Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e2d17d71-f6f8-3be5-ad2d-8838171609f5.roa
File: e2d17d71-f6f8-3be5-ad2d-8838171609f5.roa (raw, json)
Hash identifier: Jd0lmjdKYTknr68iSF/LHmrvc6QT7LhcAbyWbpYTO5w=
Subject key identifier: 1F:9A:34:D7:3E:BD:7B:47:3A:EB:17:CB:DD:5A:94:CF:B8:B0:A0:BE
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F43285848B35B6BD56F69E72AAB865B80
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e2d17d71-f6f8-3be5-ad2d-8838171609f5.roa
Signing time: Wed 29 Jan 2025 02:00:39 +0000
ROA not before: Wed 29 Jan 2025 02:00:39 +0000
ROA not after: Tue 29 Apr 2025 01:00:39 +0000
asID: 3356
IP address blocks: 20.133.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b3:5b:6b:d5:6f:69:e7:2a:ab:86:5b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Jan 29 02:00:39 2025 GMT
Not After : Apr 29 01:00:39 2025 GMT
Subject: CN=00dedd35-0a22-4310-95b9-82f6e4f1abd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bf:cb:62:19:18:7c:2c:0e:a9:20:b4:4d:e0:
96:63:25:9c:49:f4:15:b8:25:82:d6:8f:4e:79:7f:
ba:1b:56:68:68:b3:15:6c:9e:df:40:42:d5:73:de:
dc:71:90:56:db:5a:c7:e3:46:7a:07:46:79:1a:85:
b4:87:3a:01:00:8e:81:3b:f5:3f:a3:ad:26:17:95:
fb:f9:98:6c:21:20:61:84:ee:1f:bd:87:b8:25:94:
90:fc:6d:e9:94:93:64:b7:fe:52:c1:a6:4b:fa:e2:
ef:67:c1:df:63:2f:95:69:81:5f:63:78:f0:7b:61:
4a:5e:ab:54:45:f2:4b:a0:cc:8b:ee:c9:a7:34:b3:
4b:9a:a1:9c:2e:9e:4d:5e:6e:f7:00:f6:71:f0:e9:
c1:1f:70:a1:11:8e:dc:1b:eb:12:2c:91:5c:f9:6a:
3e:53:85:1b:7d:aa:69:3b:76:9c:64:61:f0:cf:ba:
47:d2:1e:13:24:7e:67:20:27:cf:a5:07:3b:c5:3a:
77:73:d6:68:bf:e4:5c:32:37:52:a8:7c:54:34:37:
27:b4:3f:74:ac:f7:dd:a7:b5:b6:f2:03:6d:2c:68:
18:26:3e:2d:02:cb:63:0d:ac:7b:5d:12:07:3f:db:
f2:ad:15:c9:e1:10:53:c4:33:a0:61:28:93:9c:10:
62:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:9A:34:D7:3E:BD:7B:47:3A:EB:17:CB:DD:5A:94:CF:B8:B0:A0:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e2d17d71-f6f8-3be5-ad2d-8838171609f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.133.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:b5:32:ce:51:ce:bc:e8:25:ab:36:56:f5:54:61:c9:a9:73:
bc:39:50:4d:28:de:ee:64:a8:b7:e2:6f:db:41:89:14:5a:f4:
0c:a1:a0:cc:f1:cf:da:49:f2:7c:7c:9b:6c:f4:c3:b3:49:5c:
d2:4c:be:55:d3:90:98:75:4b:2c:e8:f0:fa:c7:19:33:65:55:
79:3d:07:91:4e:ac:c0:41:59:47:eb:05:d0:dc:81:b4:8b:01:
47:09:f6:60:c1:a0:d8:a1:71:8c:16:6f:a0:e8:6c:e3:9c:0f:
7a:a5:de:fd:8b:f0:e9:b7:e9:fa:7d:cf:88:b1:a7:dd:b3:6e:
ab:ce:24:46:aa:3e:06:a0:50:ac:d2:7f:9f:5a:ec:5b:cf:19:
04:84:4c:13:8a:20:3c:b8:38:85:9f:10:aa:3b:8d:83:b2:59:
37:0e:ae:8f:7d:a8:93:74:81:db:cb:56:be:08:d2:b6:47:47:
97:be:90:7c:25:03:05:9e:05:75:93:fb:c1:03:9e:fe:70:c3:
0d:75:67:60:37:6d:15:10:a6:02:04:2e:f8:2a:26:fe:a9:04:
df:06:23:16:26:af:d6:91:9b:76:23:33:ee:2d:df:25:40:5c:
c5:e0:8c:a0:b4:79:43:fd:17:97:e3:8f:d6:30:f3:e3:b3:74:
97:14:33:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:11:31 2025 by rpki-client