Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1454b60f-a984-384e-8d51-13e18a917820.roa
File: 1454b60f-a984-384e-8d51-13e18a917820.roa (raw, json)
Hash identifier: /MmmUXRIzJXcuh3FangDGxQIhu2nD+Qgvf6/Z/8Mmwg=
Subject key identifier: 6E:14:37:49:53:11:A4:56:C3:F5:AA:EE:DE:9B:83:5D:05:DB:A0:F9
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F432858489770914BE4C48A8F9EB937C0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1454b60f-a984-384e-8d51-13e18a917820.roa
Signing time: Sun 19 Jan 2025 02:00:39 +0000
ROA not before: Sun 19 Jan 2025 02:00:39 +0000
ROA not after: Sat 19 Apr 2025 01:00:39 +0000
asID: 19341
IP address blocks: 209.20.48.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:97:70:91:4b:e4:c4:8a:8f:9e:b9:37:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Jan 19 02:00:39 2025 GMT
Not After : Apr 19 01:00:39 2025 GMT
Subject: CN=018ed04a-2887-4ae4-a166-3850147b16e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f6:fb:65:5e:db:14:98:b2:3a:d8:4b:5b:07:
9d:c8:0b:ff:03:5f:ec:01:da:e9:f7:c1:a0:4c:4b:
4d:e0:6f:7f:fd:aa:9c:e3:94:54:ea:65:50:10:e0:
e6:57:73:d7:8f:38:2d:46:ed:88:c8:e0:a4:d4:f2:
80:c1:71:a0:13:7b:60:8a:9c:38:bd:dd:ac:fa:81:
69:6a:f6:a3:d7:31:21:4d:97:e4:a4:e6:d6:e6:a0:
19:cc:77:9d:f1:73:6c:ef:37:b7:72:c7:ef:70:30:
f8:44:8c:1f:53:77:8c:52:8f:96:6f:99:f5:59:93:
88:b1:40:f1:20:3f:40:91:9d:54:4c:90:2c:75:83:
9d:47:e4:14:be:42:47:1f:f3:83:35:09:e4:74:d9:
b6:ea:04:8f:94:3f:64:01:a3:15:d5:1e:83:44:34:
31:c3:81:d7:cc:38:7c:b0:80:97:8e:8e:68:af:fd:
b4:e7:33:3d:81:5a:06:19:95:7a:91:38:81:48:79:
d0:1e:7e:f5:6a:64:b5:14:c5:e2:21:32:34:d4:aa:
aa:b0:80:5f:fb:e0:68:b6:af:96:cb:87:5d:19:ed:
c6:c6:ae:c5:37:db:96:d2:0e:79:53:cc:56:c8:0d:
89:73:ae:dd:be:1d:cc:77:ea:73:a7:0b:34:e0:cf:
23:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:14:37:49:53:11:A4:56:C3:F5:AA:EE:DE:9B:83:5D:05:DB:A0:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1454b60f-a984-384e-8d51-13e18a917820.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
209.20.48.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:34:19:cf:9c:9e:c6:6b:50:eb:fc:29:13:54:ed:7c:cd:01:
16:5b:61:1a:1c:26:d6:1b:f0:4d:96:e8:c6:d3:ab:14:61:b4:
70:2b:37:42:4f:ba:61:fe:7f:f6:02:c1:dd:70:4a:30:1e:43:
fe:cf:6a:e7:3c:60:df:93:bb:5f:cb:eb:80:58:a8:5c:98:78:
48:36:7e:cd:33:b1:0a:d9:43:ec:42:7e:18:30:db:87:23:cf:
a0:13:0d:5d:90:fd:00:60:eb:86:4f:25:71:1c:a4:cb:e2:21:
68:85:aa:9a:cf:02:1e:0a:26:85:51:9e:44:59:78:e4:fa:77:
95:45:27:b7:45:7d:c3:de:7e:04:73:c2:ff:65:75:c0:52:62:
0d:5f:18:88:7c:1f:0a:77:81:82:70:59:e7:16:eb:6c:f1:3c:
05:54:de:75:12:84:d6:76:df:46:0d:fe:25:8c:92:60:b9:00:
2f:59:7e:2d:cf:91:5c:48:87:ef:8f:93:2e:58:d0:48:7e:65:
be:f9:95:18:94:95:cf:55:22:d0:f2:a8:8e:f6:c5:65:33:23:
35:8e:a3:4b:b7:c6:71:ac:d3:28:7d:d3:0e:ab:12:4e:85:56:
39:95:49:14:8f:81:86:6b:bc:ea:b0:d9:8e:bf:14:46:2d:a8:
16:08:89:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:46:26 2025 by rpki-client