Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3b274f1e-b389-388a-a8fd-f2216056bc4e.roa
File: 3b274f1e-b389-388a-a8fd-f2216056bc4e.roa (raw, json)
Hash identifier: OIfOZ9QenYeIjmlAVpwOrrvHrPktlrqZArT1xjYSUpY=
Subject key identifier: 5E:E0:EE:3F:B3:9F:3D:60:86:FA:D7:28:29:2A:F6:D0:DB:78:B7:FA
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F43285848170510A1D37F5BDDCC954080
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3b274f1e-b389-388a-a8fd-f2216056bc4e.roa
Signing time: Wed 04 Dec 2024 02:00:39 +0000
ROA not before: Wed 04 Dec 2024 02:00:39 +0000
ROA not after: Tue 04 Mar 2025 02:00:39 +0000
asID: 203
IP address blocks: 20.139.0.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:17:05:10:a1:d3:7f:5b:dd:cc:95:40:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Dec 4 02:00:39 2024 GMT
Not After : Mar 4 02:00:39 2025 GMT
Subject: CN=2afa37c3-b5e7-4a3e-9d0b-3d99742bdb76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9f:43:ed:d4:14:7c:a6:19:56:65:d2:60:77:
5f:ab:b7:80:17:ff:5c:c6:aa:13:48:ea:df:ce:96:
ad:7a:3f:5a:3e:d7:21:0c:70:ab:d5:a0:8c:d7:d7:
cc:2c:9f:a4:83:19:a6:c1:62:68:47:f4:fb:22:85:
4d:ce:a2:e1:24:79:9e:fd:80:32:47:62:2f:fc:6b:
cf:90:36:0c:0c:c9:a9:62:94:1f:26:bc:7e:c2:1a:
62:77:7c:a9:19:2b:b2:3c:aa:1e:b4:dd:64:d0:e8:
84:ce:2d:52:86:53:a2:f6:a5:9c:88:db:8a:66:cf:
c2:d7:b0:12:2d:ca:bf:09:b8:d1:81:53:f0:50:45:
0f:91:d3:a9:7b:6f:f3:be:11:8f:2b:0d:c8:fe:78:
b4:3e:84:f5:57:fe:c5:75:92:ba:e4:0f:e4:71:cd:
b4:c7:9c:06:39:60:65:16:af:20:a3:2a:fc:1f:76:
c3:81:be:6e:19:f9:35:7f:ca:47:0d:a2:3a:27:14:
8d:f4:99:8a:d5:47:27:28:71:23:41:10:d5:11:36:
eb:a6:66:cd:4b:13:b1:c6:93:d7:10:94:b0:43:4a:
08:77:d6:af:b8:dc:22:1c:b5:5f:d8:d7:0c:cc:71:
9b:f3:90:00:47:d1:df:58:65:9c:2f:b7:fe:1e:21:
ff:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E0:EE:3F:B3:9F:3D:60:86:FA:D7:28:29:2A:F6:D0:DB:78:B7:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3b274f1e-b389-388a-a8fd-f2216056bc4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.139.0.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:6f:54:b1:7a:0d:6a:c6:ae:ac:a0:86:9c:4b:2c:71:c6:51:
0d:9e:3b:bb:39:5e:3e:f0:32:aa:8c:d9:59:78:0a:30:31:a1:
ac:0c:d9:a3:85:5d:8b:d6:70:b1:6e:b3:28:1f:37:f9:c5:6e:
5d:2c:d8:f2:61:3e:5c:be:be:1e:c6:2a:5c:3b:63:9c:e5:df:
0f:c3:3d:90:63:9a:71:e3:b3:79:2e:7a:1e:a2:2f:77:b3:0c:
59:26:cf:eb:bf:fa:68:36:f8:d5:87:cc:40:9e:06:81:d6:e8:
0d:08:34:97:49:3c:ad:f8:43:e9:77:46:ec:1c:fe:22:04:27:
4e:a9:ba:7b:43:3f:e3:97:54:a6:05:0b:4d:6e:03:36:df:33:
c7:3c:c3:7a:f3:7b:46:9b:d2:67:91:76:a0:b0:87:4e:67:6d:
5b:15:fa:58:a3:3b:31:40:6f:0b:09:77:04:9f:95:54:04:01:
fe:ee:e7:02:94:f7:ef:c9:2e:27:60:3c:67:3d:20:76:c9:e8:
33:e9:66:e6:b4:5f:60:01:64:5e:90:72:52:d2:de:8a:76:a1:
d7:d3:30:46:b8:85:56:86:32:24:91:36:66:71:9a:e2:68:b5:
e7:24:d3:4a:5b:86:ba:c7:70:2f:d0:0b:43:bb:4a:6d:a8:39:
66:69:7b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:00:36 2025 by rpki-client