Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/ddc05ad9-535b-34bf-991f-d027fed482d3.roa
File: ddc05ad9-535b-34bf-991f-d027fed482d3.roa (raw, json)
Hash identifier: sSsz2kHgy0OcXqn6nq4NT0AruYynIxSqR8hZzRuGw3Y=
Subject key identifier: 4B:36:14:22:F1:9F:A4:6F:5C:22:30:89:0A:B3:C2:2B:00:84:17:6D
Certificate issuer: /CN=0b8b20ca-2a1e-4742-b63c-4b3b1d151f15
Certificate serial: 010D0C9F432858489770894550A90321C53A2960
Authority key identifier: F3:FF:58:AA:40:01:5E:1D:D0:5D:10:B7:78:A8:F8:65:D2:9D:42:0C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/ddc05ad9-535b-34bf-991f-d027fed482d3.roa
Signing time: Sun 19 Jan 2025 02:00:39 +0000
ROA not before: Sun 19 Jan 2025 02:00:39 +0000
ROA not after: Sat 19 Apr 2025 01:00:39 +0000
asID: 14702
IP address blocks: 134.20.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:97:70:89:45:50:a9:03:21:c5:3a:29:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b8b20ca-2a1e-4742-b63c-4b3b1d151f15
Validity
Not Before: Jan 19 02:00:39 2025 GMT
Not After : Apr 19 01:00:39 2025 GMT
Subject: CN=8b63d419-55b5-4eb2-be16-f8d5f39e415c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:90:54:e8:f6:7d:9e:2d:5c:9f:21:72:b1:c3:
44:0d:dd:2a:9a:24:4d:c2:9e:a6:f2:5e:00:86:39:
76:b6:24:71:f1:85:86:e5:1a:c0:ca:9f:e5:13:8e:
1f:72:8a:9a:6b:eb:df:28:a7:79:d7:b1:7a:86:38:
76:7f:9c:5f:39:28:a1:68:b4:76:96:d0:40:14:a9:
e7:db:c7:a9:6e:12:f5:75:ea:61:1b:ed:ed:57:c6:
55:dc:9d:61:ac:d4:de:a8:42:dd:c6:e4:48:e4:99:
68:cf:77:94:6f:e0:5d:34:8e:41:56:78:2b:6c:ee:
50:b4:a4:b3:2e:41:3f:91:0e:60:6e:2d:5a:cf:b5:
9c:67:7f:ec:86:ed:7e:b5:31:8f:d0:91:fb:29:d2:
28:c4:f4:c1:81:15:64:e0:6b:cc:41:56:9b:29:50:
15:f0:9f:7f:20:6b:21:ca:b7:ad:45:a2:42:f0:aa:
f1:6c:5c:ab:30:a7:66:0a:a5:eb:a6:46:fc:02:90:
d5:4c:18:5f:9b:e0:d9:f0:cc:a8:bf:77:de:57:f5:
7a:4f:7c:17:ea:55:64:fb:b8:34:e7:cd:84:24:e6:
84:59:a5:e9:0a:28:7c:4f:70:c9:8f:c9:ab:06:45:
6c:49:d3:ae:1b:65:f2:b9:4b:44:df:d4:f7:e7:c0:
56:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:36:14:22:F1:9F:A4:6F:5C:22:30:89:0A:B3:C2:2B:00:84:17:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/ddc05ad9-535b-34bf-991f-d027fed482d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15.crl
X509v3 Authority Key Identifier:
keyid:F3:FF:58:AA:40:01:5E:1D:D0:5D:10:B7:78:A8:F8:65:D2:9D:42:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15.cer
sbgp-ipAddrBlock: critical
IPv4:
134.20.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:e2:e0:29:e7:ce:13:66:24:77:a9:de:9f:6f:31:3f:a1:d7:
57:6c:a1:41:ff:eb:6e:90:07:23:a1:3b:f3:53:9a:ad:91:fd:
62:0e:c6:5a:b2:49:f4:0d:8d:c7:a2:ca:67:a4:7d:28:09:74:
47:38:ec:ad:10:33:c8:54:2c:51:4e:b4:ff:9d:f0:a4:97:70:
52:d2:be:68:90:3e:27:c2:2d:d2:d1:c2:a6:36:f3:6d:f0:48:
1e:6a:54:af:59:0f:41:28:5c:36:44:76:95:9f:2a:b9:8b:f6:
10:9d:98:a2:5c:ad:88:12:0b:1a:79:56:f5:31:5c:fc:ad:46:
09:66:55:aa:e2:dc:47:56:09:d1:cd:ca:be:75:9b:f8:a2:33:
d5:c8:b7:96:1e:97:6b:45:e2:60:e1:ba:94:95:77:4f:cb:61:
3c:c6:2b:91:2c:d2:a9:28:5e:ae:46:14:0e:b7:90:9a:b8:da:
ab:c7:d6:fd:f7:69:84:77:f8:ad:cf:ed:e5:7f:59:58:e7:fe:
01:87:29:ef:27:68:46:70:b9:37:7f:29:d2:50:f4:8b:99:98:
78:31:f9:bd:3c:3c:9e:30:d1:38:27:ae:96:8a:a0:8e:2f:de:
da:2e:87:ae:c4:35:eb:4c:b5:41:79:5d:80:ea:e2:16:a4:17:
37:bc:7f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:01 2025 by rpki-client