Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a47fe637-9574-3387-9479-f9a35116d96f.roa
File: a47fe637-9574-3387-9479-f9a35116d96f.roa (raw, json)
Hash identifier: XLpwu8YcM3mHoTfuB7YuJleYRAPk7rey+MgDvcxcHPE=
Subject key identifier: B5:17:0F:F1:59:F7:70:04:4A:1A:8C:94:81:90:A1:16:C5:A7:9C:5C
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F432858484C101526F96797F389369000
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a47fe637-9574-3387-9479-f9a35116d96f.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 203
IP address blocks: 20.132.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:15:26:f9:67:97:f3:89:36:90:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=ced9eb46-b39b-4051-9387-c74ecf902273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5b:51:f5:85:24:c2:a9:06:e8:61:2b:72:c6:
64:f7:bc:00:e5:d4:7c:39:10:e9:d9:ec:06:0d:0f:
f8:b1:8b:14:43:a3:2a:c5:ee:4b:cd:b4:93:36:93:
99:55:0d:76:c5:c3:b0:b1:17:af:07:52:f7:6f:8c:
56:a7:7f:0b:ee:e5:79:a6:38:0d:23:ca:9c:b3:b6:
45:7b:15:9d:d8:52:69:60:8f:28:6a:45:4f:c5:99:
9b:86:07:f9:d5:1c:0a:56:cb:14:ac:a2:76:41:ae:
b2:d1:82:29:c4:43:91:cd:87:8e:9c:c5:e0:e0:4f:
8b:2c:c7:ca:6d:4d:38:de:72:86:c2:ea:79:37:a0:
37:76:63:9e:70:f4:12:4d:09:c5:f1:dc:c0:15:e3:
b1:da:d3:24:5b:62:59:a7:e5:a3:a6:e9:1f:64:e4:
db:a9:20:43:1a:34:11:da:71:cb:3f:f7:ce:e5:75:
39:3d:54:ea:6f:fe:40:8c:1b:1d:d9:a8:29:6c:21:
cc:dc:8f:fb:cd:38:50:c1:85:55:05:22:9c:15:98:
ec:e3:ed:7a:9d:0b:f9:f5:5b:96:4a:a6:2e:a2:76:
dd:05:72:f0:34:2b:ac:78:ac:85:e1:8c:93:1c:3f:
a5:4c:63:8d:a8:b8:1d:44:6a:98:18:11:50:ca:b6:
61:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:17:0F:F1:59:F7:70:04:4A:1A:8C:94:81:90:A1:16:C5:A7:9C:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a47fe637-9574-3387-9479-f9a35116d96f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.132.230.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:70:84:9d:a9:48:b6:07:26:80:3d:23:4c:14:bf:63:08:b0:
b8:09:fa:ab:d7:c3:97:57:1a:27:4a:1e:d1:59:15:9c:f1:25:
f4:cc:95:28:9c:32:ae:2b:e9:4a:05:c4:3b:92:6b:e1:4b:b8:
57:cd:19:fb:f4:1c:bd:07:33:e2:94:3c:f5:a2:93:95:e6:d5:
5b:2b:55:97:2a:a5:d1:99:5c:ce:e8:5e:4a:92:7b:8f:7c:6e:
f3:94:8f:11:0e:72:e8:8b:cd:d3:40:94:c7:0b:f6:65:cf:ba:
96:52:c7:89:ac:a5:2a:2a:3d:23:1e:4b:0c:a2:29:e8:b6:5b:
a5:ef:68:12:35:81:b9:3a:45:72:8c:67:d5:88:9f:02:84:ef:
89:8d:1e:cc:73:fb:d2:c5:91:73:d2:a3:0f:69:20:c9:2f:12:
38:fd:e3:39:8b:96:17:44:e3:8f:51:a3:05:21:c1:63:3f:74:
27:7d:42:a7:86:1d:cf:c1:6f:74:4c:8f:6d:c9:cb:b1:ea:ac:
9b:a3:bb:a8:2a:6b:f6:cb:98:2a:6f:32:f6:4c:6b:4c:12:aa:
29:46:64:6e:31:ee:00:2f:9b:36:5f:cf:52:e5:c0:ef:d4:5d:
d2:cd:52:2e:a3:dc:8a:4e:60:cd:84:88:be:e3:c0:35:a5:a5:
b7:bc:39:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:15:33 2025 by rpki-client