Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/20b86aff-f738-359b-bf7f-a923168ca468.roa
File: 20b86aff-f738-359b-bf7f-a923168ca468.roa (raw, json)
Hash identifier: aLGjXcXqvFebMhhEOeuoORHKlxRSWv8UP/dl5DgowkY=
Subject key identifier: EB:39:B6:3D:20:48:9E:FC:E8:50:7D:16:52:22:56:36:80:60:4C:2F
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F43285848960B4E9EA653D0DFD3920900
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/20b86aff-f738-359b-bf7f-a923168ca468.roa
Signing time: Sat 18 Jan 2025 14:00:52 +0000
ROA not before: Sat 18 Jan 2025 14:00:52 +0000
ROA not after: Fri 18 Apr 2025 13:00:52 +0000
asID: 3356
IP address blocks: 20.137.176.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:96:0b:4e:9e:a6:53:d0:df:d3:92:09:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Jan 18 14:00:52 2025 GMT
Not After : Apr 18 13:00:52 2025 GMT
Subject: CN=ac201b59-ec67-4125-b05c-fdda7641ef3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:12:ec:b2:f6:d8:dd:5f:d9:04:dd:e7:60:81:
9c:a0:f7:ed:84:69:10:e3:3d:8a:af:6b:4a:f5:09:
da:de:14:ac:72:26:96:19:4d:67:3e:34:0d:63:dd:
d9:e1:ff:4b:68:9e:b3:7d:8a:1c:29:2e:81:60:ee:
4e:94:07:a6:93:af:6b:be:44:4a:ee:eb:f4:3f:de:
1f:65:88:34:ef:b2:52:29:ae:b7:19:9c:91:6b:66:
70:c2:e9:c6:20:c8:9f:44:e0:24:5b:fa:0d:7a:f3:
d4:5a:0e:5b:78:a8:cf:06:52:c8:a7:17:1c:c5:3c:
cb:91:b6:77:d8:11:57:ec:9e:19:24:0e:fe:de:ca:
c5:30:df:ff:4e:e0:56:8e:38:60:f8:f7:54:10:f3:
6d:5a:3c:56:4d:e5:39:75:b4:41:ce:18:a3:da:5d:
71:ea:7e:d2:0d:e4:86:0a:6a:2f:d2:c3:59:da:52:
74:54:a6:4f:0e:5d:d7:27:61:65:4e:4f:70:61:cf:
0f:5d:f3:30:15:01:71:b9:0e:c3:e4:f4:87:f0:3c:
c0:6b:d7:00:90:5b:01:3d:71:4b:93:ed:dd:27:85:
d1:44:c4:e8:8e:e8:26:0f:20:c0:ef:da:55:a9:26:
4b:67:a1:0b:6d:ce:dd:6d:04:dd:16:3e:29:04:d2:
c9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:39:B6:3D:20:48:9E:FC:E8:50:7D:16:52:22:56:36:80:60:4C:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/20b86aff-f738-359b-bf7f-a923168ca468.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.137.176.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:e9:34:2d:91:36:8a:50:97:c1:53:3b:8f:69:ee:91:b4:68:
78:11:9f:e0:60:31:59:5f:1b:28:59:2b:c1:4b:e0:49:80:f8:
93:15:22:30:42:2f:dc:2c:35:f2:a3:30:d6:d7:99:19:69:fa:
61:4f:90:40:77:52:39:1e:ac:f3:57:73:20:b3:14:36:c0:d0:
a1:68:46:6e:73:d0:55:1c:d8:10:82:46:27:f5:1e:1f:2c:ea:
3e:de:1e:22:bd:54:7a:ac:7b:79:da:dc:96:47:01:37:cc:64:
0c:bc:8c:7a:62:11:57:0e:8a:7b:64:58:0c:3d:45:fb:4d:55:
b2:a7:db:21:62:51:57:6a:9e:64:cf:58:d8:28:01:2c:dc:7f:
92:54:ff:e1:9c:94:83:6e:b8:7f:27:ed:fc:a3:9f:2d:95:6e:
cc:1e:88:bf:38:1e:69:34:ac:30:de:28:31:b3:5e:22:9e:93:
5f:43:33:1a:6e:6b:c3:96:d0:e8:34:28:6a:34:d2:14:fb:e4:
ac:58:7b:19:bc:d6:c2:3c:f8:8e:90:3c:21:7a:40:48:8f:e1:
6d:5b:c3:ee:71:92:24:2a:17:1d:0a:37:ff:4b:ab:49:2e:35:
cf:6f:7d:3e:6c:3a:bf:cd:60:7e:b2:c3:8e:f4:9a:c3:62:bd:
bb:4b:a3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:15:52 2025 by rpki-client