Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/38a498ff-f6f6-3d54-9bfa-8f7ff226fa4e.roa
File: 38a498ff-f6f6-3d54-9bfa-8f7ff226fa4e.roa (raw, json)
Hash identifier: u9vcSouCyVWv4zr1aKy7yNl7UM5VXFfpYO8lj0JiGsg=
Subject key identifier: 01:F8:CC:5E:69:81:24:C6:86:0B:F1:73:AF:9E:0D:F6:C0:E7:D8:88
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F43285848B35B6C718EAEEDB92D11B0C0
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/38a498ff-f6f6-3d54-9bfa-8f7ff226fa4e.roa
Signing time: Wed 29 Jan 2025 02:00:39 +0000
ROA not before: Wed 29 Jan 2025 02:00:39 +0000
ROA not after: Tue 29 Apr 2025 01:00:39 +0000
asID: 3356
IP address blocks: 20.133.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b3:5b:6c:71:8e:ae:ed:b9:2d:11:b0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Jan 29 02:00:39 2025 GMT
Not After : Apr 29 01:00:39 2025 GMT
Subject: CN=e491b3d3-c722-4299-863c-c4fe653b68c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b7:0e:ff:68:10:b7:8a:72:87:e8:4f:cf:ec:
69:4e:2c:17:ca:9f:62:19:ac:b7:24:55:e4:66:b2:
b4:fc:55:4f:d1:e5:e9:4d:d9:1e:7b:f4:16:ee:d6:
c1:9b:8b:82:01:71:72:35:12:6f:6c:32:bc:0d:d4:
b4:2a:8c:2f:71:43:ff:04:91:53:1c:78:6d:46:08:
ac:50:32:81:a6:16:f5:c2:c0:95:69:09:0d:5b:06:
a2:22:aa:d8:5b:55:5d:50:bb:74:50:af:d4:8a:66:
70:00:6e:be:32:dc:0d:7d:d6:72:5d:32:d7:2b:79:
a8:37:6c:ed:ac:bc:7d:8d:c4:90:f2:06:4a:1c:7f:
74:9b:e0:75:d1:47:bc:e4:f5:9d:a9:2d:b0:b4:67:
0d:52:c0:ac:4e:ef:9d:8b:6a:65:8d:93:95:d1:a2:
d0:3e:69:ac:d4:d3:37:52:e3:d7:84:09:11:39:57:
54:03:c2:30:69:ae:76:b9:e0:9d:27:68:cf:9d:5f:
db:f3:8a:ea:ac:42:7c:07:b7:80:14:37:ec:f2:07:
2e:4f:52:d1:36:62:1c:87:1c:43:e3:01:ec:50:86:
54:c2:9a:db:3b:69:c1:43:fa:e3:7d:82:5e:5b:57:
7a:0a:34:c1:35:d6:6e:1e:e3:c8:97:3f:d4:ff:24:
80:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F8:CC:5E:69:81:24:C6:86:0B:F1:73:AF:9E:0D:F6:C0:E7:D8:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/38a498ff-f6f6-3d54-9bfa-8f7ff226fa4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.133.241.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:d6:10:2e:24:7e:72:e5:3b:73:43:34:97:c5:b3:fb:22:36:
ca:2f:ef:af:89:b9:9a:aa:2e:70:78:3a:ac:98:ad:87:79:b5:
1a:16:4f:31:ba:1a:5b:fa:94:6f:94:4d:78:ab:87:49:3f:ee:
7c:3a:30:bb:c0:6c:4a:62:b6:d9:1e:16:a9:f3:15:e7:77:5d:
7a:8e:bd:02:51:e5:93:7e:cf:6d:3e:fc:a0:4d:38:a4:93:e1:
93:be:f2:d1:cd:ac:8e:b8:8c:d3:30:df:a6:1f:72:ae:94:46:
06:e7:c9:f8:e1:f8:6c:ec:c5:5e:77:9a:ad:82:ed:74:93:25:
fc:98:62:82:54:67:aa:be:3e:df:c5:f2:fd:28:75:fa:7c:44:
c4:9e:a0:0a:f8:5a:b5:ee:eb:99:07:de:0c:88:e0:44:61:ab:
08:38:3e:6d:23:3e:3d:67:be:ba:7c:a4:db:94:e0:68:f0:9e:
85:9a:f1:ea:7e:61:52:41:39:d1:5e:4c:73:a5:85:a5:91:c9:
8f:33:23:04:42:a5:dd:a0:12:d5:e6:49:b6:79:11:1f:30:e5:
1f:27:95:a8:0b:59:4d:91:93:ce:95:83:1d:eb:92:43:a4:5d:
c0:b8:dc:31:12:f8:56:24:d5:e7:0a:5b:95:b7:82:49:27:a7:
bf:9f:30:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:16:05 2025 by rpki-client