Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/ad1d3994-ca3f-345f-8dbe-9fee7dd97481.roa
File: ad1d3994-ca3f-345f-8dbe-9fee7dd97481.roa (raw, json)
Hash identifier: JhzjfRa2CEmvkn7jHCGnzEchBCZg023dg+zwcCoqtJM=
Subject key identifier: D0:7A:8D:FD:B2:E3:6C:AE:C0:F5:3F:7C:4D:26:FE:43:AA:7C:A0:B9
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F43285848B35B6C825C3783CB74330A80
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/ad1d3994-ca3f-345f-8dbe-9fee7dd97481.roa
Signing time: Wed 29 Jan 2025 02:00:39 +0000
ROA not before: Wed 29 Jan 2025 02:00:39 +0000
ROA not after: Tue 29 Apr 2025 01:00:39 +0000
asID: 202
IP address blocks: 20.133.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b3:5b:6c:82:5c:37:83:cb:74:33:0a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Jan 29 02:00:39 2025 GMT
Not After : Apr 29 01:00:39 2025 GMT
Subject: CN=8b480aa2-906d-4c61-834d-2376814d79a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fd:10:70:b3:4f:9e:5d:d5:41:d7:d9:1a:27:
3f:dc:ee:c4:6e:b4:f3:53:e3:1f:1e:f3:36:77:c3:
d8:19:4d:11:d9:4e:72:58:d9:94:6c:24:da:b9:dc:
31:b8:c3:82:82:c5:bd:f1:7f:a4:c9:c8:a1:64:e3:
9a:52:d9:3e:43:a8:de:1e:23:43:1e:71:97:83:4c:
39:47:b7:55:b3:52:f0:ca:4e:67:77:15:69:6d:ff:
9c:17:0c:3a:f4:0b:fb:53:8d:be:34:1f:4e:d7:52:
70:89:bd:c7:3e:05:0d:9d:f9:e5:ea:e2:5c:8b:b4:
af:d1:ea:30:b8:0a:ea:7b:46:f3:a9:d5:a9:fe:85:
83:ea:d4:09:27:aa:1d:31:44:fa:34:ab:a5:99:4c:
c3:61:03:8b:72:d1:61:d1:c0:cd:2d:70:f1:c0:2b:
7a:08:3e:68:a4:85:99:46:65:cb:11:86:7d:61:23:
47:0e:9c:ca:6d:ad:8b:87:53:6b:11:12:aa:90:c8:
cd:4c:f6:b2:0c:a6:a4:ce:6a:10:ac:2c:34:4a:75:
5a:8f:9d:11:99:85:1c:ab:63:9b:4a:e1:c2:6b:ae:
15:f4:e9:d6:f2:06:dc:6b:1f:d5:df:5e:dd:6b:97:
79:08:df:d3:2c:bb:fe:17:cd:29:05:46:c1:2a:c0:
5c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:7A:8D:FD:B2:E3:6C:AE:C0:F5:3F:7C:4D:26:FE:43:AA:7C:A0:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/ad1d3994-ca3f-345f-8dbe-9fee7dd97481.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.133.241.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:b3:95:2f:77:1a:1c:af:24:d2:75:38:b3:c8:d5:c5:a9:72:
dc:1f:9e:4e:81:c3:52:cc:9e:d8:82:a5:70:1d:f6:df:21:f5:
d0:ae:ba:04:37:5c:90:06:75:76:ee:69:91:c3:27:f6:1e:27:
01:f2:82:21:76:11:c1:23:a1:ed:57:cc:71:37:80:4a:ce:87:
6a:e9:67:d6:a1:29:20:61:19:67:d1:71:62:52:a4:07:98:6d:
99:2b:91:f7:44:46:c0:18:00:ea:69:53:73:4d:90:65:c7:a9:
61:fb:4e:cc:f8:d2:21:fd:e0:8d:d9:c7:f9:74:af:e6:eb:08:
91:96:72:ee:81:e5:c8:24:ac:7d:b3:dc:13:d1:4b:63:a9:81:
ab:a2:28:6e:75:8f:6b:16:90:27:7f:fd:97:96:3e:c3:7c:43:
65:53:b9:27:fc:22:11:b2:ff:94:13:61:93:ed:be:08:ad:3d:
4f:19:60:b7:1e:42:42:92:a6:86:72:fd:cf:28:80:71:06:69:
4a:ad:e7:db:41:7e:ef:38:9c:48:a8:38:3c:e7:6f:2e:73:17:
44:98:2b:aa:4b:b6:ae:13:64:de:a4:cb:12:16:5a:d5:14:48:
2e:e3:8a:1b:f9:9d:4a:7b:89:8e:5c:5c:45:0e:3b:03:71:7a:
c2:d9:cc:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:32:15 2025 by rpki-client