Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d8a8894d-d034-39c7-aa71-ce39fb0d8b55.roa
File: d8a8894d-d034-39c7-aa71-ce39fb0d8b55.roa (raw, json)
Hash identifier: FK3ZZVyCWAGfo4df2eUxgwsZ2G9BEWj7lI5PDsQbMh0=
Subject key identifier: 96:B3:A1:A7:52:D2:AA:4D:37:88:F2:4D:A4:8B:15:75:1D:66:78:99
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F43285848D94254D770D835831271B180
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d8a8894d-d034-39c7-aa71-ce39fb0d8b55.roa
Signing time: Tue 11 Feb 2025 15:50:57 +0000
ROA not before: Tue 11 Feb 2025 15:50:57 +0000
ROA not after: Mon 12 May 2025 14:50:57 +0000
asID: 3360
IP address blocks: 20.138.0.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d9:42:54:d7:70:d8:35:83:12:71:b1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Feb 11 15:50:57 2025 GMT
Not After : May 12 14:50:57 2025 GMT
Subject: CN=19cccd21-6583-431c-91d5-72f29ac737a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:06:23:9a:6b:b6:fa:aa:f3:05:85:d9:8a:75:
2a:2a:bb:11:c2:57:d8:5a:31:39:e4:92:af:87:04:
3f:c1:8c:02:89:14:3b:59:96:fe:59:67:57:f1:62:
d4:34:e9:52:be:ae:09:85:7f:2d:ac:27:a6:4e:69:
e1:4c:2e:9d:f0:4e:38:bd:d5:fe:69:63:b0:d0:95:
6a:00:19:9c:14:e5:72:24:bb:90:45:89:79:de:c9:
84:79:c1:9a:d3:41:8f:81:43:0a:96:14:79:76:07:
2f:aa:73:3b:8a:ba:cd:70:c4:61:cd:ef:16:65:f2:
36:c8:7f:8d:f4:64:8d:38:8d:dc:83:ea:e0:59:e2:
14:75:8e:84:72:cd:36:d4:57:18:a7:90:b1:87:ad:
fd:0b:4c:ae:69:d0:c3:38:ec:4a:6a:dd:f7:5f:09:
9c:d0:5b:4f:f8:b0:ba:9f:e3:29:8f:88:9c:c8:5a:
03:b2:95:60:ee:9d:b6:3b:87:05:e9:08:e6:0a:f7:
b1:4e:1c:c6:2b:d7:f1:fa:a2:6c:d8:c7:e1:74:96:
07:03:f8:87:83:11:b8:0e:f5:e9:ee:61:b9:8a:b9:
73:84:2b:0c:78:4b:4a:da:16:57:67:39:9b:82:2d:
af:10:e2:f0:cc:87:9d:58:b3:95:aa:52:07:86:cc:
bf:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:B3:A1:A7:52:D2:AA:4D:37:88:F2:4D:A4:8B:15:75:1D:66:78:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d8a8894d-d034-39c7-aa71-ce39fb0d8b55.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.138.0.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:eb:26:6b:cc:94:f8:3b:43:33:e9:a4:8d:c2:57:7f:f5:1d:
fb:3c:b0:41:33:9d:7b:0b:60:30:db:e7:fc:07:de:c4:3a:01:
f0:65:84:c6:ea:cc:82:99:78:85:f9:88:25:bb:16:39:59:f3:
b7:35:10:af:27:03:11:9d:97:c9:5c:6d:ba:20:d8:f3:e2:fe:
36:27:20:0a:95:cc:9a:33:a0:e6:89:9d:99:8e:dc:01:0a:c1:
52:81:91:fc:e3:41:43:f9:d7:c5:fd:22:1f:11:e2:04:8e:70:
90:aa:db:f9:13:62:5d:85:a4:5d:c6:83:c4:36:92:d2:76:a6:
13:41:c3:36:67:36:57:a9:11:fc:14:26:2c:df:4a:f6:60:78:
d2:11:ee:63:1c:8e:a6:aa:7c:b6:9e:00:a4:d4:9a:ae:44:5d:
5f:33:73:91:98:5a:84:51:00:ea:67:05:20:cb:39:ee:48:82:
7b:9d:28:f7:83:45:c9:59:d9:a3:09:6d:bf:d8:5e:46:73:e6:
81:94:56:80:79:d8:34:1d:d5:eb:68:ac:c1:eb:88:13:99:96:
48:7c:bb:81:3b:6f:28:2e:59:2e:c0:f6:46:bf:f1:01:04:74:
6a:1a:40:9d:ee:24:40:db:67:7c:6f:48:a4:e1:a5:c0:08:47:
85:16:0c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:04:41 2025 by rpki-client