Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f68ba57f-5e4d-33d2-960d-57b417d05011.roa
File: f68ba57f-5e4d-33d2-960d-57b417d05011.roa (raw, json)
Hash identifier: hrhu+mObImqSMfbF3IsR2vXqTumHGqcNdPHGsTAkZC0=
Subject key identifier: CB:BE:89:12:1A:7A:1B:E9:15:0B:2A:9A:21:1D:D2:2D:92:12:12:6D
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F43285848D944B9FD50D3EB8EDBD4E020
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f68ba57f-5e4d-33d2-960d-57b417d05011.roa
Signing time: Tue 11 Feb 2025 15:55:46 +0000
ROA not before: Tue 11 Feb 2025 15:55:46 +0000
ROA not after: Mon 12 May 2025 14:55:46 +0000
asID: 3356
IP address blocks: 20.138.224.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d9:44:b9:fd:50:d3:eb:8e:db:d4:e0:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Feb 11 15:55:46 2025 GMT
Not After : May 12 14:55:46 2025 GMT
Subject: CN=58f34f22-86d7-4b77-ba5b-ae2fe841463c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:25:bb:bc:f4:eb:19:4d:73:39:83:a9:16:34:
7d:c1:5f:4a:cc:93:6f:ca:98:84:51:5f:87:ec:1b:
69:a0:ef:4a:1e:43:f6:dd:af:01:57:3f:0b:22:61:
6d:a4:b9:fa:a2:54:58:28:c7:31:5a:d4:a5:63:83:
9d:b0:48:bd:c4:25:1e:4e:07:41:fb:5b:b5:f6:88:
08:70:e7:40:f3:e3:4c:3f:c5:ef:9d:a9:16:ab:fe:
f3:ba:9a:7b:b1:be:aa:79:27:bf:a1:b5:74:20:69:
4e:6e:59:b8:ab:de:7f:dd:c8:dc:17:7d:01:07:5b:
47:62:73:99:58:cf:4e:48:92:f0:83:45:67:c9:fa:
2b:d2:b3:4d:89:3a:dc:8c:fd:32:33:a0:41:7a:7b:
81:34:da:3a:c1:00:d5:02:78:d9:01:cb:c1:bd:ee:
25:64:a6:f2:aa:bb:60:54:40:29:fd:d1:f6:f5:84:
3f:fc:07:5c:a0:32:eb:92:91:90:83:ef:1f:e6:ce:
b8:cd:5c:86:bb:7d:1f:3e:c2:6b:c0:f2:e9:e8:86:
07:5f:84:08:88:73:79:78:9e:e7:d1:ec:20:44:96:
59:ea:06:7a:28:47:a3:4d:f2:eb:84:86:4a:df:96:
6e:aa:19:3a:36:93:45:38:21:f5:19:1b:74:39:08:
6a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:BE:89:12:1A:7A:1B:E9:15:0B:2A:9A:21:1D:D2:2D:92:12:12:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f68ba57f-5e4d-33d2-960d-57b417d05011.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.138.224.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:3b:50:aa:7c:03:a7:ac:7d:a2:31:b2:e8:92:c3:1d:90:44:
25:11:06:84:b8:7c:0e:2a:be:6f:14:3d:15:37:3b:8a:48:18:
07:67:72:c8:92:00:e5:eb:54:b1:7f:26:c1:18:c4:a9:83:eb:
02:9f:f0:7f:c6:33:b0:76:15:6c:0d:1a:a1:10:9c:53:18:18:
e9:2c:48:27:f7:f5:f0:59:4e:1e:d0:73:2e:35:f4:fc:a6:3c:
99:7f:57:4e:38:42:bf:d2:b0:ab:af:64:b5:58:e6:32:e3:cf:
38:60:de:f8:61:22:79:87:f3:a6:dd:11:31:ce:7f:eb:06:57:
97:96:a1:02:0e:00:d8:c4:8d:e1:df:cf:26:83:5d:45:de:39:
5a:47:bb:5b:bb:1b:a7:42:38:3d:e5:11:be:e4:99:98:b8:31:
4b:bd:72:4b:8d:22:8c:7c:83:91:90:b1:6e:f7:b7:96:01:ab:
8f:23:f4:f4:f9:81:a0:a5:a7:9b:b2:4e:a7:a5:80:bb:4f:b6:
29:99:b8:21:3c:13:67:f3:7c:a3:6b:ee:e1:dd:da:3c:74:e9:
7f:df:16:46:5d:83:9b:af:e2:7c:f3:14:28:15:0a:58:33:c9:
d4:7b:8a:a0:cc:a6:66:c0:d0:c6:66:cb:a0:f9:3b:e3:1e:1c:
fd:30:00:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:17:07 2025 by rpki-client