Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0b5b5f03-81f3-3c83-8bef-43503d21ca3a.roa
File: 0b5b5f03-81f3-3c83-8bef-43503d21ca3a.roa (raw, json)
Hash identifier: VpUJCMqpx7heQ1g3E3PB2Sc3dDBeneNIAIUN1iV18rE=
Subject key identifier: EC:C4:D9:C0:2D:4D:81:99:38:55:33:2C:EF:F0:44:EA:EC:6C:A7:D3
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F43285848B35B6C2F6DB097F163756800
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0b5b5f03-81f3-3c83-8bef-43503d21ca3a.roa
Signing time: Wed 29 Jan 2025 02:00:39 +0000
ROA not before: Wed 29 Jan 2025 02:00:39 +0000
ROA not after: Tue 29 Apr 2025 01:00:39 +0000
asID: 202
IP address blocks: 20.133.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b3:5b:6c:2f:6d:b0:97:f1:63:75:68:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Jan 29 02:00:39 2025 GMT
Not After : Apr 29 01:00:39 2025 GMT
Subject: CN=481cec80-29b1-4b20-84c8-05c336ab3502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6d:63:17:34:4f:d9:5a:8b:33:3c:cb:95:ce:
da:00:30:97:cc:cf:21:68:f9:2f:d4:af:a7:15:29:
6e:4f:ca:28:1f:af:92:33:68:11:a3:db:21:82:b0:
31:4a:34:d9:64:e6:57:97:46:45:76:f1:03:b6:93:
1d:50:9b:76:80:0d:83:e8:fb:66:93:c6:e2:43:fb:
9b:a7:82:5d:93:44:0a:1d:7d:b6:d5:85:62:73:c5:
06:9d:dd:cb:77:c0:cc:b1:cc:14:4a:85:4e:91:90:
4f:47:37:0f:8c:d2:bb:f0:35:9c:3f:a1:6f:5a:7a:
1f:e7:7a:9a:21:86:c5:16:55:ca:7a:08:ac:a6:f1:
30:aa:09:1e:49:99:62:74:4f:35:ab:2b:5d:43:4e:
f3:54:95:1e:d9:dc:fd:44:41:1f:9a:07:b4:19:68:
aa:28:7c:52:3e:93:b3:59:96:30:e8:a1:a2:0c:2a:
ed:81:40:ef:3a:0f:13:c7:f1:63:72:7a:bb:da:5c:
bf:aa:1c:87:21:5e:07:b5:3b:b4:16:29:52:e8:16:
7e:29:a6:7a:51:26:3d:64:3e:2f:b4:d6:ae:90:c1:
26:4d:cc:45:bf:08:4c:0d:64:e0:a9:54:d4:2a:07:
f7:6f:51:c7:a9:32:b3:c1:a4:cb:ce:e5:d1:b2:5b:
5e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C4:D9:C0:2D:4D:81:99:38:55:33:2C:EF:F0:44:EA:EC:6C:A7:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0b5b5f03-81f3-3c83-8bef-43503d21ca3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.133.232.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:c3:bf:c1:e5:92:10:d3:82:b8:e7:01:4e:94:ab:be:d5:6d:
89:62:15:3f:82:06:48:bb:bc:f6:94:73:62:70:c8:85:24:33:
68:b4:f0:93:70:40:22:b5:c2:8b:92:5d:a0:22:5f:ee:cd:aa:
d2:35:09:0c:00:82:79:01:96:73:d5:01:fc:73:f8:00:ee:d8:
ff:71:93:d0:6c:c0:3b:91:ad:6a:42:ce:f4:05:3a:cc:ba:4d:
58:02:18:49:76:8e:6e:ad:22:bd:a9:cc:17:34:e8:c3:6c:22:
03:25:d3:c6:f3:28:43:33:6a:27:57:0c:e6:58:d5:1c:c9:e0:
7a:88:ac:49:92:4d:e1:1a:39:15:15:8c:a5:77:ae:6e:ba:5e:
1f:20:02:30:c0:97:f9:62:e1:38:96:37:db:93:40:a9:9e:fe:
c4:34:e9:ca:6a:36:ba:7f:f5:f6:bb:63:15:05:e6:e9:58:01:
b6:31:46:da:b9:be:ec:89:01:72:05:40:92:5f:e6:34:40:a8:
28:06:07:3d:dd:87:19:51:c8:fc:b6:a2:f2:b7:6f:65:4a:f3:
29:af:08:71:b8:99:45:14:5e:a9:00:8d:38:01:29:f8:a4:2d:
35:13:52:cb:c1:96:09:26:94:ec:57:68:f1:34:a8:7b:cd:60:
f5:b4:00:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:57:46 2025 by rpki-client