Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/032ec7b5-50bc-3a9e-baf0-6bd4d8ac1e2e.roa
File: 032ec7b5-50bc-3a9e-baf0-6bd4d8ac1e2e.roa (raw, json)
Hash identifier: RVyLjtXh8DAG3W3oJs9L6oRk7sh60XxNCzggZJ0GNCU=
Subject key identifier: 64:38:3D:A1:96:93:4E:13:E0:E8:D8:7D:57:DA:F3:10:DC:F3:0F:97
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F432858483B501466C72F9FC594B76500
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/032ec7b5-50bc-3a9e-baf0-6bd4d8ac1e2e.roa
Signing time: Tue 17 Dec 2024 02:00:38 +0000
ROA not before: Tue 17 Dec 2024 02:00:38 +0000
ROA not after: Mon 17 Mar 2025 01:00:38 +0000
asID: 203
IP address blocks: 20.139.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3b:50:14:66:c7:2f:9f:c5:94:b7:65:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Dec 17 02:00:38 2024 GMT
Not After : Mar 17 01:00:38 2025 GMT
Subject: CN=516096b3-2995-45fd-b06d-f360bd982382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:39:8a:f0:66:ff:14:36:72:42:1b:f4:18:9d:
23:f0:4d:a4:fa:d6:9a:0d:48:de:4f:ad:05:32:90:
9a:78:b5:66:14:e5:c9:3d:5e:d9:03:52:36:82:2b:
4d:76:1b:fe:0b:22:b5:8b:a2:db:99:b3:48:25:99:
62:26:b0:45:37:cd:21:a3:6f:00:bc:3a:82:8b:cc:
f8:bb:73:10:80:ef:0c:ba:2e:57:54:3d:5e:d1:89:
e6:24:2f:a7:02:4d:5f:97:60:d1:1f:f4:88:c2:7a:
18:17:88:0a:2a:4a:66:6d:52:7a:10:c7:3a:c2:a9:
b3:60:f5:df:c4:46:e9:64:21:85:a8:74:f4:6c:c5:
6b:e5:fd:17:1f:e9:cb:20:1a:34:50:37:0f:f4:65:
b4:9a:f1:40:10:6b:fa:9c:a3:6c:19:ef:b7:3f:7f:
7f:e7:7f:92:1d:a4:52:b9:65:9c:cc:21:78:a4:1c:
56:ed:3e:14:87:f2:80:24:0c:a1:25:f4:51:ec:43:
00:a9:a4:04:d9:28:16:f9:9c:29:7b:29:b1:51:02:
7d:34:4f:5f:06:98:d5:f5:9f:3c:86:58:6d:25:42:
2e:cb:5f:ab:55:a9:76:f6:e6:40:12:83:33:18:6e:
e6:65:ad:e3:80:0b:f0:8b:7d:58:ab:ea:5a:d0:de:
13:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:38:3D:A1:96:93:4E:13:E0:E8:D8:7D:57:DA:F3:10:DC:F3:0F:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/032ec7b5-50bc-3a9e-baf0-6bd4d8ac1e2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.139.6.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:de:79:01:7a:87:f5:41:99:78:9f:b7:7c:da:7f:28:f7:15:
59:8d:3f:fb:5b:71:0d:42:45:f5:18:2f:2d:3c:43:53:66:3a:
76:09:d3:77:ac:0d:e7:e4:81:22:3a:50:bd:86:1f:36:ee:a6:
7e:4a:81:ea:e5:d2:54:e9:bf:8d:e6:a6:c9:e2:a3:ef:29:f9:
1e:0c:02:ef:ea:2f:e1:04:b3:e9:20:b8:9e:43:f0:ac:08:c3:
50:50:ee:89:7d:22:9e:3b:d4:04:7b:e3:b2:d3:ec:bb:5a:c6:
6b:4e:7b:19:e0:53:6d:d8:c4:ba:95:9c:bb:2b:9e:fa:f3:11:
4d:20:30:20:d9:15:4b:ff:9d:21:b1:a3:50:f6:c6:b9:4a:4c:
b0:2b:52:55:89:43:6d:27:81:28:72:b4:1e:f3:58:6a:70:f4:
c6:ae:09:ee:14:fc:1d:a4:c4:7c:bf:3d:26:9b:58:30:f5:25:
ca:55:cd:8b:b1:c2:75:6c:e3:16:93:a9:14:58:89:ee:8d:7f:
68:8b:1f:b6:e0:2e:d8:e8:40:2e:4d:39:a6:7e:aa:86:0b:3b:
2e:5d:ea:f3:8c:6f:90:37:c3:b9:dd:cb:74:8d:24:c4:0a:a4:
4c:b6:d1:77:1e:17:62:9c:dd:2c:8f:08:87:d1:1e:6d:b8:e2:
65:8f:c4:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:09:12 2025 by rpki-client