Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d367c865-6854-3070-b483-7b8dd9486e1b.roa
File: d367c865-6854-3070-b483-7b8dd9486e1b.roa (raw, json)
Hash identifier: L8n2sJeAUuBUzyYK6+AoCBTdL+rPitZPPXCDIpNsM1E=
Subject key identifier: CB:15:F2:6F:2B:6D:C7:64:52:87:E9:88:B7:CE:E2:DF:B2:7A:2E:69
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F43285846E69AA9190A83AFBF52F6FA00
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d367c865-6854-3070-b483-7b8dd9486e1b.roa
Signing time: Sat 17 Aug 2024 01:00:30 +0000
ROA not before: Sat 17 Aug 2024 01:00:30 +0000
ROA not after: Fri 15 Nov 2024 02:00:30 +0000
asID: 17916
IP address blocks: 20.134.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:e6:9a:a9:19:0a:83:af:bf:52:f6:fa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Aug 17 01:00:30 2024 GMT
Not After : Nov 15 02:00:30 2024 GMT
Subject: CN=fa98d281-4c59-425c-9e16-dbfb67a2957e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:51:a4:b0:d9:65:51:17:7e:af:74:38:c9:e5:
a9:ed:d8:bb:f9:a6:f2:ee:44:dc:13:9e:01:cd:29:
4b:11:8f:b1:71:a3:6f:e8:ad:19:00:05:60:c0:63:
e7:11:41:73:38:34:fe:68:d1:a4:3b:f3:c1:6c:da:
5e:f9:35:e9:bc:0e:88:d1:b8:c7:d8:c3:9f:59:ab:
c1:e0:7d:a6:92:ab:a3:23:b1:3d:de:20:d8:de:d3:
39:79:ef:e9:67:d3:be:a5:a5:6a:25:a1:b1:72:42:
7f:5a:02:5c:d1:50:38:c3:da:11:1c:99:9d:63:ac:
06:57:9b:cd:29:33:09:ce:46:68:23:d2:65:7f:53:
14:c9:19:bb:dc:b4:53:2a:2e:fb:1b:1d:73:e5:2d:
cd:5a:4e:a6:31:e8:9b:f0:3c:d9:71:a2:05:3d:04:
4f:36:cd:88:eb:d6:bf:af:a9:fc:f8:bd:74:7b:db:
e5:30:4c:7d:25:c8:a7:72:50:01:49:13:cf:4a:b3:
81:fc:73:ca:26:89:db:3e:d6:2e:ac:eb:ee:04:72:
22:ff:2f:f1:45:58:87:ad:96:a1:7d:2b:ff:b5:ac:
c6:26:12:84:ff:28:ec:0e:4e:6d:90:71:fc:22:11:
ea:50:18:6c:f2:2d:59:28:89:6c:ae:93:9d:c2:c3:
e9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:15:F2:6F:2B:6D:C7:64:52:87:E9:88:B7:CE:E2:DF:B2:7A:2E:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d367c865-6854-3070-b483-7b8dd9486e1b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.134.7.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:3a:96:9a:81:af:45:47:c7:45:4f:ec:48:71:36:53:b1:4d:
60:08:a8:65:b5:fa:0b:c4:6c:9f:db:1f:ec:25:29:8e:e5:91:
fc:45:5b:ac:2e:6f:24:1e:ca:7b:a2:13:1e:9d:b1:8c:68:b9:
21:d9:c9:76:ce:53:1e:ab:bd:fa:04:08:49:ea:f6:52:58:64:
41:86:c3:12:ea:ce:d7:36:26:27:b2:5a:f7:46:c6:71:6a:e0:
42:7d:0c:fd:8d:e7:46:dd:91:04:03:9d:9c:0c:89:38:21:70:
6a:89:ba:62:b1:d3:66:17:c6:d3:88:97:5f:63:b2:a7:82:c3:
af:72:31:c4:75:ad:eb:36:fe:56:29:a4:19:59:b0:b7:cc:7f:
2e:88:46:9a:24:c5:3f:3a:1b:50:0f:31:fd:c4:aa:1d:a6:2a:
3c:fa:23:3f:26:7e:d5:ce:57:d7:b6:b7:a0:9f:8c:f9:8d:df:
90:15:db:64:04:5a:3e:0c:56:59:9f:24:4f:4d:7d:1f:e7:02:
a0:19:ee:40:e0:e3:c3:4b:af:2c:3a:e3:88:63:0e:70:26:e6:
b8:41:a0:13:48:1f:af:ae:16:b2:07:60:ed:9d:f4:e6:65:38:
92:97:c9:c4:42:d0:2a:78:d7:34:04:1e:04:98:95:85:4f:89:
8c:66:d2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:30:36 2025 by rpki-client