Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0ece4181-ea12-39c4-8b47-53d2f4f2800c.roa
File: 0ece4181-ea12-39c4-8b47-53d2f4f2800c.roa (raw, json)
Hash identifier: hQEP9a5TBrMK0o8q5B99EanOgm5LaoeiAnkzMCNXZLc=
Subject key identifier: 7E:50:FA:F8:87:5B:D7:24:BE:34:52:7D:09:65:46:44:5E:E6:43:0E
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F43285848F4F6A466072F676191CF4F80
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0ece4181-ea12-39c4-8b47-53d2f4f2800c.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 3356
IP address blocks: 20.134.0.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:a4:66:07:2f:67:61:91:cf:4f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=8563237c-d247-40ac-9535-95f8c616f376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ed:7f:77:ea:0c:3f:80:2e:5a:4b:44:e2:b0:
9e:50:bb:14:eb:f5:34:3e:64:bf:2d:e6:26:97:d6:
58:98:43:e5:03:f0:2e:f6:c3:19:0f:0f:92:ec:13:
29:0b:8b:29:ee:ff:bd:a4:37:56:2d:2e:4a:11:35:
15:51:8f:cc:33:28:3b:59:59:48:6b:f6:87:a1:ee:
6b:d9:05:f0:27:a3:4e:49:e0:3e:67:a1:d3:66:69:
f5:fb:eb:89:64:e9:33:cc:b4:93:c2:b1:67:88:c2:
91:65:38:62:40:c5:91:55:59:90:79:4d:9a:5d:b2:
7a:6c:d1:ae:9e:5b:65:7e:7e:31:b8:d2:b4:b4:2e:
d3:d8:69:82:b8:46:8a:af:d4:6b:41:0a:b2:dd:4e:
cb:3c:4f:f1:e7:ee:ab:cd:f8:db:9c:b7:2f:86:79:
5d:35:87:ea:d3:8d:f7:5b:e9:22:12:7a:fd:d9:5e:
c3:3e:97:b3:75:4d:ef:a3:00:2a:43:2c:cc:fe:44:
89:31:3e:3f:13:ea:34:d8:03:d5:7d:42:be:6e:11:
c7:f5:bd:7c:0e:f2:b2:9e:f1:7b:c5:27:84:2c:13:
18:90:d2:b7:b7:75:66:02:66:6f:12:d0:28:a6:ba:
b6:7e:a9:93:66:d4:90:eb:41:fc:69:5e:d0:5f:1d:
30:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:50:FA:F8:87:5B:D7:24:BE:34:52:7D:09:65:46:44:5E:E6:43:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0ece4181-ea12-39c4-8b47-53d2f4f2800c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.134.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:08:25:17:34:ce:f0:0e:a5:6d:63:65:a2:51:93:77:9b:c1:
62:90:50:bf:c2:1b:ca:60:32:b6:68:bd:c1:ad:2e:77:95:f1:
e0:81:db:03:a3:0d:d2:5f:d9:30:56:bf:09:74:9c:0b:66:d1:
d9:09:d6:02:e6:36:02:8e:eb:7f:7a:74:cf:55:a2:b4:18:5a:
d8:a1:aa:73:a1:49:f7:e9:25:60:99:14:19:b2:81:89:8a:58:
87:39:26:ac:a9:5f:63:af:05:e1:52:ba:a3:24:c9:e2:7e:26:
ad:81:be:a4:63:bc:13:08:7b:a0:f5:6f:4c:2b:f6:1e:8f:10:
7e:08:ca:88:fd:bf:f6:83:80:e2:94:e9:98:ec:38:22:9e:99:
98:bd:64:8e:46:a4:da:95:dc:26:36:f7:bc:a2:a8:ba:c9:43:
17:0c:75:79:a0:fc:1b:e4:fc:69:3b:3e:9f:d4:71:f3:49:3a:
9d:02:c3:cf:1b:7d:3c:6a:e8:41:26:5b:87:28:71:f3:dc:b2:
47:e5:4f:6d:e3:7f:12:50:14:ad:95:fa:98:df:5f:ac:9a:88:
30:c2:a5:89:ca:41:0e:9c:dc:97:bc:f6:51:ac:36:3e:28:68:
ec:9c:25:b9:fd:a6:c1:a9:57:f9:9e:28:2a:c0:38:28:9a:3a:
36:e4:46:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:04:46 2025 by rpki-client