Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/c78e23e3-d53e-3b69-8548-1cb439a1fc79.roa
File: c78e23e3-d53e-3b69-8548-1cb439a1fc79.roa (raw, json)
Hash identifier: Xo3QA5XN3um/TVKcFvVigtMufXKZvq2QSrOsRxo/SFA=
Subject key identifier: 52:08:2A:ED:53:09:52:43:F8:68:80:F8:68:DB:4C:17:36:81:60:D3
Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Certificate serial: 010D0C9F4328584882808CC3F3526CAD311E9C50
Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/c78e23e3-d53e-3b69-8548-1cb439a1fc79.roa
Signing time: Sat 11 Jan 2025 14:00:52 +0000
ROA not before: Sat 11 Jan 2025 14:00:52 +0000
ROA not after: Fri 11 Apr 2025 13:00:52 +0000
asID: 29968
IP address blocks: 208.20.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:82:80:8c:c3:f3:52:6c:ad:31:1e:9c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Validity
Not Before: Jan 11 14:00:52 2025 GMT
Not After : Apr 11 13:00:52 2025 GMT
Subject: CN=cb75ff77-55e2-49a7-83b4-26179a3c3bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:17:1d:fb:5b:67:b6:ad:c8:36:7d:72:3c:dc:
53:29:e1:ec:4a:db:54:88:8c:67:2f:d7:33:f5:54:
7e:0b:ed:b3:a6:af:07:f4:4d:5e:9a:d3:e3:a8:fe:
b2:36:7b:e0:67:e8:61:f3:e2:c9:af:3b:66:06:18:
35:dd:9c:c3:3f:13:25:93:ae:da:fa:17:9a:10:f9:
60:18:3c:4f:9a:f5:37:05:1a:e2:59:92:ad:01:a1:
b6:ac:7d:a1:38:0f:96:d8:23:17:9b:94:c8:59:88:
82:bf:3e:f8:06:a7:b4:55:b0:ae:fd:8b:48:bc:84:
06:d9:a0:83:28:9c:a7:e8:4c:c3:88:c9:31:5c:23:
e9:6c:26:0e:98:53:fb:a2:6c:e8:cf:5a:89:15:dc:
4a:2f:f5:24:6a:22:2e:24:e6:cf:79:da:67:f6:0b:
5b:61:46:ad:a9:af:9c:79:20:b1:c0:41:ce:55:a7:
42:92:6a:56:23:9c:48:ab:f0:4d:9c:7a:76:59:e8:
a5:71:1c:42:8c:f6:28:12:d1:3e:df:4c:de:ef:cd:
46:ee:ae:c5:2e:af:c2:11:de:26:12:84:3f:17:e7:
f1:04:ab:7e:d6:85:c3:15:1d:92:e2:f3:78:dc:77:
2b:43:fd:96:7b:c6:af:eb:bb:9f:a4:83:b6:c2:ea:
c8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:08:2A:ED:53:09:52:43:F8:68:80:F8:68:DB:4C:17:36:81:60:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/c78e23e3-d53e-3b69-8548-1cb439a1fc79.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl
X509v3 Authority Key Identifier:
keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
sbgp-ipAddrBlock: critical
IPv4:
208.20.32.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:83:fb:55:13:22:ba:e7:ef:4d:53:42:61:34:00:fd:af:58:
94:bd:56:c6:d2:50:4c:77:c2:c5:33:b9:9f:f2:69:33:52:77:
0c:73:71:bb:7d:d6:58:35:3c:65:17:02:5e:62:25:85:fa:7f:
20:55:5f:70:a0:44:d3:bc:51:fd:21:1b:87:80:26:8e:68:31:
1b:35:99:e5:d2:23:c8:41:c8:ed:71:68:f5:c2:0e:31:58:21:
7f:ec:8a:cc:1f:a4:18:b3:28:01:aa:8c:3f:82:1c:30:f1:36:
99:91:3d:ce:4c:90:f6:8d:b6:aa:5b:fc:77:94:06:d2:53:18:
69:65:c6:25:0d:df:fc:64:b6:fb:ba:83:58:6b:83:20:51:7f:
47:08:9f:73:89:e7:62:14:fd:30:38:e7:38:c4:c3:09:79:1c:
78:93:a7:59:45:7f:b7:82:46:b1:c6:60:d5:18:50:2c:69:92:
47:fc:46:dc:c0:69:14:2d:5d:aa:09:ee:e7:6f:90:a8:94:39:
ab:f9:3c:5d:3f:9e:da:00:f2:99:09:e8:05:39:d8:62:f9:15:
bb:56:f6:c0:48:c9:6f:87:69:46:92:c8:cd:77:2e:82:f3:33:
38:bc:0a:f7:bf:90:67:13:2b:42:f3:ec:b3:ce:98:d1:16:18:
84:08:9b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:50:58 2025 by rpki-client