Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/fbcfb683-1a6c-31f1-96a1-8ca387179584.roa
File: fbcfb683-1a6c-31f1-96a1-8ca387179584.roa (raw, json)
Hash identifier: 5PcQwo3L/uNk2Z2VtJSqvag4Cw8HpUmEsMHgAW8bkh0=
Subject key identifier: B4:7E:10:66:2C:24:6B:36:F0:A0:5B:8C:D1:F5:D6:F7:15:C5:EA:21
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F43285848B35B6C0CC0A6561B81DD4E80
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/fbcfb683-1a6c-31f1-96a1-8ca387179584.roa
Signing time: Wed 29 Jan 2025 02:00:39 +0000
ROA not before: Wed 29 Jan 2025 02:00:39 +0000
ROA not after: Tue 29 Apr 2025 01:00:39 +0000
asID: 3360
IP address blocks: 20.133.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b3:5b:6c:0c:c0:a6:56:1b:81:dd:4e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Jan 29 02:00:39 2025 GMT
Not After : Apr 29 01:00:39 2025 GMT
Subject: CN=1b5e43e3-a866-4e2b-b602-f40d9cfbff9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4e:57:d4:c6:9a:89:5f:cc:e9:0d:be:ca:2a:
c2:40:f9:3a:f0:6f:c7:d0:93:aa:9d:70:05:52:37:
79:d4:55:d8:12:0a:d5:12:98:73:df:c3:33:a1:8b:
c8:43:f5:a7:47:58:0b:45:19:ae:bc:5e:21:26:14:
e9:77:16:e1:fe:3c:f3:d4:9a:4e:16:98:6c:b3:e3:
67:6b:2a:79:4a:e1:2e:e8:12:0d:89:99:e1:6a:07:
65:29:cb:e5:38:0c:61:71:18:28:a4:09:d4:68:b1:
bb:1e:9c:7e:fc:2b:e1:00:d1:cf:a5:ea:2f:e8:78:
d1:fd:f7:82:7a:17:21:69:27:b5:e8:18:9b:22:b7:
80:23:49:28:6c:e2:e0:ba:53:6e:41:ef:e7:bf:2f:
44:03:25:08:44:a7:ba:e2:7c:37:93:6b:b5:87:76:
9d:85:f0:30:9a:92:bb:e5:4b:4a:87:3c:e7:3e:e3:
11:27:ed:0d:1e:3b:a6:91:95:39:3b:01:30:85:3f:
fb:80:60:a0:42:60:07:01:08:a0:23:c0:23:57:b0:
1a:3f:f8:8a:61:62:df:2e:35:f4:63:98:f2:40:72:
2f:da:37:2a:d3:5b:10:1b:71:43:2a:7c:29:5f:58:
f0:6c:b2:c9:66:66:9c:4c:a3:35:36:f4:bb:81:47:
f5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:7E:10:66:2C:24:6B:36:F0:A0:5B:8C:D1:F5:D6:F7:15:C5:EA:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/fbcfb683-1a6c-31f1-96a1-8ca387179584.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.133.232.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:86:42:89:a4:cf:3f:f8:e4:5a:06:d8:a8:a6:b0:83:92:9a:
18:aa:40:69:1a:1d:2d:d2:42:44:93:ff:c8:5e:91:cc:7e:ec:
76:46:cb:fc:a4:ac:73:00:fd:e4:5e:ff:8e:b5:fa:5c:57:3f:
83:4e:1a:5e:52:21:57:55:99:75:dc:9f:d4:1f:35:52:42:1d:
e0:e5:3e:b2:4c:5b:ae:b0:02:8e:a1:e7:d5:9a:89:7e:d8:c0:
c7:58:0f:58:bb:c1:76:25:ce:ec:bb:82:99:df:b2:d6:a9:e3:
41:60:99:3e:2c:85:90:07:a2:ba:41:d7:67:c7:b5:4f:ce:3c:
3d:b9:18:68:52:02:72:f2:e9:fe:3f:7c:a1:db:b3:51:d1:a5:
f4:90:de:b5:30:18:42:4e:75:0c:76:e8:3e:0e:2c:27:74:28:
7c:fe:e9:1a:3e:75:a4:11:9f:b4:b1:e9:75:b5:c4:1f:29:9c:
93:d9:cf:ea:cf:e1:ab:fb:eb:18:0e:f4:dc:b2:ed:ec:96:5e:
7e:5f:ba:45:8d:0b:d8:47:ea:f1:8a:56:df:8c:10:15:1a:ff:
9c:c7:77:fe:34:e4:da:31:d1:4b:5d:b9:46:4e:74:6b:99:63:
2a:03:e9:c9:9f:03:16:92:92:fb:68:6d:0c:7b:6f:57:87:a8:
1d:1f:c3:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:49:01 2025 by rpki-client