Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/59a83d47-6316-3fc5-9032-22b42a178341.roa
File: 59a83d47-6316-3fc5-9032-22b42a178341.roa (raw, json)
Hash identifier: wcI+Z/oY8dQcSxYEHf1LALIILw3St2GsLIc668zxkRU=
Subject key identifier: 81:F7:9D:3A:71:AF:85:39:E1:46:A1:EB:D7:BA:6F:57:40:B5:39:3D
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F432858481705107ACBFB8860F5EF77C0
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/59a83d47-6316-3fc5-9032-22b42a178341.roa
Signing time: Wed 04 Dec 2024 02:00:39 +0000
ROA not before: Wed 04 Dec 2024 02:00:39 +0000
ROA not after: Tue 04 Mar 2025 02:00:39 +0000
asID: 202
IP address blocks: 20.134.192.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:17:05:10:7a:cb:fb:88:60:f5:ef:77:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Dec 4 02:00:39 2024 GMT
Not After : Mar 4 02:00:39 2025 GMT
Subject: CN=c8fcd655-e793-4799-bd7c-544e708862a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:60:76:6e:45:ae:52:a9:ed:e6:63:95:77:e1:
f6:91:2a:c1:17:27:4e:76:c6:60:5c:0f:2b:43:81:
6a:7a:7d:bf:dc:ea:ca:b5:b2:15:56:44:d2:1b:7e:
93:ce:c2:f2:ec:1c:00:a7:52:85:e0:05:2b:18:78:
59:b2:bb:35:26:8c:96:19:b1:b5:51:67:7f:9e:8a:
05:1b:9e:22:61:f4:ea:ef:5a:34:95:26:ac:38:ca:
8d:06:9c:5b:77:cc:ff:cb:ae:e6:62:53:3f:f6:b6:
bf:29:66:5b:89:01:30:30:f9:fd:8a:de:06:3f:1d:
77:e7:0d:a9:e5:83:28:12:eb:af:07:26:61:9d:30:
c1:a3:11:02:a5:68:d3:8c:9c:39:da:99:64:9d:28:
9b:b0:54:2a:0d:2f:d9:fe:49:8f:5c:e6:e2:c4:b6:
5e:88:46:9a:3e:d2:b5:72:e7:43:65:69:94:28:6c:
3d:89:58:1a:b7:b3:e8:1c:ef:73:f3:33:55:d2:35:
8a:d5:96:b8:8c:d0:69:45:67:ab:d7:61:ef:28:52:
5b:07:36:ca:1e:e9:fb:1e:ee:d3:f1:80:66:a2:3b:
3b:17:a2:22:9e:d9:86:aa:5e:ed:f2:f7:a1:20:20:
8c:59:0d:3e:e1:9a:f5:f9:27:85:2b:14:4b:20:c6:
e4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F7:9D:3A:71:AF:85:39:E1:46:A1:EB:D7:BA:6F:57:40:B5:39:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/59a83d47-6316-3fc5-9032-22b42a178341.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.134.192.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:11:da:c8:e5:16:0c:bb:fc:57:a5:57:20:2c:12:1a:e9:9d:
ad:c1:b2:1a:5b:5e:17:85:db:a0:31:92:87:f4:54:8c:ea:87:
75:a3:60:29:3b:85:2e:a8:8b:f8:fc:a5:19:45:37:7b:92:e0:
96:d3:8a:2f:51:d1:78:fd:37:c0:cd:42:da:0a:1f:4e:c3:c1:
21:ad:23:a4:0a:01:74:30:39:fb:c9:9f:ac:1c:e2:bf:8e:a1:
cf:aa:38:7d:cc:a2:77:36:a3:85:e0:47:65:74:50:87:ad:10:
63:67:a2:81:28:82:c0:fb:6d:d7:e6:7b:d6:19:4b:0d:75:44:
61:14:08:60:88:07:b8:c2:4b:95:bd:d6:df:9b:b3:39:b2:64:
b1:22:9d:4d:b1:c8:e4:49:01:ee:4f:ef:04:d1:d5:67:fc:5a:
de:55:0c:d6:86:48:ab:3a:ee:a1:63:0b:21:57:60:15:90:10:
13:98:63:f1:71:ae:51:80:1b:53:2f:ce:05:6d:47:ba:84:7f:
d7:e4:5e:0e:d9:5f:5b:a0:23:43:1f:cc:77:b9:66:e1:9d:76:
d8:bb:d6:2a:65:1e:77:6e:3e:14:9c:5c:8d:96:a1:77:bd:a0:
7f:b3:52:59:86:ee:8e:39:d2:7f:db:30:e9:cb:87:da:f7:28:
36:5b:c8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:01:13 2025 by rpki-client