Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/420885af-6fb8-38d7-93e0-904cfcdcc94c.roa
File: 420885af-6fb8-38d7-93e0-904cfcdcc94c.roa (raw, json)
Hash identifier: 3tnPVkt9IrLOX/1SGt/DAeDeHFEfFhGDkH3lafCXkBU=
Subject key identifier: F1:91:9B:3F:38:DC:A5:FB:3B:B3:F2:53:9C:89:73:25:4D:87:3C:11
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F432858466AD9AF7EC287758C741CE5E0
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/420885af-6fb8-38d7-93e0-904cfcdcc94c.roa
Signing time: Wed 03 Jul 2024 17:07:18 +0000
ROA not before: Wed 03 Jul 2024 17:07:18 +0000
ROA not after: Tue 01 Oct 2024 17:07:18 +0000
asID: 202
IP address blocks: 20.137.14.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:6a:d9:af:7e:c2:87:75:8c:74:1c:e5:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Jul 3 17:07:18 2024 GMT
Not After : Oct 1 17:07:18 2024 GMT
Subject: CN=31b7af16-8d85-4e6a-87ea-6b5dc9baa9d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:30:ff:b1:48:bd:3b:5c:94:c9:d2:c0:48:48:
4f:25:78:2f:88:44:b6:76:79:f6:3e:3c:61:b3:4e:
c1:04:ec:25:1f:d2:90:96:be:e0:08:f3:8b:8a:44:
48:d2:97:83:45:ae:41:73:aa:9e:a4:3c:11:5f:f2:
c3:00:33:d3:ca:39:00:59:b0:73:d3:b5:86:ab:17:
3c:b9:67:90:41:df:36:be:af:2c:a0:79:0b:66:12:
0e:9d:4c:54:05:20:de:65:4a:da:3c:93:7a:3f:93:
88:75:11:ee:a6:01:5c:b3:85:af:df:4c:16:95:c5:
9b:f8:1b:d8:c2:4f:3a:ab:50:3c:31:0e:a0:45:2f:
88:db:36:f9:a5:5d:57:b2:48:91:7d:26:7f:da:47:
76:ab:3a:4a:f9:84:1a:6f:1b:98:83:07:aa:b5:35:
33:26:c9:76:53:7d:13:f6:2e:dd:34:f1:b0:82:b9:
d9:d1:7a:6b:94:51:e1:17:67:e6:13:f8:55:9d:d5:
b8:3b:7c:f1:c1:98:1b:c7:b6:a9:76:cb:c3:1b:ce:
62:1d:cb:4c:9c:93:6b:45:eb:8a:3b:bf:dc:40:36:
64:05:42:84:6b:81:90:47:0a:e6:d0:b3:11:75:7c:
bc:e6:c0:44:9b:05:34:95:10:ca:04:19:94:bc:44:
da:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:91:9B:3F:38:DC:A5:FB:3B:B3:F2:53:9C:89:73:25:4D:87:3C:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/420885af-6fb8-38d7-93e0-904cfcdcc94c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.137.14.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:67:a3:04:6c:67:c3:55:24:c3:72:f3:e2:2a:96:be:65:60:
b4:36:c8:13:51:cf:ee:99:70:e3:82:8d:76:be:dc:41:fd:bf:
21:b3:7b:f8:b1:d8:82:a3:e2:b1:dc:a6:f2:6f:be:5b:5d:64:
0e:9e:87:0a:04:6e:85:d3:b6:d2:36:ef:45:b5:d6:a4:2f:25:
45:da:0d:da:32:58:be:1f:c2:a4:83:8a:a1:e6:ba:1f:7d:16:
f3:1c:81:32:be:57:02:f9:cc:15:3b:4d:9c:cc:c8:d0:29:99:
bc:3c:09:22:3f:9a:ad:1d:70:7b:d7:b1:7f:4b:52:92:71:17:
9d:05:88:bc:a6:28:3b:c0:f1:03:96:f0:46:e2:cf:15:dc:a5:
10:13:82:97:85:8a:16:5b:c8:2c:8f:03:9c:09:10:0f:22:9f:
49:18:55:84:52:d6:f5:1a:31:9a:b0:6b:7b:94:52:db:dc:1e:
b8:47:2a:dd:37:2a:59:44:48:ab:fd:4c:bf:77:a5:6e:85:32:
84:d4:d3:52:03:56:b3:50:a7:72:f3:89:9b:8f:d9:f7:b5:90:
9d:0c:b3:07:c6:62:7f:eb:e3:cf:73:81:57:ce:e6:f5:21:68:
4b:33:df:87:7f:99:7c:7d:aa:f1:f7:41:3e:87:3d:2a:ca:55:
3b:aa:aa:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:45:07 2025 by rpki-client