Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/297bb316-79a6-3af7-a3db-ad1e4f19895e.roa
File: 297bb316-79a6-3af7-a3db-ad1e4f19895e.roa (raw, json)
Hash identifier: mWHv7k7f9VKStWu+e9DnL4DcJX9sfECH5yyA3MiKwbE=
Subject key identifier: AD:5E:42:DD:5F:F3:04:60:1C:2E:C3:9D:33:15:BD:15:88:6F:64:2B
Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Certificate serial: 010D0C9F4328584882808CF916583944FE031780
Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/297bb316-79a6-3af7-a3db-ad1e4f19895e.roa
Signing time: Sat 11 Jan 2025 14:00:52 +0000
ROA not before: Sat 11 Jan 2025 14:00:52 +0000
ROA not after: Fri 11 Apr 2025 13:00:52 +0000
asID: 29968
IP address blocks: 208.20.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:82:80:8c:f9:16:58:39:44:fe:03:17:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Validity
Not Before: Jan 11 14:00:52 2025 GMT
Not After : Apr 11 13:00:52 2025 GMT
Subject: CN=676098c1-f82c-4bba-81bf-d465c8c28281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fb:ac:00:99:99:28:3a:61:46:08:93:99:c2:
9a:4b:59:3d:95:cb:1e:e5:30:23:a0:3a:f3:2f:e1:
9d:3b:74:cf:2f:e6:af:7b:1f:1e:fb:b3:a1:32:e9:
cc:e6:32:03:06:26:bd:e1:73:f1:ee:49:2c:5b:55:
8b:ec:e3:25:d5:f0:ad:fb:42:9c:da:22:66:2c:9f:
c9:61:10:6d:2c:83:95:30:b6:09:3b:6f:08:8f:aa:
86:bc:dc:28:96:48:2f:37:5c:ce:fa:83:82:5e:87:
e4:b9:ec:41:94:23:e1:d6:35:24:07:5e:c2:54:9c:
9c:7c:22:ed:83:3d:00:86:dc:52:ad:ec:cf:b8:86:
0f:09:a2:1a:c8:08:b8:65:66:8f:f8:7d:e5:75:ce:
15:3b:ae:c1:51:8d:5a:ae:41:a4:53:6f:ed:69:44:
af:e5:8f:a9:75:04:d5:c5:10:c0:2d:8b:1d:a7:ed:
ed:e3:b5:28:b0:20:97:0e:60:fe:d6:2a:db:98:d9:
08:a5:fa:dd:47:5c:8e:88:6c:41:19:14:62:2a:29:
4b:dd:d7:d4:18:9f:ed:cb:d3:27:ec:83:7f:2f:0a:
64:0b:64:18:27:f3:d6:26:c2:b5:8e:9c:7c:85:c7:
91:7b:bc:1e:c3:07:99:7c:1e:62:8c:f0:d2:5a:da:
01:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:5E:42:DD:5F:F3:04:60:1C:2E:C3:9D:33:15:BD:15:88:6F:64:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/297bb316-79a6-3af7-a3db-ad1e4f19895e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl
X509v3 Authority Key Identifier:
keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
sbgp-ipAddrBlock: critical
IPv4:
208.20.34.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:cd:f4:16:40:d4:b6:d4:55:d5:c8:10:f6:88:84:f2:eb:7c:
d6:de:0e:ff:27:ac:6d:aa:64:fe:d1:e7:d2:31:ff:21:87:40:
cc:c9:0c:f1:b9:b7:5f:e1:02:49:85:68:1a:1d:46:54:bd:ff:
dc:0e:78:b7:9b:81:d0:a9:3d:bf:fc:79:4f:eb:5c:f1:e3:95:
89:75:fb:63:be:ce:79:3a:4f:8f:c2:0e:09:aa:27:f3:c8:5a:
ab:b0:5a:77:6a:ab:3d:aa:ea:9c:53:4b:a9:b3:62:3a:c7:8a:
03:c6:fb:10:f6:d9:1a:a5:e6:d2:48:27:87:59:a0:6a:7f:7a:
57:25:03:5f:5e:94:db:ad:9e:40:d5:a0:ea:17:5e:48:13:4e:
a6:e2:35:27:ed:17:89:1e:a9:b5:3b:d4:34:ac:9e:27:8c:81:
64:df:94:a2:ab:81:25:3d:48:1b:1b:87:f0:f7:16:ef:16:13:
10:b9:7c:43:91:53:da:af:24:e0:ee:e7:a3:30:bd:3c:36:3f:
f2:6d:57:9f:db:6f:a8:4f:99:c2:82:d8:ce:6e:41:9c:51:11:
20:92:11:91:92:0c:31:33:22:65:9f:84:e6:f8:b3:ce:0a:db:
68:5a:b8:2e:77:19:43:55:46:1e:9a:ba:ee:8e:ba:b5:8e:48:
88:ed:a0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:50:45 2025 by rpki-client