Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da015e1a-f458-3674-9325-2b4dbacc74f1.roa
File: da015e1a-f458-3674-9325-2b4dbacc74f1.roa (raw, json)
Hash identifier: 4xpRlxgxmsmxY1MCftQpfxIYjjmfEP84W9WXYdPW3U0=
Subject key identifier: 8F:2B:A0:E5:2C:74:44:8F:79:DF:B1:2B:4A:AA:1E:30:02:C8:63:28
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F43285848B35B6BC7524D029CE5278D00
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da015e1a-f458-3674-9325-2b4dbacc74f1.roa
Signing time: Wed 29 Jan 2025 02:00:39 +0000
ROA not before: Wed 29 Jan 2025 02:00:39 +0000
ROA not after: Tue 29 Apr 2025 01:00:39 +0000
asID: 3360
IP address blocks: 20.133.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b3:5b:6b:c7:52:4d:02:9c:e5:27:8d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Jan 29 02:00:39 2025 GMT
Not After : Apr 29 01:00:39 2025 GMT
Subject: CN=f567b0cc-b7f0-49f6-9bb5-30b24776238b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6b:c5:07:15:56:fc:60:9c:af:f6:b7:f1:cd:
75:ed:01:42:9b:12:80:27:8b:d7:33:35:ea:1f:1a:
8e:be:1b:65:0a:b8:af:1e:7a:05:2d:3c:2e:71:59:
12:8f:5d:49:cf:e6:c8:60:5d:a5:a0:ba:fd:a5:51:
79:0b:fd:94:80:17:31:f3:48:18:d3:05:bb:12:f3:
37:a4:df:8c:4a:70:d0:80:08:45:21:24:c0:4a:82:
2b:3f:d6:28:61:44:ee:25:d6:93:31:01:76:d1:fb:
bb:35:bb:df:e9:26:cf:cb:c2:7e:1b:38:5d:d6:1b:
90:6a:5a:c8:8c:e5:42:02:60:97:bc:51:00:4a:60:
51:3d:a1:ff:7e:7f:90:4b:01:62:0b:c4:b5:92:59:
79:c2:a2:e1:4d:35:81:18:fb:a1:6b:fa:22:a9:59:
4a:34:3c:04:2f:3f:8b:20:6c:d3:fd:e0:3e:a4:3f:
99:3e:99:39:6b:8e:69:97:6e:ae:28:75:bb:93:47:
09:d4:e7:5a:27:83:06:ba:91:e0:fb:70:11:81:9e:
e5:60:a2:0f:5f:23:9b:c2:e7:38:f3:09:1a:22:a7:
b7:40:de:92:2e:3e:1e:0c:07:6b:25:1c:22:c0:0d:
ee:c7:e4:6f:14:89:bf:e6:16:e3:c2:23:7a:40:06:
ab:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:2B:A0:E5:2C:74:44:8F:79:DF:B1:2B:4A:AA:1E:30:02:C8:63:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da015e1a-f458-3674-9325-2b4dbacc74f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.133.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:1a:64:25:be:74:aa:0f:93:a1:91:b3:01:ac:21:f5:f2:8e:
11:a8:89:b1:2c:5c:bc:4a:f4:92:58:e7:f4:b8:58:7e:84:14:
28:6d:20:5b:c9:39:a6:58:e1:14:cc:08:b8:92:ce:ed:d8:26:
40:90:d0:10:e9:f1:3b:a2:de:98:60:96:d2:f8:80:c2:55:18:
e6:cc:3a:aa:a4:80:1d:33:b7:cc:d8:a2:6d:a6:72:6c:80:90:
20:69:4c:7a:1a:44:94:d2:a2:bc:61:5f:fa:10:45:cc:e4:cb:
fa:92:94:4b:11:03:f7:15:ac:1a:0a:13:cb:88:44:9c:63:58:
55:19:2b:bb:28:59:a0:bb:26:04:b5:f6:e6:9c:46:d2:85:ec:
91:26:f1:e3:03:d8:51:46:3d:23:86:14:93:c1:f9:73:02:1c:
77:17:d4:73:b6:a8:f1:55:4f:85:1d:37:cf:e6:d7:7b:c2:e5:
79:47:87:0f:73:75:bc:16:f8:9f:77:9c:18:3f:e1:87:68:27:
d3:27:16:64:2a:33:67:a6:13:60:c5:33:58:d6:d1:48:64:cd:
a4:5e:51:bf:40:c4:48:8d:80:8b:be:01:7e:fa:2e:a8:cf:61:
e4:22:8f:3d:39:79:2b:a3:83:4f:f6:e8:e8:83:ab:2f:94:a6:
10:73:a1:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:53:20 2025 by rpki-client