Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/4f87b28e-b073-3165-93da-edbf13ef0a9d.roa
File: 4f87b28e-b073-3165-93da-edbf13ef0a9d.roa (raw, json)
Hash identifier: YF3BkESi97kPsCVUhD/y0bmiF7nAWEWsCZoMd0CIRCQ=
Subject key identifier: B4:65:A3:42:19:FF:1D:85:BC:AE:21:0A:6F:78:FA:6E:46:7B:4E:AC
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F43285848F7C13B3A854B79CDB0A7E880
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/4f87b28e-b073-3165-93da-edbf13ef0a9d.roa
Signing time: Sat 22 Feb 2025 14:00:52 +0000
ROA not before: Sat 22 Feb 2025 14:00:52 +0000
ROA not after: Fri 23 May 2025 13:00:52 +0000
asID: 202
IP address blocks: 20.134.2.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f7:c1:3b:3a:85:4b:79:cd:b0:a7:e8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Feb 22 14:00:52 2025 GMT
Not After : May 23 13:00:52 2025 GMT
Subject: CN=7889b015-5619-45e1-9e4f-36dce4116664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e1:72:a4:1d:eb:e3:89:0e:50:4a:39:e6:16:
63:5a:b9:7f:45:de:5c:56:c2:21:eb:05:20:65:de:
d0:d3:e8:cb:6a:20:d5:ef:19:c7:6d:25:cb:96:b9:
11:19:8f:b1:0e:1a:b1:4c:dd:46:7e:db:ad:63:a3:
fc:26:24:06:9b:94:b5:d8:64:7e:9c:23:aa:ed:c0:
70:98:ca:0f:82:7c:44:84:89:45:ed:4a:23:61:35:
34:a3:e7:1f:87:43:10:f5:01:e0:5b:7c:58:af:3b:
13:e0:76:ad:f0:03:8c:7d:01:74:67:c3:27:77:06:
49:49:4c:ff:2d:da:87:f6:0c:73:25:39:92:ea:60:
57:99:d4:6d:cb:07:86:d0:85:19:d4:2c:22:b9:ab:
05:7b:6b:91:94:73:b7:c9:43:a1:68:ee:14:bf:9b:
4f:df:f7:bf:28:b9:22:c5:93:a3:f4:bc:8d:1c:a2:
28:a4:9c:4f:f6:61:76:bd:2c:73:df:25:ca:68:34:
f1:1a:d4:c0:e7:12:0e:af:35:0e:1c:22:d4:bf:d7:
af:53:b5:05:52:aa:ba:9d:d3:08:0e:e7:64:bb:1f:
87:6a:28:c8:15:56:e6:3b:8e:2d:c6:45:50:bf:7b:
ba:4a:43:a4:a5:f0:f6:c9:69:13:68:d8:91:57:8b:
18:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:65:A3:42:19:FF:1D:85:BC:AE:21:0A:6F:78:FA:6E:46:7B:4E:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/4f87b28e-b073-3165-93da-edbf13ef0a9d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.134.2.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:95:5c:18:e2:a8:53:76:f1:e9:f8:07:41:30:86:b4:ce:5e:
48:6f:46:77:12:2f:f5:f2:5a:46:ea:31:23:e5:e5:37:11:f9:
e4:2e:46:50:50:f3:3b:66:2d:44:a3:5b:43:6b:85:42:fc:33:
b6:b3:76:d7:4b:0a:4e:de:cf:07:db:92:49:b1:9e:62:f8:c7:
81:77:a4:81:37:97:ff:93:07:6b:85:d4:e8:b5:79:0b:2a:c8:
af:b8:12:a7:c8:0e:d8:55:c2:dc:b5:33:54:9c:6a:03:e0:ff:
13:b0:3f:d4:2d:20:4c:b0:62:45:6b:88:cc:33:be:50:81:12:
71:79:84:d5:2d:93:a8:7c:5e:5d:1f:9a:91:05:51:1f:07:0f:
c0:94:60:5d:ec:14:4e:c3:99:86:23:e2:a8:54:51:cb:11:5c:
69:42:62:2e:a1:5e:7e:c2:d6:68:4b:58:34:2e:70:49:65:a4:
64:4d:34:1a:e7:a2:b2:6d:fb:81:9c:80:e7:34:b4:fb:38:51:
d4:67:46:1e:5f:ba:b0:c6:37:e6:e7:7e:b1:1f:10:39:80:2c:
00:24:db:cb:02:3e:9d:d9:f9:c9:6d:bf:7b:11:47:f3:25:00:
f5:f6:0d:09:77:b6:a0:b5:9b:1c:46:98:7b:ed:98:ca:09:01:
04:93:ad:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:45:09 2025 by rpki-client