Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a7e6596a-c1c8-3d6f-bf9a-47a69280c9e4.roa
File: a7e6596a-c1c8-3d6f-bf9a-47a69280c9e4.roa (raw, json)
Hash identifier: POAM/JzlMQEa7XoKkwFywrcg7amqncTm2Lnz47sJwN4=
Subject key identifier: 56:A1:32:08:2D:03:F6:9D:8F:74:AD:6A:48:FF:76:8C:2D:6F:63:07
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F43285846E69AA94EB3597F9A0CA54180
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a7e6596a-c1c8-3d6f-bf9a-47a69280c9e4.roa
Signing time: Sat 17 Aug 2024 01:00:30 +0000
ROA not before: Sat 17 Aug 2024 01:00:30 +0000
ROA not after: Fri 15 Nov 2024 02:00:30 +0000
asID: 17916
IP address blocks: 20.139.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:e6:9a:a9:4e:b3:59:7f:9a:0c:a5:41:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Aug 17 01:00:30 2024 GMT
Not After : Nov 15 02:00:30 2024 GMT
Subject: CN=10888e02-0291-4625-9561-d8c6796f9a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:87:87:ca:53:03:19:6b:81:4d:63:c2:84:b6:
97:93:d0:6f:6f:69:7d:83:a0:88:f6:4e:15:61:06:
b5:f1:d0:75:bb:c3:2f:25:71:54:0f:79:5c:d4:2b:
16:ee:3a:14:33:ae:b2:be:33:7c:3a:bc:aa:6e:f7:
f1:06:01:87:71:8b:3d:17:a1:d6:c7:34:f9:53:5a:
c4:6b:13:0a:cb:64:00:cb:aa:61:63:4a:3a:4d:c3:
d3:ac:ca:d1:0c:39:1f:48:5d:47:a7:e2:29:d5:5c:
c4:7a:83:5a:f6:33:b5:92:3d:7f:27:45:fd:4b:f3:
e3:f8:dd:45:ca:eb:c2:6d:67:20:82:4b:f8:98:89:
94:3c:66:25:ff:3a:f5:ba:2b:e6:e2:54:97:d5:14:
08:c2:13:f6:f6:22:8f:99:31:52:ae:ea:0c:52:ce:
9b:09:86:44:1a:3e:57:5b:5a:86:09:27:9a:d8:79:
68:8f:48:d0:94:5e:05:6a:62:67:5c:89:4f:5b:e4:
29:d3:8a:c5:c8:be:e4:dc:91:1a:6c:c8:5c:ed:f8:
07:36:62:52:0e:08:40:85:2a:b9:ee:b0:ef:55:f3:
4a:84:40:f7:91:48:54:bd:7e:56:9d:df:62:77:a0:
a6:6f:1d:e0:e2:1b:02:63:bd:8c:d5:27:ad:5f:e3:
d4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:A1:32:08:2D:03:F6:9D:8F:74:AD:6A:48:FF:76:8C:2D:6F:63:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a7e6596a-c1c8-3d6f-bf9a-47a69280c9e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.139.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:18:47:f3:a6:1f:47:af:b4:dc:ab:b5:b1:b7:d1:dd:6c:76:
01:bb:aa:88:ef:9a:54:37:19:dd:fb:42:91:05:84:32:55:5e:
7c:7c:83:9f:e2:18:5f:78:48:29:0a:df:c6:e3:ac:d4:d7:7c:
36:e6:e7:c4:b1:2b:7a:0c:54:4d:c4:8c:db:60:7d:7e:9e:34:
8e:ff:60:7d:ba:ad:58:34:b6:a7:aa:f5:a1:f0:aa:5b:87:0f:
05:aa:14:72:0f:4f:98:c5:d2:2d:84:fc:d6:55:8f:eb:2a:34:
18:d2:c3:cc:dc:2a:02:d9:d9:2b:cb:32:7a:1f:ce:fa:1c:5f:
b9:64:c6:16:77:3a:96:1f:6c:61:ad:8f:1c:c3:d0:92:89:b3:
6a:b7:36:6c:cd:27:01:43:77:96:b0:9a:26:72:40:3b:1d:06:
ce:61:7d:43:82:41:69:f5:85:6a:01:54:71:ba:b6:e0:b5:bb:
31:07:d4:32:67:f5:7e:44:70:00:a3:db:bc:f3:c0:c6:e1:4a:
49:79:68:df:5f:91:23:fd:b8:ee:b1:96:3a:98:70:a9:64:bb:
77:08:b2:d7:5a:bc:be:7f:f5:8f:ea:e6:07:60:41:60:aa:19:
bb:28:cb:15:65:66:bb:db:b9:3b:2e:7f:d6:8c:3e:be:dc:67:
85:6a:aa:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:45:43 2025 by rpki-client