Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/df6d4d91-007f-397f-8314-44ac538c57e3.roa
File: df6d4d91-007f-397f-8314-44ac538c57e3.roa (raw, json)
Hash identifier: MrPmS19rdKNYjFW4k01aK4SfG4NV5KJg284yjy2wxiY=
Subject key identifier: E9:DF:CE:F2:2C:67:6E:1B:02:A6:63:2C:46:25:A2:60:3D:9A:CB:76
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584879D9E2609CE92587B7A2DE80
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/df6d4d91-007f-397f-8314-44ac538c57e3.roa
Signing time: Wed 08 Jan 2025 11:38:42 +0000
ROA not before: Wed 08 Jan 2025 11:38:42 +0000
ROA not after: Tue 08 Apr 2025 10:38:42 +0000
asID: 22562
IP address blocks: 20.133.40.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:79:d9:e2:60:9c:e9:25:87:b7:a2:de:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Jan 8 11:38:42 2025 GMT
Not After : Apr 8 10:38:42 2025 GMT
Subject: CN=e2c531cf-2596-4cea-9fad-b73691c84887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a9:f6:66:70:44:7d:f5:ba:7c:e7:02:8b:e1:
4d:7a:89:b1:8e:1f:e4:aa:87:f0:8e:3f:a1:ae:94:
66:be:0c:36:c3:52:e5:b8:97:27:92:a0:86:73:8c:
74:0e:61:d6:aa:4f:e4:e2:3f:e9:5c:47:b9:85:5b:
25:7b:16:07:43:a8:9e:ce:87:56:7b:6b:4a:89:09:
17:41:ad:8e:57:fb:89:43:41:cd:cd:ec:02:45:d9:
a1:b6:9c:63:e7:45:ac:07:c5:8f:50:e7:4f:c8:bf:
c3:8c:78:df:fb:21:ea:94:8e:f1:f0:0f:75:b9:f5:
05:85:fd:df:57:37:2f:50:2f:41:bd:ea:58:6e:ac:
22:2b:64:bd:c1:66:1a:2a:ae:42:6f:bc:9c:ad:2f:
a6:b0:8c:f8:94:5a:d7:0c:a8:88:7a:32:3c:61:57:
e0:99:63:a0:de:02:ee:bc:35:f8:ed:51:0d:fc:1e:
aa:8b:9b:9e:57:f1:d9:cc:be:7f:7a:fe:0a:93:35:
b5:03:1a:89:02:e1:0a:4a:fe:c0:9b:50:4b:38:9e:
08:a5:3b:08:48:15:87:f2:2a:40:26:b4:72:1b:aa:
22:81:b6:90:d1:ca:05:77:ca:04:04:17:71:31:fd:
24:cc:c8:26:4b:84:b0:20:1a:d6:73:33:ce:e2:78:
10:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:DF:CE:F2:2C:67:6E:1B:02:A6:63:2C:46:25:A2:60:3D:9A:CB:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/df6d4d91-007f-397f-8314-44ac538c57e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.133.40.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:6b:97:6c:02:7a:57:e6:5e:fc:b1:8f:b1:f5:10:43:52:c9:
38:25:98:fc:a1:13:57:68:fd:35:c4:95:39:80:a0:fa:9e:58:
59:0a:a6:8c:05:cd:11:e4:52:2f:5a:8c:77:83:00:6d:6f:15:
55:ad:3a:4e:bd:5d:88:53:7f:5f:ea:cd:2d:11:17:40:ac:4d:
77:c9:39:d0:b4:96:f9:3a:f1:43:a8:24:b7:0b:f8:34:28:5f:
16:09:a2:cd:c6:82:1a:9c:eb:35:82:43:d3:f4:49:7b:25:5f:
1f:f8:fe:58:49:d3:2d:c8:5b:a8:28:df:cc:53:88:a7:2b:5c:
57:62:0b:85:72:ba:d3:8a:1f:ea:b6:3a:9b:de:18:6c:cd:bd:
f8:25:8c:88:bb:25:2c:0f:50:13:77:6e:c3:1c:61:31:25:b8:
78:4e:5b:5d:4c:de:9d:c8:60:17:4b:a9:93:43:27:70:88:2b:
c9:85:92:09:2e:b6:c8:15:79:ae:84:3c:c6:79:92:09:3c:73:
9f:3f:3b:e9:d3:28:6b:0c:9a:20:1e:37:76:90:57:c1:29:d0:
7a:96:ee:a5:17:ea:58:f9:04:7b:4a:88:00:58:62:1d:30:4a:
58:b5:66:d4:8b:57:f2:cc:c1:72:c5:6c:a1:6d:74:0e:51:54:
39:6a:51:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:06:12 2025 by rpki-client