Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0fa1af53-ce9b-3cb7-ad6a-76d49add7e6e.roa
File: 0fa1af53-ce9b-3cb7-ad6a-76d49add7e6e.roa (raw, json)
Hash identifier: erBUfQfa6DTwj2wFTVjezMq9EUGtsTTvzFq5Plu3FP0=
Subject key identifier: 7F:61:E0:D9:91:27:0C:D0:46:22:1D:EC:4F:87:FA:72:95:92:52:A9
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F432858484C1016711A7BCD2C1B5A15C0
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0fa1af53-ce9b-3cb7-ad6a-76d49add7e6e.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 203
IP address blocks: 20.148.128.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:16:71:1a:7b:cd:2c:1b:5a:15:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=c6171123-3261-40da-9663-380f380c9e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:41:89:4c:6e:ae:34:a2:07:2a:12:e0:cf:b9:
16:03:bb:81:cf:cf:a7:41:6c:9a:35:52:10:bf:67:
68:9b:20:5e:fc:5b:41:15:81:5b:e1:9a:f4:12:82:
4b:9e:c2:c2:2c:ec:8d:ed:d7:78:5a:95:e2:d6:c9:
96:3b:b4:f2:38:06:46:20:d5:66:1c:fc:b8:f6:ca:
fb:08:83:58:e3:eb:65:2e:6d:18:c6:d5:f0:cf:ad:
a3:4a:ed:b0:d7:42:0c:5c:7e:c2:4a:61:a0:6c:29:
45:e8:e8:1d:3b:a8:6d:0a:4e:1d:f7:18:f1:8a:5c:
7e:1f:11:47:65:4c:92:0b:77:a8:2c:d4:23:3d:34:
55:37:27:5d:e8:93:99:00:3b:0c:5b:69:6d:25:c6:
76:ae:6d:ed:08:e1:0b:ac:1c:33:14:bb:66:3d:69:
cc:cd:3a:6f:ab:2d:9c:89:65:72:d9:df:68:e8:33:
20:4a:7f:5c:35:a6:70:38:88:52:e8:85:6f:95:29:
ef:39:8e:54:d2:5d:96:f8:95:7a:c9:7b:9b:d2:1e:
6f:6d:10:a5:bf:b5:87:48:f0:65:15:8d:a4:31:ce:
69:dc:fd:4a:bd:2a:bc:66:4b:f5:15:e7:58:08:ad:
fe:50:24:a7:1d:b4:6a:06:cb:e9:a4:50:e5:8b:62:
cd:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:61:E0:D9:91:27:0C:D0:46:22:1D:EC:4F:87:FA:72:95:92:52:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0fa1af53-ce9b-3cb7-ad6a-76d49add7e6e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.148.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:aa:09:6f:be:e4:ba:d5:82:33:f2:7f:31:fd:00:e3:62:35:
54:6b:82:1a:5e:77:ab:ce:ab:ed:ca:77:ae:b5:3e:8a:e4:36:
8e:df:c1:2e:c8:c2:20:b2:5d:2b:d4:33:36:6c:72:6e:37:91:
35:d6:74:12:5f:e7:e6:3a:e3:86:bd:03:ab:4b:50:fb:a0:81:
cf:98:a3:39:a5:91:f1:4b:b0:26:fe:c6:34:2a:a8:e8:73:51:
5e:2c:6a:b3:5c:a9:e6:82:12:b8:a6:be:25:90:f1:71:25:75:
e5:85:d5:50:01:c1:5c:39:b4:99:ae:ff:62:1c:b9:5f:2d:a2:
b7:04:5d:fa:59:04:0c:9c:cc:e0:49:c5:32:58:24:6e:4a:79:
f7:1f:4e:a1:6f:3d:ed:7e:88:45:74:77:f0:7e:50:ce:da:30:
76:46:89:ad:37:5f:73:cb:23:53:7c:5e:6f:fd:1d:0c:b6:43:
04:2f:ff:2c:ac:39:e5:c1:99:02:30:52:55:5c:02:82:4c:26:
16:04:2b:61:03:71:80:da:56:ea:e1:6e:eb:91:4b:79:e7:89:
2d:63:24:5d:c2:31:bb:5d:42:d3:4d:ed:64:96:cb:59:47:6c:
b1:46:30:4a:35:58:30:93:b5:dc:81:6a:4c:ad:c6:8f:4c:b6:
ec:59:77:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:03:37 2025 by rpki-client