Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9b91b125-6125-3a2f-8309-02516c7fe510.roa
File: 9b91b125-6125-3a2f-8309-02516c7fe510.roa (raw, json)
Hash identifier: oAatHHyJHzA+nLQqWRj4sGibJj7muUITcfUz5IuuVIA=
Subject key identifier: A2:DF:58:1D:3B:F7:E1:4D:14:91:25:EE:A8:04:D6:D1:CF:0D:43:91
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F432858484C10174DC4C05F897FFFF900
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9b91b125-6125-3a2f-8309-02516c7fe510.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 203
IP address blocks: 20.148.96.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:17:4d:c4:c0:5f:89:7f:ff:f9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=8134094d-0d18-40f7-8e7d-c90cd40397e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8b:a6:32:66:22:8f:24:22:c3:30:12:5f:1c:
66:70:24:9c:2f:26:ff:ab:f2:00:57:53:48:21:fe:
42:2b:77:ba:a8:1d:49:56:b1:5d:8b:61:e3:a9:c7:
11:e8:e1:36:8e:11:4e:95:a7:d7:b8:1e:9d:b0:1d:
58:07:b5:a6:a4:48:83:bc:d1:d1:cb:c0:1a:1b:5b:
d3:69:64:53:37:b6:97:ad:70:9f:cb:b6:d9:15:97:
22:1f:0a:7c:04:04:3f:6a:9f:36:8f:fb:3e:75:f4:
4e:e6:33:22:db:46:32:0e:5d:18:df:e3:cc:1f:ca:
90:4c:30:81:da:97:39:01:65:ea:2e:e9:5b:f4:4a:
99:f3:17:aa:30:33:12:16:56:c3:39:f3:46:9d:38:
97:f1:75:97:11:c6:9b:a6:d1:c0:5d:ed:a8:43:d7:
e6:50:e2:2a:5b:57:22:79:61:c4:dc:88:09:90:c3:
85:94:db:77:2a:b2:da:38:c2:45:68:0a:ca:7e:fa:
47:a5:46:e5:ff:e2:96:96:e0:a6:9d:96:ba:d3:61:
9f:e2:cc:14:63:e7:19:19:a9:43:5f:2a:5f:f7:79:
aa:5c:30:30:64:25:62:c5:1a:82:2c:ec:bc:4c:88:
38:24:52:36:c1:c7:69:d3:aa:75:2e:b5:69:ab:82:
e7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:DF:58:1D:3B:F7:E1:4D:14:91:25:EE:A8:04:D6:D1:CF:0D:43:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9b91b125-6125-3a2f-8309-02516c7fe510.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.148.96.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:9d:73:0a:b8:6c:5e:24:27:b8:65:c4:17:1c:96:cb:76:76:
c3:3e:a1:cc:fe:16:85:38:31:97:86:27:c0:66:5d:96:82:03:
cb:4b:f0:39:85:9e:d5:b6:4f:4b:38:1a:98:c4:0e:cc:08:7c:
fc:58:45:ee:1d:da:84:3e:34:e5:c1:46:8b:5b:bb:f8:4b:e2:
6f:23:05:9c:47:ce:f5:3f:72:56:2e:3a:65:96:ee:dd:d7:56:
db:cc:be:76:7c:1f:ee:e9:34:a0:10:6c:1c:4d:12:0f:1e:f4:
9c:c8:64:29:a5:29:0e:f2:cc:e0:a6:1d:39:64:65:a5:ba:97:
e6:df:0a:9c:3d:35:48:b2:8c:fe:16:53:6c:fc:89:a5:56:7c:
86:af:e2:67:fc:a4:9d:98:df:84:9f:ee:55:dd:4b:2f:ce:13:
85:c6:f7:0e:8b:e2:0c:8a:68:0d:c8:41:26:70:c3:3c:13:2e:
ca:8b:61:47:98:75:0c:57:91:1a:08:48:63:1c:04:a6:f5:0a:
f9:a9:48:71:a4:86:28:3a:56:5f:ca:c1:d6:64:ec:a9:10:cb:
5b:16:6e:2c:15:13:fd:11:8a:a9:b5:ac:86:1e:5f:2c:7a:2d:
1a:78:4d:60:c1:3f:f8:13:ff:d5:bd:28:88:43:d8:57:c2:b8:
22:7c:b7:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:32:34 2025 by rpki-client