Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/552f37d1-55ae-3591-bc00-063e37bf73cb.roa
File: 552f37d1-55ae-3591-bc00-063e37bf73cb.roa (raw, json)
Hash identifier: q8iwP4Amjbp62j35VThMBSiDkTxkou1eZgpMMx7rmyk=
Subject key identifier: F7:FA:42:B0:CC:CA:EB:04:74:2E:83:8F:E9:AC:8E:55:85:1B:8F:25
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F43285848143A83A0237743CA445710C0
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/552f37d1-55ae-3591-bc00-063e37bf73cb.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 203
IP address blocks: 20.134.0.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:83:a0:23:77:43:ca:44:57:10:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=2fd7ee00-f923-45d2-8c5c-8ab12ca4841a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:13:42:4e:ea:de:f2:26:df:0e:66:fd:f1:a1:
c5:8e:cf:64:f3:91:d3:09:49:d8:e5:f7:d7:c4:83:
a1:42:f7:ba:02:42:d1:88:8a:c5:8b:4b:80:5e:b7:
93:04:4b:28:17:6b:da:ae:fa:68:02:99:87:af:10:
0a:9e:3e:7a:d3:c3:67:d4:20:8c:e9:d5:3f:6d:3b:
6d:55:76:d4:fd:6e:6e:fd:ef:ae:7f:c6:60:fd:91:
a2:68:af:af:47:d5:dd:7d:59:d1:79:da:cc:49:f1:
b6:8c:87:e9:95:4b:7e:1a:3f:c6:9d:cf:e6:0b:a1:
83:3d:16:38:fe:aa:ce:79:43:1c:4f:e6:27:34:95:
a4:43:67:2f:4e:e1:a0:80:c8:ec:78:c4:ea:f1:2a:
29:ff:41:b4:2e:43:64:fb:d6:f7:d4:70:64:5b:04:
9e:c0:c7:47:fc:cf:2c:3b:45:76:f6:84:03:e6:9b:
b6:92:84:b0:c4:0c:b7:8f:f5:80:2c:ff:44:5c:ac:
47:21:19:b7:3c:a2:f3:ec:31:cc:76:41:9e:ae:43:
a7:96:a0:15:6a:d4:6c:39:04:bc:50:27:37:5f:a3:
80:e7:74:69:e0:cc:93:d3:d4:a4:75:6b:72:40:2e:
c1:a8:25:4b:45:da:18:c7:34:7b:96:2f:b8:b7:2d:
e2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:FA:42:B0:CC:CA:EB:04:74:2E:83:8F:E9:AC:8E:55:85:1B:8F:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/552f37d1-55ae-3591-bc00-063e37bf73cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.134.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:68:a4:87:ec:d4:4f:89:82:d2:e7:f4:8b:ab:2a:16:8a:54:
30:1e:f5:25:9d:a3:0f:bd:56:2f:79:ff:a1:71:5c:10:97:58:
5c:fb:4a:9f:0a:df:7f:54:2e:4f:3a:a4:12:66:a5:e3:b3:12:
3c:78:0e:20:07:2c:19:12:e5:64:a1:6c:f1:25:eb:eb:e4:64:
52:76:89:b5:27:23:cd:ef:0d:b1:08:3b:9f:48:39:12:68:15:
a6:b8:b1:16:49:29:75:44:10:ca:6e:e4:91:91:42:fa:d7:13:
0e:45:03:11:02:a7:81:14:67:10:31:b1:52:54:b2:d8:a9:71:
ff:c7:33:f1:84:5b:87:af:66:19:f0:f5:1a:c7:29:1f:3e:55:
af:40:78:e7:f5:42:94:2b:c1:c3:68:4d:39:3b:8e:05:ee:5b:
21:87:3f:5d:7e:cc:e7:40:d9:34:ff:23:53:22:a7:b3:c0:ee:
91:f0:7d:4a:7e:58:be:00:34:83:9b:cd:5e:ce:6f:74:cc:e9:
d6:ac:4a:88:41:09:2b:59:63:3f:1d:c5:19:ba:ab:cf:54:70:
27:a6:06:e1:b0:38:45:b6:3d:fc:03:6d:b0:c6:8a:5b:c9:dc:
24:49:37:45:84:72:35:87:77:8e:b5:b6:31:ab:f9:76:32:f0:
58:0e:1c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:10:36 2025 by rpki-client