Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/20f241e7-8863-380a-8a0f-692f0df5d298.roa
File: 20f241e7-8863-380a-8a0f-692f0df5d298.roa (raw, json)
Hash identifier: t6wZNzFMNYHWD7ld6FjSIQiTCp0XJCrhzoWGlZzxuGE=
Subject key identifier: A7:CC:7C:2B:54:64:36:83:79:E0:BB:8B:1B:FB:E9:9D:34:A3:D4:49
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584659DAE3D93429574CCCADA400
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/20f241e7-8863-380a-8a0f-692f0df5d298.roa
Signing time: Thu 27 Jun 2024 15:00:59 +0000
ROA not before: Thu 27 Jun 2024 15:00:59 +0000
ROA not after: Wed 25 Sep 2024 15:00:59 +0000
asID: 4237
IP address blocks: 20.137.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:59:da:e3:d9:34:29:57:4c:cc:ad:a4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Jun 27 15:00:59 2024 GMT
Not After : Sep 25 15:00:59 2024 GMT
Subject: CN=b471e5ce-d92f-4aef-adaf-941589b08cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:9f:f9:3e:83:52:e7:f5:7f:8b:3e:1f:1a:37:
79:51:df:4f:e7:aa:a8:40:54:77:28:dd:37:82:5d:
be:30:87:dd:db:15:18:68:0a:1b:00:48:7b:47:b1:
6f:0a:74:65:ac:3a:ec:98:9a:b1:3a:6c:12:80:eb:
03:4d:67:64:88:e7:42:5c:3f:4b:24:f8:2d:f4:95:
f1:1f:a5:22:6a:55:2c:b4:65:06:c0:49:5f:78:22:
48:f1:16:fb:51:7e:26:e3:69:6d:94:05:81:98:39:
66:cd:4e:ea:5b:e9:d2:83:ce:e6:f7:72:de:4c:b8:
91:18:56:7e:2c:3e:ca:09:9c:4c:4f:78:36:e4:22:
b6:f6:d3:7c:c5:87:7b:92:4a:7c:9e:e5:19:94:5f:
a0:82:c2:b5:48:f1:c0:23:cf:de:ff:ce:5d:36:64:
1e:9c:d2:3b:49:fb:ec:98:00:44:ac:62:0f:3b:c8:
82:c8:12:aa:05:2e:31:9f:07:8e:5b:e3:df:77:e7:
12:4b:0b:6e:fc:6c:08:63:75:67:ae:39:4c:05:1a:
a5:64:6a:7e:8f:a4:5a:47:b3:2f:c8:59:2d:0a:da:
da:73:72:c6:4c:c5:30:9b:7d:33:5c:a1:d8:08:66:
20:50:d7:1f:07:72:b5:28:a1:a2:86:94:cb:a0:ef:
35:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:CC:7C:2B:54:64:36:83:79:E0:BB:8B:1B:FB:E9:9D:34:A3:D4:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/20f241e7-8863-380a-8a0f-692f0df5d298.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.137.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:ee:d2:21:82:18:7f:46:b0:ce:63:79:cb:ec:03:02:7f:66:
46:07:2a:86:b7:0e:37:2e:1c:ba:31:ff:52:cf:7c:f3:c0:ce:
24:f2:d4:7d:d0:b8:8a:68:72:74:b1:b9:a8:6e:fa:dc:6b:76:
61:0d:48:50:be:6a:d7:58:8a:4f:d9:e3:d9:79:90:ea:8f:df:
b7:79:30:34:d3:b0:85:b0:4f:04:1f:d0:44:b5:d2:09:24:7f:
d1:47:cd:7b:69:52:a7:8b:fe:5b:b0:77:04:ef:25:e8:66:91:
c8:d2:21:14:29:53:bc:9f:20:01:97:fa:aa:2d:b7:7b:1a:da:
07:e4:e3:bd:99:4a:ae:9d:fc:9c:9e:97:2c:fc:b8:d3:08:ab:
e0:04:1c:01:38:2d:73:b0:a4:c1:e8:38:61:ab:e9:3f:d2:c0:
8c:b3:dd:4e:df:6b:8f:7f:99:8c:eb:51:d2:ca:47:28:db:09:
00:67:b8:64:68:65:0b:9c:26:15:73:52:f5:3d:4c:2f:39:37:
2e:a8:51:37:17:98:75:79:ea:51:d4:1c:eb:5c:1d:a5:8e:69:
39:b3:51:e7:1d:40:47:fc:6b:66:7c:ca:4a:cf:57:fb:38:49:
80:5f:42:c4:79:82:c2:fd:ab:88:11:48:eb:ea:f2:98:c3:27:
dd:3e:97:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:07:36 2025 by rpki-client