:8e:e8:59:69:de:60:e1:92:
b5:1a:7a:20:2d:14:cb:56:b6:76:01:35:0a:43:42:
a9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:6C:C4:B1:33:91:F5:4F:5F:51:A6:CD:CE:4F:FB:87:75:D5:E3:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f9f83642-2862-3b8b-a6ca-e7ce0ad6d4fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
136.58.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:b4:ac:23:23:99:31:65:2b:5d:58:10:57:85:9e:77:39:23:
70:39:04:d0:09:8f:18:5d:ab:48:06:89:be:cf:77:87:c9:a9:
1e:07:48:f1:ae:4e:a3:8a:3b:48:6d:d3:11:d8:9f:09:4d:c2:
0c:50:04:f5:2a:d7:ce:fe:58:95:db:8e:71:fc:7e:54:c7:4d:
d3:91:f1:55:5e:8c:de:0c:5f:73:a6:c0:0e:37:dd:b1:b1:16:
c2:05:8d:51:83:dc:eb:bc:1d:94:39:95:2e:ce:42:b1:30:ab:
de:88:82:7e:87:5a:95:fc:6e:81:9b:9b:5b:dc:2c:16:73:ed:
f1:bd:76:4a:73:c2:f8:18:73:90:91:41:bd:e9:86:7a:e5:25:
5c:1a:32:b8:6e:1d:bd:57:0c:ac:c3:4a:b8:a4:65:90:ae:4c:
1a:fd:d9:2a:d4:c5:cc:53:67:8e:62:b6:40:1d:3a:77:52:46:
76:51:37:b8:70:03:68:59:51:54:14:6d:b0:27:2d:38:13:93:
5b:5b:30:7b:7c:cf:d5:d9:07:a0:9e:5b:2d:24:f4:d3:c8:e9:
66:30:6e:a9:b2:14:07:91:18:af:81:f1:4d:0f:a9:38:34:69:
f5:ca:3a:21:d7:4a:80:fa:9e:0a:2b:19:48:46:02:5c:74:ca:
f4:b3:c0:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:40 2025 by rpki-client on console.sobornost.net