Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/a80f3319-a1a9-3f01-8d00-4f5d083b6ff6.roa
File: a80f3319-a1a9-3f01-8d00-4f5d083b6ff6.roa (raw, json)
Hash identifier: 7x96w2iXVOmR3z28bNTii+A7EBu+NkHpAzu4kKwT8wI=
Subject key identifier: 87:1D:FF:B2:A0:8C:3E:F1:A6:5B:9C:0D:E2:B6:EE:96:0A:DA:32:C6
Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Certificate serial: 010D0C9F4328584882808CD43C33B114A8FC9440
Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/a80f3319-a1a9-3f01-8d00-4f5d083b6ff6.roa
Signing time: Sat 11 Jan 2025 14:00:52 +0000
ROA not before: Sat 11 Jan 2025 14:00:52 +0000
ROA not after: Fri 11 Apr 2025 13:00:52 +0000
asID: 13536
IP address blocks: 208.20.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:82:80:8c:d4:3c:33:b1:14:a8:fc:94:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Validity
Not Before: Jan 11 14:00:52 2025 GMT
Not After : Apr 11 13:00:52 2025 GMT
Subject: CN=53d6f4eb-581c-40b4-9b9e-95aa32ee6d79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a7:26:73:78:65:4e:10:80:5b:5f:32:65:e2:
3c:b8:5a:d3:cd:fa:a0:48:ae:d4:55:af:b3:3c:b5:
1b:6d:46:a3:51:98:74:94:61:c7:bd:cb:b2:b2:05:
50:62:19:8f:79:8c:60:a7:b5:8f:92:d2:83:32:5e:
d0:f7:34:cc:28:be:67:12:52:b9:e3:f4:a4:56:47:
63:c2:ad:03:56:c0:64:e7:a2:63:c0:cd:e4:89:23:
cd:83:f1:32:23:b7:00:7e:b7:cf:a2:de:81:1e:0c:
7c:1b:77:9e:dc:ea:40:44:6d:0f:9d:e3:33:0b:78:
e7:65:37:ac:86:be:53:e9:eb:06:39:0a:76:52:ae:
77:89:37:f9:09:30:98:1b:46:67:ec:61:91:06:91:
50:56:8f:06:67:b5:92:4b:27:b4:6a:48:38:c0:c4:
39:2a:ae:25:3d:16:ce:c4:fb:f9:ff:cc:cc:54:de:
fe:af:83:30:4f:30:a1:98:03:4c:30:3a:2d:02:cc:
90:30:e8:0b:f2:9f:0f:33:66:7b:6e:54:76:36:2a:
cf:36:aa:75:e7:ab:75:82:3e:e9:8b:d2:b6:6e:c9:
98:fd:3a:32:32:b8:18:78:63:b2:38:83:7d:a3:b5:
82:bd:30:7c:65:17:f7:3b:35:4f:35:ae:f6:bf:57:
17:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:1D:FF:B2:A0:8C:3E:F1:A6:5B:9C:0D:E2:B6:EE:96:0A:DA:32:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/a80f3319-a1a9-3f01-8d00-4f5d083b6ff6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl
X509v3 Authority Key Identifier:
keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
sbgp-ipAddrBlock: critical
IPv4:
208.20.32.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c2:19:0f:0a:c7:45:89:ce:4f:f7:5c:9b:c6:79:f3:ef:87:6c:
ca:60:f5:80:0b:09:45:74:4a:ab:d0:d1:24:bb:d5:a9:a1:fe:
cf:ef:74:63:14:58:50:71:5e:d0:50:ed:82:74:fd:7a:b0:e7:
76:c8:20:67:60:83:7b:d1:85:30:4b:4c:98:f0:d9:e7:b3:58:
7b:71:79:29:0d:03:29:38:fa:45:2d:c8:e0:79:ad:62:27:e6:
38:34:4b:40:04:df:41:0e:44:25:d9:37:7b:dc:6f:4e:be:4b:
c0:c8:41:d3:4e:e1:6f:3e:f1:1d:e6:e4:85:d4:dd:78:45:27:
57:a4:f5:57:92:09:d8:5e:66:55:c1:5b:92:c0:11:69:96:03:
5a:06:a2:0a:eb:55:6f:bc:1f:4f:f0:a3:24:b6:09:f5:8b:fc:
d6:e5:15:36:81:79:9b:37:27:07:34:a0:1d:e7:26:42:b8:1c:
bf:e7:22:65:2f:c4:7b:b8:7e:3c:7f:31:9a:c1:34:5b:31:f1:
90:8f:e0:fc:a5:dc:fb:7e:5e:2b:de:a7:ec:13:d0:cf:e3:17:
4d:76:f7:1c:b8:68:38:ee:14:da:f4:7f:ed:0b:76:fb:d3:00:
b8:5f:c0:f8:61:3e:a3:4a:89:2f:47:ab:b2:4a:f2:0f:55:66:
52:d0:07:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:50:41 2025 by rpki-client