Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/cf26bf23-9642-3aae-be69-73e2d9498a25.roa
File: cf26bf23-9642-3aae-be69-73e2d9498a25.roa (raw, json)
Hash identifier: IhRG9YUzBU3HV5SnbnYElJB/5RKs+mVw5wid0/mX2BM=
Subject key identifier: EB:07:86:DD:C6:7B:23:49:BA:1C:5D:16:06:32:27:E0:22:B0:40:02
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584843B00BBB873119ECCC46A840
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/cf26bf23-9642-3aae-be69-73e2d9498a25.roa
Signing time: Fri 20 Dec 2024 02:00:40 +0000
ROA not before: Fri 20 Dec 2024 02:00:40 +0000
ROA not after: Thu 20 Mar 2025 01:00:40 +0000
asID: 202
IP address blocks: 20.137.14.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:43:b0:0b:bb:87:31:19:ec:cc:46:a8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Dec 20 02:00:40 2024 GMT
Not After : Mar 20 01:00:40 2025 GMT
Subject: CN=dd3b7232-b0bd-4955-982b-bc41401da7bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:77:1d:30:7e:27:da:f5:5b:5f:6a:91:41:17:
f4:38:bb:57:ed:a0:a9:88:01:db:4a:9f:b6:93:a2:
7b:96:fa:67:f1:d3:93:29:1b:1b:2c:dc:2d:92:e2:
93:16:aa:ae:47:0d:f6:2f:13:6f:69:87:b9:99:98:
3c:9a:86:a6:8c:e4:05:fa:5d:af:9a:66:e2:fa:2e:
b6:1c:1c:66:d0:ac:8a:ae:68:4b:1b:58:3c:a9:cf:
1e:67:d3:de:60:df:71:7d:0a:39:2e:ba:ef:86:e9:
da:3f:2f:25:2b:fc:bc:2f:db:95:86:15:c9:55:ea:
a1:67:e0:17:26:de:70:6a:7e:6d:20:06:c9:c8:6a:
58:8c:2e:84:28:e8:2f:5f:08:86:a4:e8:87:b9:eb:
ee:95:99:ac:c0:08:f7:df:84:a5:ba:d1:89:d2:05:
d1:5d:d2:a4:e0:11:49:93:54:99:86:4b:2a:1c:0b:
61:fb:88:bd:a6:81:f4:9f:0c:e9:c2:72:b9:66:34:
35:a7:f9:4f:1b:3b:dc:d1:d6:28:bc:7d:bd:17:5a:
0e:f0:36:ca:5d:ec:76:4c:ca:e1:dd:9b:f8:4d:22:
80:90:ae:49:95:8a:de:9d:03:f4:7f:22:00:b1:1d:
e1:41:b7:f2:2a:7a:ae:56:13:46:18:03:ed:0b:ef:
b0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:07:86:DD:C6:7B:23:49:BA:1C:5D:16:06:32:27:E0:22:B0:40:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/cf26bf23-9642-3aae-be69-73e2d9498a25.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.137.14.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:43:56:c9:e5:e5:6a:03:e2:92:c8:99:89:1b:a9:d9:67:8f:
23:83:13:01:6b:8e:09:6a:e2:be:32:c6:25:d0:3e:4d:47:9a:
e4:73:91:95:73:35:9e:0f:8a:bd:c7:dd:6e:20:57:d3:cf:d3:
71:3e:f4:7a:a4:2f:db:d1:57:69:1d:e4:26:c4:ca:26:4a:ca:
90:ba:4b:36:c9:cd:80:6f:4d:f6:37:b4:90:dc:9b:e5:90:72:
16:0b:8a:df:b2:9f:ab:83:ec:c4:43:5c:1a:26:59:ce:01:30:
72:49:67:2e:31:85:bf:e7:d9:ac:8e:54:ba:d2:7b:a6:ba:9b:
b9:4d:69:4b:a4:a0:8e:de:f9:ad:29:71:7f:e8:17:d0:f4:ac:
dc:36:0f:bd:f4:13:e5:85:20:12:c5:bd:c9:bd:e3:d1:71:1d:
8d:25:99:76:ab:4f:89:b6:27:bf:50:05:6b:1b:7c:be:fb:7e:
56:e6:75:3a:58:9d:bc:61:7f:6c:8d:fc:49:ce:71:a6:2b:09:
86:20:e4:0f:bd:c3:d3:27:e2:4a:df:fb:4d:e1:ec:f9:c5:6d:
36:22:ec:92:a2:89:55:d9:da:bc:73:e2:fe:a6:28:8c:7e:af:
51:6b:48:a3:2c:84:19:bc:89:1a:b0:83:7b:75:57:cf:83:6d:
7b:7c:4e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:23:28 2025 by rpki-client