Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/25c05be1-22a2-319c-ab38-889cdebd39e8.roa
File: 25c05be1-22a2-319c-ab38-889cdebd39e8.roa (raw, json)
Hash identifier: dizGY2QJBR4lJdgMMCRVEH+PM8FrL8Km831bKbVCjHc=
Subject key identifier: 32:5C:D4:17:5E:5E:03:FB:65:27:E6:41:58:A7:80:F2:DE:F3:E6:47
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584843B00BCCE26AFEFEC8BFA300
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/25c05be1-22a2-319c-ab38-889cdebd39e8.roa
Signing time: Fri 20 Dec 2024 02:00:40 +0000
ROA not before: Fri 20 Dec 2024 02:00:40 +0000
ROA not after: Thu 20 Mar 2025 01:00:40 +0000
asID: 203
IP address blocks: 20.137.14.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:43:b0:0b:cc:e2:6a:fe:fe:c8:bf:a3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Dec 20 02:00:40 2024 GMT
Not After : Mar 20 01:00:40 2025 GMT
Subject: CN=7c005a1b-0742-47a4-a257-6f5195f55625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d2:b5:0f:19:dc:d2:09:f5:34:c5:2b:7c:99:
f8:56:82:18:64:6c:cc:af:a4:c2:1c:57:62:4f:67:
69:c5:0a:06:53:66:52:72:12:b1:e6:3c:53:d9:b6:
dd:a3:29:26:50:19:10:2f:b4:77:94:e9:c5:4e:79:
5b:a9:0d:8d:cd:61:c7:db:21:1d:a7:00:8c:2d:d4:
81:4e:9e:3e:eb:54:30:62:fb:f7:4b:f4:96:82:9d:
19:2c:38:e9:a6:10:2a:60:19:45:a4:e5:8e:49:93:
bc:35:af:91:a5:59:79:8f:05:2d:40:e7:00:7f:fd:
99:2f:1c:b3:b3:bc:45:18:3d:a1:65:5d:fa:1b:b2:
26:d6:dc:62:08:5e:d3:b0:54:5a:6c:b1:0e:c5:d0:
6d:97:95:c2:85:99:b1:a0:9b:f1:db:42:87:ee:3d:
f0:d2:08:39:11:37:58:6e:2a:53:45:ba:fe:84:d8:
72:ee:f6:ac:29:f1:5e:42:5e:e2:8e:de:cc:f2:86:
93:1a:19:ea:c5:d3:03:c1:3b:ad:43:4f:c1:a3:9c:
e2:b0:20:ce:e9:5e:13:9c:9a:db:9f:18:a9:0b:96:
a0:f5:b1:8d:2a:15:73:e0:6c:88:03:3e:70:68:57:
d5:e3:0a:97:52:54:d8:b0:4e:ce:3b:6c:ae:b5:e8:
d3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:5C:D4:17:5E:5E:03:FB:65:27:E6:41:58:A7:80:F2:DE:F3:E6:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/25c05be1-22a2-319c-ab38-889cdebd39e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.137.14.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:b8:7c:af:0b:c3:e8:b3:ce:a3:24:30:3f:6d:43:d5:82:ee:
ef:75:d4:fb:3f:66:84:b4:43:fa:34:41:78:e5:2b:6c:82:73:
bf:f9:9a:c5:55:85:0f:ba:6e:6b:c8:b2:96:84:9b:2c:40:03:
37:92:b8:1c:f9:f4:60:17:44:36:87:ab:8a:30:49:d4:a0:12:
f3:43:62:f3:21:4d:a2:45:3c:be:a6:17:59:23:9f:6d:c7:5d:
96:09:47:d2:04:b3:3e:7f:f6:90:df:cb:76:60:bc:81:1c:c9:
29:6a:49:10:77:3f:be:ed:0d:d3:e4:dd:6c:9e:f9:37:5d:3b:
f0:55:66:5e:ab:f4:d6:23:e9:32:e6:b7:54:15:4a:e3:29:01:
01:bd:b1:07:28:8a:0d:d3:4e:63:8e:01:a3:59:bf:05:6b:f7:
cc:23:2e:70:36:a3:4b:a6:b4:02:b3:fb:98:f0:c7:96:73:63:
6e:e1:c7:8f:a4:bb:dd:df:39:91:5c:23:a0:16:b3:a6:28:31:
00:da:ae:79:3e:40:86:a2:af:ea:bc:7a:68:bc:8f:47:e4:d6:
49:5b:1c:fd:2c:17:41:50:08:70:13:3f:71:6b:01:60:b4:8b:
c8:ed:6b:09:42:be:3d:c8:30:41:4d:11:c4:e5:46:b2:ea:5e:
42:13:d7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:45:58 2025 by rpki-client