Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c964f79f-8fc6-3edb-83f1-2eb650271acf.roa
File: c964f79f-8fc6-3edb-83f1-2eb650271acf.roa (raw, json)
Hash identifier: jg/t8jjoSZaO+Gs8VRbnNSzdyrSHhvTqHYo7VovigGI=
Subject key identifier: 7F:5D:7D:68:6E:E4:23:1D:FB:BE:81:0D:77:9A:65:6D:87:EF:D8:5F
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F432858484C1016F3C59B26EA603DAA80
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c964f79f-8fc6-3edb-83f1-2eb650271acf.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 203
IP address blocks: 20.148.32.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:16:f3:c5:9b:26:ea:60:3d:aa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=fe73ac21-1973-49fd-b00e-e79bedc306dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a7:b0:ad:e0:3d:f9:75:c1:e9:e8:60:2f:03:
48:fc:b6:b3:14:4a:41:f9:a6:9c:17:4e:f9:ac:30:
88:e6:35:6c:7d:53:82:dc:e8:cf:63:ec:c1:0d:48:
d5:ef:b6:0b:74:ae:54:84:01:85:5b:85:a1:20:dc:
f4:6e:8b:f2:b2:ce:cc:c3:d8:c3:13:42:1f:63:00:
30:b2:a3:9e:14:f8:99:3c:e5:9f:67:8a:41:49:50:
31:dc:4e:54:c7:45:60:77:63:21:30:22:b2:38:05:
ce:52:8c:a9:00:cb:49:17:a0:e2:65:9f:c1:83:14:
63:68:64:21:06:f4:5b:1d:ae:47:ec:d7:6a:0f:9e:
e0:ae:35:e6:95:10:6c:11:91:5b:ed:10:30:52:35:
33:0e:2d:17:ec:5e:77:87:a9:e3:37:9a:95:22:0b:
8b:ce:88:99:d1:59:48:75:04:45:4e:65:65:de:91:
2b:81:11:db:1f:7e:44:82:cb:71:37:9a:ee:30:06:
3e:22:50:2d:cb:1b:44:b1:3c:b2:c0:e3:e8:78:4e:
aa:ff:ba:c3:9a:ce:e2:66:83:75:b6:12:68:c9:9c:
1a:74:e2:c0:c0:cd:30:29:9c:b8:e2:28:79:dc:ff:
01:ae:89:33:d3:02:87:8c:ea:13:90:8d:b2:73:a8:
ef:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:5D:7D:68:6E:E4:23:1D:FB:BE:81:0D:77:9A:65:6D:87:EF:D8:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c964f79f-8fc6-3edb-83f1-2eb650271acf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.148.32.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:01:42:37:c6:b2:71:53:96:45:b8:db:d3:31:4b:1d:c0:54:
0e:d8:b8:1c:c3:2b:e2:c2:93:11:a5:70:e3:73:60:d6:c1:2d:
bc:74:91:5a:32:fe:eb:5d:6b:a4:8b:f6:11:12:c9:de:9f:86:
0f:39:45:fc:b1:c3:ce:4b:5e:f8:36:a5:e9:e5:5a:97:66:a8:
26:5a:d7:83:c9:56:3c:87:90:8a:7d:86:48:65:2e:a5:46:0a:
03:52:79:fc:2f:82:43:59:8f:31:74:8f:8e:52:3e:72:43:88:
81:ff:e7:78:ec:61:d5:74:2c:30:d2:21:1f:a1:a8:b0:91:db:
cf:bf:e8:c6:64:3d:92:a9:18:9b:38:dd:13:ea:4b:69:1f:e4:
1e:e3:a5:dd:cf:66:c3:d5:7f:d3:d2:6d:01:0c:56:46:be:b8:
68:83:62:35:e5:28:ed:67:b9:8c:ae:1e:6e:31:ad:e9:17:a1:
a0:59:f6:a2:7b:fa:b5:89:ed:4c:f4:ac:3c:4e:78:1f:0c:1a:
51:e5:d5:90:b0:33:68:20:17:ec:cb:99:3b:48:d0:e1:7d:87:
f1:ea:d0:0a:83:16:f5:98:34:c7:e9:7c:ff:47:6a:2e:96:b3:
3b:ab:83:16:82:bc:04:87:15:5d:19:07:62:80:97:cc:5b:49:
6b:44:29:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:55:55 2025 by rpki-client