Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/31957a02-b0ea-3ae7-b577-0f3188d3ca54.roa
File: 31957a02-b0ea-3ae7-b577-0f3188d3ca54.roa (raw, json)
Hash identifier: 2KC+ZU9rRVtCw1wxNchIP7oPfNxZ4BFuYvmrbXxeSQc=
Subject key identifier: 3A:F8:21:20:28:BE:ED:15:8C:54:9E:38:AD:22:F9:7B:C4:65:05:D4
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285848B35B6272D300FF64F9E9DC50
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/31957a02-b0ea-3ae7-b577-0f3188d3ca54.roa
Signing time: Wed 29 Jan 2025 02:00:39 +0000
ROA not before: Wed 29 Jan 2025 02:00:39 +0000
ROA not after: Tue 29 Apr 2025 01:00:39 +0000
asID: 7861
IP address blocks: 209.20.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b3:5b:62:72:d3:00:ff:64:f9:e9:dc:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Jan 29 02:00:39 2025 GMT
Not After : Apr 29 01:00:39 2025 GMT
Subject: CN=eb64801e-4697-4542-8fb2-4b6d3acf90eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:8a:b8:c3:c3:a3:43:18:24:9a:2d:65:15:90:
c7:13:1f:89:20:71:13:4a:25:ba:1e:df:b2:6a:99:
9c:80:5d:14:0c:e3:4a:e6:6f:21:4a:f9:51:d7:05:
a9:81:a5:29:b5:54:e9:12:82:23:32:68:f7:25:a6:
2b:c9:98:69:d9:35:80:8b:a0:63:37:ea:db:1e:4a:
53:05:ed:df:fe:15:8d:35:a4:67:d7:26:15:d5:90:
85:59:a1:2c:f6:cc:55:28:ed:df:e7:fa:d7:03:33:
5f:e2:be:90:d3:8a:d5:67:49:df:f7:ca:eb:97:12:
87:d7:c4:95:30:1d:f6:c0:c0:36:34:f5:42:b2:dd:
41:e7:f2:5e:b8:3f:8c:b1:e8:02:51:52:8a:7c:a0:
e9:64:09:0d:eb:4d:70:ae:af:dd:9b:59:d2:73:3c:
07:ce:4c:6e:20:97:0e:d0:c6:59:96:09:2b:e4:c0:
c5:5f:1b:1f:2b:1e:b0:c0:62:df:43:23:f9:7f:be:
0b:6a:bd:82:43:34:71:aa:a1:5f:a2:8c:6c:ac:70:
e0:88:af:b5:40:1a:4f:26:c6:52:25:a3:88:bc:2d:
c7:b1:0d:36:ba:bf:69:c4:db:56:60:f2:01:bc:bd:
cb:18:fd:10:e6:2a:73:d7:31:ae:ac:44:33:4d:f0:
8a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F8:21:20:28:BE:ED:15:8C:54:9E:38:AD:22:F9:7B:C4:65:05:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/31957a02-b0ea-3ae7-b577-0f3188d3ca54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
209.20.32.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cd:f6:49:86:fe:5f:60:c5:96:9f:1c:5d:f9:77:3e:bf:a1:4b:
11:53:98:ce:28:d3:21:0d:ff:ab:7c:f0:31:2d:a7:26:b0:a6:
fb:db:5c:d9:1c:b6:33:a6:74:66:b8:ca:4e:ad:da:bd:7f:5e:
3b:9b:b1:3d:50:23:8f:cb:e1:26:17:6a:fc:d3:d9:3b:01:81:
f4:bd:26:9c:aa:a9:de:38:74:8d:ab:d1:f2:d7:2c:93:28:d3:
b3:69:93:96:1c:b7:5c:f8:5f:9c:a6:39:6d:fc:7a:eb:4b:f6:
b7:07:b2:e8:7d:53:be:47:38:cb:3d:a8:5d:94:e8:a5:b6:38:
22:4a:89:2c:e8:29:74:04:39:d4:cc:25:6e:5b:fa:4f:06:5f:
5d:6f:9d:06:a0:9e:1f:c8:bb:85:64:25:6d:c8:12:1b:7e:50:
7d:96:d5:18:82:c5:83:c4:7b:ec:ba:67:64:fc:ba:96:bf:bf:
71:35:55:b9:f8:09:61:ce:49:fa:e6:29:05:fd:dd:45:21:8f:
ad:cf:9e:f3:f7:cc:14:98:2b:d2:ca:29:6d:bf:ae:b9:a8:0a:
fc:03:e9:b5:e9:f4:dc:e7:af:1f:51:65:e7:ea:fa:0c:dc:f0:
0f:96:ff:aa:f1:7f:ac:b7:47:8f:00:b6:dd:f3:8f:0e:98:1b:
36:0c:08:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:46:26 2025 by rpki-client