Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/895b35f2-676a-36ad-9bd6-7860fc097fbf.roa
File: 895b35f2-676a-36ad-9bd6-7860fc097fbf.roa (raw, json)
Hash identifier: hkNc20XaxeDB9N8kcl9AL4GE69j1r/qOY0zGgPkm6Uo=
Subject key identifier: D6:A8:48:B1:F4:71:65:3A:AB:6E:E4:65:A0:39:D0:F2:46:73:C0:41
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584879DAE9EBCAC3A51B3A6D4740
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/895b35f2-676a-36ad-9bd6-7860fc097fbf.roa
Signing time: Wed 08 Jan 2025 11:40:47 +0000
ROA not before: Wed 08 Jan 2025 11:40:47 +0000
ROA not after: Tue 08 Apr 2025 10:40:47 +0000
asID: 203
IP address blocks: 20.133.40.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:79:da:e9:eb:ca:c3:a5:1b:3a:6d:47:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Jan 8 11:40:47 2025 GMT
Not After : Apr 8 10:40:47 2025 GMT
Subject: CN=854e1c24-8642-49f0-aeb8-f2942f80cb2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9b:c7:38:df:df:30:4d:fa:b5:04:eb:24:1d:
a6:65:b0:07:ab:a8:c4:5d:41:f2:41:e7:a3:b6:54:
91:11:1d:f2:35:7e:de:49:c2:59:10:6a:2b:8d:07:
e0:53:04:ab:d0:11:f4:3a:dc:16:1b:6d:d4:ed:cd:
2f:12:28:b1:08:6a:f4:49:56:e4:d3:d4:1e:1f:96:
a8:9a:9d:bf:5d:d4:22:aa:6d:9b:ae:20:bc:87:b1:
a7:b6:3b:d9:47:bb:90:dc:cb:4a:a9:99:78:76:8f:
25:58:75:9c:b7:07:4c:3b:52:80:74:34:84:80:8a:
e3:9e:1a:58:78:b7:92:00:79:4a:e9:eb:3e:99:59:
65:d3:0a:f0:30:c8:fe:ae:cd:82:d1:de:d6:45:f4:
e6:0c:56:bc:81:19:95:13:ec:62:b9:ea:c1:cd:34:
71:3f:d9:50:5c:d7:cb:77:48:f3:ec:44:93:d9:4c:
fa:46:19:78:b1:5b:e6:32:fc:ff:60:db:24:aa:7b:
7f:ca:4e:97:6b:9b:40:54:5f:33:e4:43:32:43:61:
25:bf:1c:92:7b:ad:89:19:b8:fc:53:0e:22:78:65:
6e:d7:8f:a5:1d:3e:58:05:ee:65:d6:94:e4:97:6f:
7f:e9:a0:9a:fe:4e:bb:91:2c:5e:b0:e3:89:4f:eb:
5d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A8:48:B1:F4:71:65:3A:AB:6E:E4:65:A0:39:D0:F2:46:73:C0:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/895b35f2-676a-36ad-9bd6-7860fc097fbf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.133.40.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:39:e3:13:9e:8f:48:4b:94:be:cf:20:c6:7e:3f:12:af:32:
80:8f:44:c8:02:18:ff:d4:e8:b4:3d:50:ea:df:f5:62:d3:31:
b0:ef:93:63:76:1e:94:db:94:98:97:00:26:16:fe:2e:a0:a4:
ea:3d:85:75:be:15:28:5c:9c:f4:b9:c5:d1:39:0e:01:81:e9:
40:43:44:9e:f0:75:ba:48:6c:ef:7e:1b:ec:8f:30:28:dd:ca:
86:4f:d9:f6:4b:14:56:b8:11:91:8d:5d:7a:6c:ed:8e:e2:fd:
36:a6:fd:a9:c8:2d:5f:11:db:b7:ca:cb:64:41:4a:17:2e:99:
58:48:4b:81:2e:83:6a:48:1a:43:75:4c:d4:6b:64:09:fb:48:
e4:9d:8b:72:14:c8:96:58:75:2b:a8:d5:ff:28:2a:da:2c:64:
6a:6e:bf:0d:74:e2:93:62:ec:25:fe:89:f3:68:63:1d:c0:02:
db:b2:bf:cd:9c:49:3b:c8:1c:4e:e0:a6:95:ed:79:29:eb:22:
41:3a:db:97:20:ea:72:f3:26:10:19:63:c6:7d:b3:15:a8:11:
55:90:bd:ae:94:5c:35:d8:e1:fe:df:7f:e1:7f:a4:3d:f1:8d:
a2:51:c1:c8:bd:e3:dd:20:2b:49:6a:72:73:48:e3:c9:d9:2f:
3e:cd:14:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:10:14 2025 by rpki-client