Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0ac0a9ef-665e-324c-b70d-e56f5bd3a914.roa
File: 0ac0a9ef-665e-324c-b70d-e56f5bd3a914.roa (raw, json)
Hash identifier: CksckQBO1VdEOgjfzInKMqFXoHJdjhPM9/YN/vfIHhY=
Subject key identifier: E3:EA:15:9A:AB:4F:C3:D4:17:38:AB:32:31:60:28:1B:D9:EA:CD:D0
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F43285848170510C96B04B7CEBEE9E100
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0ac0a9ef-665e-324c-b70d-e56f5bd3a914.roa
Signing time: Wed 04 Dec 2024 02:00:39 +0000
ROA not before: Wed 04 Dec 2024 02:00:39 +0000
ROA not after: Tue 04 Mar 2025 02:00:39 +0000
asID: 3356
IP address blocks: 20.139.0.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:17:05:10:c9:6b:04:b7:ce:be:e9:e1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Dec 4 02:00:39 2024 GMT
Not After : Mar 4 02:00:39 2025 GMT
Subject: CN=6d1d2cb8-942b-4cf6-a406-c8efcdb4f64b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:af:7e:25:09:d2:21:9d:31:a0:f1:6a:18:34:
3d:1f:ff:08:5f:30:98:a6:4d:d9:ce:22:92:14:9d:
89:a5:82:80:82:2b:96:3d:fa:69:5f:53:9d:5a:46:
96:8c:92:2b:bc:19:37:41:f8:e9:9f:66:40:2c:c0:
c7:b2:41:b2:b2:af:54:84:1d:6b:53:27:77:d3:13:
83:bb:2e:bb:74:c3:14:55:b6:5d:dd:cd:50:9b:92:
ab:95:d8:d0:6f:47:64:71:29:cb:82:26:07:5a:a6:
c3:01:17:5e:1e:51:69:62:d0:53:dc:14:26:05:24:
21:49:3d:68:ca:36:40:a3:60:ac:1f:9a:1a:55:06:
52:46:33:c2:21:be:44:19:28:b8:c9:12:c0:e0:d5:
df:89:c4:b3:f8:30:a6:a4:cb:7a:2f:66:cd:ae:d1:
4d:f3:ca:59:33:8b:dd:bb:f0:af:4d:d4:ea:01:c2:
23:25:29:8d:aa:b6:1a:0f:10:d7:2c:26:10:13:38:
ca:c6:62:2e:2a:97:31:dd:f5:c1:f6:4b:a0:be:f6:
40:35:7f:bf:ec:af:ca:f9:9c:c1:42:35:b3:14:76:
fa:56:93:eb:74:66:88:0a:90:31:68:ef:d3:34:62:
ad:0b:9a:d1:cb:9b:01:a8:86:2d:ad:13:16:91:dd:
28:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:EA:15:9A:AB:4F:C3:D4:17:38:AB:32:31:60:28:1B:D9:EA:CD:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0ac0a9ef-665e-324c-b70d-e56f5bd3a914.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.139.0.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:bd:88:01:2c:1f:38:6f:70:ce:41:d9:8f:b4:96:7f:72:fe:
93:56:ac:d0:b9:6b:ce:2d:dd:a4:94:b2:b9:58:ce:58:9d:fe:
6e:c5:25:01:72:0c:c4:c8:94:f2:3c:05:bc:17:d0:77:92:17:
fc:20:b0:0d:5b:69:6d:11:d6:0d:fc:d0:7c:00:21:bf:9c:a5:
b4:7a:8a:a1:50:58:ec:c5:ed:a3:44:16:20:98:de:3e:ae:69:
fd:13:2a:be:36:f5:64:16:de:23:be:62:9b:cf:82:79:77:01:
a2:7c:6b:db:11:bb:51:08:6e:be:90:9b:b6:20:18:e4:9d:5f:
fd:9c:aa:d9:d1:7c:93:81:72:a4:fb:b5:70:16:1f:60:01:f7:
5e:f8:e1:a0:06:76:e1:2f:3e:c1:e3:f8:e7:ad:7e:32:20:b3:
eb:85:a8:88:a4:4c:ee:33:45:c7:34:a5:f9:27:fa:0e:c4:df:
71:77:f1:5a:b7:33:85:19:fa:75:f1:5e:5a:1c:a7:1c:86:56:
e9:d4:6e:e0:31:5d:9f:c7:42:32:a9:07:72:a9:ca:30:d4:5c:
e3:72:f2:af:00:80:60:3b:23:d2:be:fc:22:09:39:fd:33:cc:
5a:40:42:cd:bf:a0:49:46:9d:46:c9:e8:e4:7a:4a:d9:87:c1:
f0:82:f5:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:38:37 2025 by rpki-client