Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/40d296d1-278c-3f5b-b993-eb056d922ec1.roa
File: 40d296d1-278c-3f5b-b993-eb056d922ec1.roa (raw, json)
Hash identifier: H7oreqc5Ait47QVAsztoAw3k81B18pm/NhwiF9uxtgM=
Subject key identifier: 48:24:6F:A9:49:5E:54:4D:A3:EA:35:A0:8A:1F:66:EB:DA:5A:66:A8
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F43285848D94726E2CAA4FCD3C09E9B40
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/40d296d1-278c-3f5b-b993-eb056d922ec1.roa
Signing time: Tue 11 Feb 2025 16:00:40 +0000
ROA not before: Tue 11 Feb 2025 16:00:40 +0000
ROA not after: Mon 12 May 2025 15:00:40 +0000
asID: 202
IP address blocks: 20.149.32.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d9:47:26:e2:ca:a4:fc:d3:c0:9e:9b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Feb 11 16:00:40 2025 GMT
Not After : May 12 15:00:40 2025 GMT
Subject: CN=8e3e268a-7ab4-4d84-bc77-c19b8974ee04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1e:04:b2:63:19:ed:7c:21:7b:ac:e6:7f:1d:
92:94:d6:93:bc:6f:e2:ce:91:50:d7:87:25:42:b0:
89:b4:39:57:34:1b:08:07:87:ee:3d:13:3e:1d:29:
2f:e6:ec:71:7e:ed:9e:4d:b6:d5:20:76:d9:35:32:
9f:66:9b:e4:b5:00:ca:23:34:46:a7:3a:5c:90:6f:
e9:1f:ba:38:68:46:40:c6:be:e2:05:e3:ac:01:fe:
03:f1:ef:3b:d2:75:57:a6:62:dd:ae:fb:87:7c:0f:
2a:8b:ec:6f:88:a1:58:3a:c3:f1:50:82:d3:51:63:
0f:b8:35:e6:3f:6e:bc:3a:ee:10:b2:4a:0d:c5:8c:
4f:ef:e3:8a:49:1e:1e:6f:ea:82:3c:18:a6:37:17:
f5:fd:00:b0:df:8d:20:c3:2a:50:20:ac:99:21:af:
13:70:39:89:86:3d:5e:be:17:76:33:4f:2f:1b:e5:
d0:43:47:5b:cc:ce:c4:01:9c:93:97:1e:9e:1b:a6:
89:ee:82:ff:06:71:cb:34:37:40:3a:ad:cf:c2:12:
fe:a3:cb:63:e0:4f:a8:4b:24:42:30:73:a4:c7:45:
40:79:af:25:dc:79:10:54:44:e9:7e:43:08:4c:1e:
f6:76:7f:a3:16:bd:94:bc:84:ff:c0:bb:53:57:1b:
69:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:24:6F:A9:49:5E:54:4D:A3:EA:35:A0:8A:1F:66:EB:DA:5A:66:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/40d296d1-278c-3f5b-b993-eb056d922ec1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.149.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:44:6e:06:8c:77:70:2f:cc:76:95:fb:51:0b:90:c5:e8:ec:
7d:c2:45:31:91:8d:26:b7:04:97:34:bd:e0:1a:98:65:e2:f9:
31:d5:b4:e0:f6:2b:fb:30:46:f5:fd:69:4c:cd:f3:d6:f6:60:
d9:70:24:04:b9:da:d2:f0:0a:fd:54:46:cd:52:b5:32:9e:f4:
41:92:83:87:c9:dc:cc:68:26:ad:73:77:31:0e:fe:0c:44:08:
71:1e:85:91:88:28:9f:06:53:d8:16:31:88:ae:55:fa:a3:b3:
38:82:0c:ad:37:87:90:e1:e5:1c:62:4a:20:1e:37:90:48:cd:
f6:40:ba:5f:2a:e1:a3:d5:6f:0a:c0:23:f1:e5:ef:df:09:63:
64:4e:d5:6d:15:e5:33:33:dd:da:57:bb:73:e5:7b:57:46:18:
fe:08:84:f7:76:1b:84:12:4a:9f:ef:50:2b:cf:43:1f:2c:d6:
83:11:a0:6b:c7:01:3c:c8:76:d8:d9:7a:2e:51:6b:0e:69:bb:
62:7b:ca:c3:88:71:24:d0:9e:0e:18:16:ae:c7:0c:54:f1:6d:
4f:ea:15:db:ac:32:91:df:76:be:a4:85:f1:54:e3:4d:46:77:
cb:25:b6:a3:b5:1b:9e:d5:c3:6b:18:a2:40:8c:9f:4e:15:49:
aa:a6:21:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:41:48 2025 by rpki-client