Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/59392e2a-7cc4-32fc-840e-7383dc8b4959.roa
File: 59392e2a-7cc4-32fc-840e-7383dc8b4959.roa (raw, json)
Hash identifier: F4mS/Ohl3yu5ZFCG6EEFod7L45olNk+yxkwrkqPd6dE=
Subject key identifier: 67:FE:BF:66:45:86:38:AC:ED:77:C8:F9:C2:B7:47:08:4D:69:1A:6F
Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Certificate serial: 010D0C9F4328584882808D0AF9AB6F682BC9F0E0
Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/59392e2a-7cc4-32fc-840e-7383dc8b4959.roa
Signing time: Sat 11 Jan 2025 14:00:52 +0000
ROA not before: Sat 11 Jan 2025 14:00:52 +0000
ROA not after: Fri 11 Apr 2025 13:00:52 +0000
asID: 13536
IP address blocks: 208.20.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:82:80:8d:0a:f9:ab:6f:68:2b:c9:f0:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Validity
Not Before: Jan 11 14:00:52 2025 GMT
Not After : Apr 11 13:00:52 2025 GMT
Subject: CN=4397674a-7f76-4de4-99bf-1fd0bbed44f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:14:e5:a1:2a:2c:64:fa:66:8e:d7:5b:91:2f:
46:6b:68:cd:c1:06:ab:1c:d1:f7:31:80:74:e3:a0:
a7:e8:60:f4:25:78:00:2c:67:d1:c8:65:d1:b1:8d:
ff:69:c6:82:8b:a4:4b:6e:af:3a:af:3d:d1:5c:67:
02:ae:9b:b7:ff:ff:ff:ba:7c:84:43:89:e6:49:78:
56:36:bd:d8:c1:31:c1:80:6f:2a:df:14:0f:36:ae:
8f:e9:5c:68:5e:ad:20:6a:e3:c9:76:a6:a3:3e:98:
e1:cf:2d:eb:87:92:27:40:dd:eb:29:fb:0a:a0:81:
56:22:ae:41:af:ac:5a:f4:c5:26:fd:02:9a:8d:5b:
5e:86:6d:69:f2:8e:5a:f5:28:f6:48:ea:5e:0b:d7:
39:ce:9c:48:e3:8f:20:85:d2:a6:15:4f:db:6c:32:
d4:8e:69:83:09:f1:cd:94:21:71:95:fd:7c:7f:12:
74:d1:e2:8a:a6:d6:ea:fc:80:6f:d1:0a:2c:be:39:
11:84:5e:f0:3b:15:c6:a0:29:e3:b9:6a:08:ca:99:
e9:a6:4a:27:a3:59:2e:27:a8:ec:90:ad:b7:e3:d3:
6c:52:2a:6a:a6:21:2f:28:46:3f:d4:67:1d:7f:2d:
1f:b1:1a:bb:64:01:10:7e:31:82:31:6e:b9:3e:ec:
25:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:FE:BF:66:45:86:38:AC:ED:77:C8:F9:C2:B7:47:08:4D:69:1A:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/59392e2a-7cc4-32fc-840e-7383dc8b4959.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl
X509v3 Authority Key Identifier:
keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
sbgp-ipAddrBlock: critical
IPv4:
208.20.34.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:b7:a6:b5:05:c5:de:da:dc:91:73:b9:07:3b:6f:2b:b5:ca:
dc:b2:3f:06:e3:69:af:23:5a:8a:4f:b2:6d:7b:7e:03:a0:8a:
01:cd:30:5f:c9:5f:27:d7:32:6f:d7:0f:ee:15:af:5b:00:33:
ba:4b:eb:09:b6:5a:37:60:4c:fe:ab:ec:ed:19:56:a5:21:43:
bb:05:e0:91:95:b7:36:87:14:05:2f:d8:cc:ac:b5:78:24:03:
ea:ee:7b:6b:01:ff:f8:00:54:c4:ff:be:89:a8:77:4b:50:5b:
0e:2b:a4:f3:20:8e:b6:86:a2:58:c4:f3:a9:6f:cb:20:7e:6c:
54:52:b7:15:50:1a:47:92:88:ee:03:03:c5:b5:8b:52:02:bd:
72:79:00:ba:8c:10:9d:a0:82:ef:2f:15:dc:68:4b:88:87:75:
09:4a:b8:5a:c1:b5:b1:20:50:b2:79:da:64:63:e5:79:bf:6f:
a1:c5:84:da:53:5b:21:16:32:a3:4e:b8:fc:67:26:6c:28:77:
47:a8:f1:7a:4d:0d:35:d8:5a:55:4d:d3:3d:9b:2b:f1:ad:04:
91:49:24:7c:bc:6f:30:bb:4e:0f:9f:8d:91:79:24:e3:40:78:
5c:b0:c0:c3:90:6d:9e:b9:9a:64:55:b9:93:4c:4e:df:8e:94:
f7:7f:21:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:53:05 2025 by rpki-client