Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/ab0c58d2-a2e3-3c49-b6d3-23cc6f2a524c.roa
File: ab0c58d2-a2e3-3c49-b6d3-23cc6f2a524c.roa (raw, json)
Hash identifier: KSKprQmG7cj9ShROfHq0NvpMLLwp/CwlhCQAy5Ok7WI=
Subject key identifier: C7:7E:01:27:C8:FE:25:9F:51:DD:AF:57:FA:1A:C7:45:D1:B2:CE:52
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F43285848B35B6BE86C55927CD5522200
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/ab0c58d2-a2e3-3c49-b6d3-23cc6f2a524c.roa
Signing time: Wed 29 Jan 2025 02:00:39 +0000
ROA not before: Wed 29 Jan 2025 02:00:39 +0000
ROA not after: Tue 29 Apr 2025 01:00:39 +0000
asID: 202
IP address blocks: 20.133.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b3:5b:6b:e8:6c:55:92:7c:d5:52:22:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Jan 29 02:00:39 2025 GMT
Not After : Apr 29 01:00:39 2025 GMT
Subject: CN=b9f523a4-bfbf-40e7-9255-443df31e2f80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:01:ac:ee:7a:8f:22:e5:d6:4e:9c:22:55:5f:
38:dd:6c:01:3e:d7:bf:72:6f:83:db:b9:e3:da:b9:
fd:a7:67:1c:5a:ae:3b:ff:de:2d:88:fa:4d:38:f2:
69:8f:51:c7:3d:b6:47:f2:8b:55:61:94:b5:25:27:
4d:52:d3:e0:02:d1:44:14:da:ac:9a:fa:b6:26:ce:
e6:6e:88:49:75:84:dd:32:e4:c3:a1:c6:0f:d1:c9:
24:34:02:4b:cc:3a:6a:10:00:3b:bd:47:d3:c9:63:
98:15:34:24:77:e1:3b:c1:43:60:b5:18:99:ae:14:
6e:64:fc:f9:68:dd:4c:fe:5e:20:05:b2:b1:2b:6f:
56:28:6b:53:22:be:a3:b9:c7:f7:72:13:01:3c:f2:
39:80:fe:a2:ca:6c:4a:89:5b:35:92:34:e5:f0:e7:
1f:47:35:b2:bb:bc:b7:2f:3b:2d:d9:8a:64:17:82:
94:76:6f:29:ab:a0:cb:72:05:88:30:b6:85:ed:3f:
c8:af:99:9b:8b:8f:7b:2a:72:55:e3:8e:a7:d4:eb:
6e:72:ac:bf:3b:bc:61:dd:be:13:30:ae:bf:32:3e:
ca:f6:87:b5:b2:f4:56:a6:fe:6d:f6:6f:24:07:84:
74:8a:8b:8a:ce:ca:f6:7c:7e:7b:89:07:e0:fa:68:
be:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:7E:01:27:C8:FE:25:9F:51:DD:AF:57:FA:1A:C7:45:D1:B2:CE:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/ab0c58d2-a2e3-3c49-b6d3-23cc6f2a524c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.133.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:4b:29:65:b4:a6:83:e5:bd:95:df:b4:53:bf:6c:e4:e3:c6:
e0:96:4b:1d:33:e9:ee:50:47:d9:0e:72:c8:0b:17:4a:c6:55:
96:51:5c:e0:84:99:f8:e3:36:0d:9c:13:4d:dd:34:71:11:67:
8f:5d:0c:89:27:2f:1e:f7:60:1b:be:52:ac:ec:19:ef:c1:16:
19:2c:ae:33:32:83:d3:52:3a:91:7c:32:da:98:37:a4:37:93:
b3:84:91:c3:72:65:79:12:58:df:af:5c:50:3a:06:73:dc:8e:
5b:b3:f3:05:61:71:17:e7:44:be:99:28:ad:3c:52:c8:82:cf:
1c:b5:53:81:38:77:80:53:63:09:94:d6:77:c8:7e:09:f8:12:
c2:e5:5c:dd:95:81:30:1e:67:d9:5b:eb:96:08:a3:6e:9b:ba:
13:27:43:18:c6:b1:3d:e1:48:ea:6f:c0:b0:db:e7:e5:79:a3:
d5:fe:e3:81:c6:6d:82:6d:01:44:46:f5:4e:75:58:09:2e:7b:
0f:35:be:28:f0:6a:49:4d:50:36:97:8d:ab:e6:d8:83:90:7c:
1e:c0:68:87:90:87:49:af:dc:4a:d1:43:c8:13:3c:13:d9:b9:
0d:27:c2:94:aa:79:b8:8d:10:f7:19:d6:bf:58:1a:66:48:39:
71:16:75:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:39:50 2025 by rpki-client