Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/32054d0b-077d-3e96-8773-c1690e50a953.roa
File: 32054d0b-077d-3e96-8773-c1690e50a953.roa (raw, json)
Hash identifier: suu/yiuTE9+W9yWx2Hy6ef59iaoCmnLMDj6vEj+iWuk=
Subject key identifier: BB:8E:35:43:AE:65:4D:6F:C8:4A:1F:24:58:65:5C:97:29:F7:20:01
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F43285848D944E322599FAF6B746C3120
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/32054d0b-077d-3e96-8773-c1690e50a953.roa
Signing time: Tue 11 Feb 2025 15:56:06 +0000
ROA not before: Tue 11 Feb 2025 15:56:06 +0000
ROA not after: Mon 12 May 2025 14:56:06 +0000
asID: 202
IP address blocks: 20.138.224.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d9:44:e3:22:59:9f:af:6b:74:6c:31:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Feb 11 15:56:06 2025 GMT
Not After : May 12 14:56:06 2025 GMT
Subject: CN=4b9a72a4-38b3-45a2-91f6-d97b2419f625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:65:8a:ce:bc:21:47:63:f9:7a:ed:b7:f7:d1:
cc:25:53:75:7d:cf:1d:ff:a7:a2:8e:a9:f3:51:9d:
9e:e3:77:5c:9b:ad:35:92:1a:2d:ad:af:90:c6:2a:
90:91:66:6e:d5:23:cb:65:06:09:28:de:f5:72:2e:
85:5b:88:81:07:1d:4f:84:31:57:cd:4e:ff:5d:25:
52:7a:c7:f6:8b:4f:37:fc:1c:b7:fd:64:8d:2a:9c:
c1:2c:9a:bd:c5:f8:88:9d:94:1d:d7:91:ee:12:69:
55:2b:2c:53:ce:aa:ed:14:3a:3a:4c:80:f4:c9:d9:
63:ab:d6:6d:f7:f8:45:65:92:f8:1c:71:68:2b:43:
6b:52:09:e9:b8:8a:3b:76:da:c3:bc:dc:07:e0:ba:
72:7c:e3:61:7b:64:ed:a6:47:42:d2:db:45:a9:96:
af:10:3a:d7:c7:2e:42:81:af:56:84:32:b6:fd:aa:
6c:bb:3d:dd:cd:5e:cb:4d:6a:d9:1b:59:8b:3a:3a:
93:8d:4a:02:b5:12:a0:8c:00:2c:f9:c9:5e:11:9e:
93:17:bc:03:fc:ff:48:96:14:29:b9:9e:2c:2e:1e:
b8:64:07:34:4a:88:df:7c:3a:3b:ac:a9:28:01:0d:
f5:c2:b4:a3:0d:11:ce:d8:46:14:36:75:bd:64:71:
27:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:8E:35:43:AE:65:4D:6F:C8:4A:1F:24:58:65:5C:97:29:F7:20:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/32054d0b-077d-3e96-8773-c1690e50a953.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.138.224.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:08:b6:52:96:c3:1b:ac:51:4a:1c:e3:05:2c:48:6f:86:41:
6e:05:22:a5:10:5a:18:06:18:94:1e:2f:e6:f5:30:1e:80:7a:
a6:8a:eb:7a:d8:e3:9d:87:f4:cb:4a:d0:fe:d8:11:47:4b:3d:
75:a0:c7:69:87:e8:ca:7f:2a:c2:cd:84:21:85:52:8d:c2:ba:
9b:89:d8:23:c7:04:54:0b:d1:6f:0e:e7:e5:91:29:fc:37:b3:
d0:c6:f5:96:25:31:2f:dd:d3:d6:33:d6:8a:15:86:f7:02:ae:
1c:ea:09:b3:68:3c:63:80:92:24:6e:0e:5b:2c:a0:03:a7:8c:
20:3b:ce:f1:bb:06:b0:37:9a:e9:73:3f:98:c7:78:3e:30:93:
69:93:77:a5:f6:46:99:51:c1:4b:55:bb:9c:23:5b:13:a6:3d:
ae:8b:16:8e:13:d2:6a:1f:5b:a7:cf:a9:ae:d0:4e:95:27:9c:
0d:65:80:10:52:8b:b8:c1:74:da:7d:38:af:b9:69:ff:45:26:
13:b5:48:55:cd:68:c7:58:74:95:4d:f9:36:df:db:e4:89:a7:
b6:8e:f0:33:69:29:ca:ad:7e:00:05:6e:6f:00:e0:31:1c:2d:
7c:42:af:b7:93:42:a9:90:28:d0:9d:b0:42:ce:3c:05:7b:32:
c9:de:3d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:47:24 2025 by rpki-client