Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b5edcee0-26fd-34b3-866d-df4b2d2d2c98.roa
File: b5edcee0-26fd-34b3-866d-df4b2d2d2c98.roa (raw, json)
Hash identifier: ZEeFiOImkuqy9HTVUx4v84hnDGGtFNiqg/d/MOarRgY=
Subject key identifier: 49:8A:7A:2F:6C:B5:BC:F2:23:0C:CF:C7:AC:BC:AF:DE:58:BE:F3:A4
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F43285848D9437563308C7501785B53E0
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b5edcee0-26fd-34b3-866d-df4b2d2d2c98.roa
Signing time: Tue 11 Feb 2025 15:53:13 +0000
ROA not before: Tue 11 Feb 2025 15:53:13 +0000
ROA not after: Mon 12 May 2025 14:53:13 +0000
asID: 3360
IP address blocks: 20.138.48.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d9:43:75:63:30:8c:75:01:78:5b:53:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Feb 11 15:53:13 2025 GMT
Not After : May 12 14:53:13 2025 GMT
Subject: CN=4baf9ca2-9fbc-4129-9296-eeeec098c4cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:be:b0:3e:97:19:12:5d:2e:85:46:36:50:40:
5a:c2:ca:3c:f4:4d:08:21:85:11:dd:dd:ab:55:49:
46:c2:06:4b:9d:31:50:7c:9d:48:7b:f9:92:f9:b1:
8d:c1:90:a8:d4:5f:eb:3a:35:5b:32:e1:59:5c:30:
8c:27:52:26:43:64:6a:61:c0:10:48:b1:e7:20:03:
b9:d9:14:b2:e2:96:74:e0:68:71:79:2e:4a:5a:9b:
ff:38:8e:54:d3:b9:2f:c6:46:ee:a1:34:b8:94:c5:
9f:ac:83:92:fc:94:a0:e9:e2:93:ec:d9:89:7a:f8:
70:ce:90:37:d3:ad:cd:f1:55:36:74:95:0f:31:d7:
6c:1f:98:62:12:00:22:5f:a7:18:19:60:c0:11:dd:
32:dd:a6:58:76:dc:5c:d7:13:86:f5:c6:0e:b0:bc:
6a:70:4a:93:f7:c1:81:eb:ce:ff:a9:69:15:06:52:
4f:0b:f5:79:e5:48:88:82:1a:56:7a:5a:9a:a7:17:
bc:cf:ef:80:a3:d8:3b:db:0c:00:48:85:a8:a0:5f:
99:37:0c:bc:3a:40:32:08:c4:8c:ff:b2:88:54:4c:
e3:dc:c4:cf:22:28:ba:bb:14:a7:fa:f0:25:af:f3:
ff:b0:df:9f:5d:1b:99:45:98:3f:36:9f:5a:b0:fe:
16:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:8A:7A:2F:6C:B5:BC:F2:23:0C:CF:C7:AC:BC:AF:DE:58:BE:F3:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b5edcee0-26fd-34b3-866d-df4b2d2d2c98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.138.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:27:58:28:d2:53:54:02:ef:8a:cb:50:e4:47:78:ae:a1:52:
3c:f3:f8:54:ce:b5:db:eb:2d:59:58:06:8b:dd:b0:59:08:02:
e0:05:22:84:c2:da:62:e6:84:28:1c:af:a0:cc:1e:50:b6:7a:
cd:b2:7f:fe:3d:ec:50:9d:de:6f:f1:c5:00:40:f3:a1:81:e5:
27:50:d9:10:36:9d:ec:a2:36:ab:06:3a:c8:84:d0:5a:40:d9:
90:86:7e:28:84:1f:bc:d6:61:41:d7:b0:8f:c7:59:ab:d0:2a:
2d:ce:e0:d1:72:1a:ac:73:01:ac:73:6c:e0:28:b4:67:e9:df:
52:73:66:7d:5a:f3:9b:06:0c:e9:6d:ba:55:f0:a5:f1:24:03:
bf:9d:74:1c:bb:31:de:5c:61:61:05:87:d5:20:cc:78:23:14:
f3:0f:b3:5d:c8:3c:c4:21:52:9f:96:3e:4a:00:49:12:c9:69:
bf:dc:07:3d:3d:64:f8:b9:ae:d4:12:c0:57:31:fc:a9:ae:33:
70:54:e5:fe:4b:33:72:9c:ef:98:02:88:73:6d:ae:25:ac:ec:
85:50:1f:78:41:29:bf:59:50:d3:ad:5b:e2:c7:36:c7:11:59:
9b:5f:7e:d6:6b:ff:57:a4:a4:0b:cc:87:85:1e:31:e6:b2:c1:
b4:2a:6a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:31:45 2025 by rpki-client