Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d55e9cd1-5e98-32d9-9dcd-38a4e1a9c17b.roa
File: d55e9cd1-5e98-32d9-9dcd-38a4e1a9c17b.roa (raw, json)
Hash identifier: OHG7tZQ0qPNcRsXU05wGy+hYeHjvoSre3HFSJAdtmmM=
Subject key identifier: C1:7B:C3:8B:35:57:00:4A:9E:0D:61:94:32:23:77:FE:1A:C1:CA:55
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F432858484C1014DC2B3FFD401D0B3B80
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d55e9cd1-5e98-32d9-9dcd-38a4e1a9c17b.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 3356
IP address blocks: 20.132.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:14:dc:2b:3f:fd:40:1d:0b:3b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=f801e37d-02cf-4ee8-9ec7-2f25f3b4afe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c3:d4:a8:81:78:df:8f:2d:fb:1f:d2:bc:2f:
7c:71:d1:a5:49:7c:62:3f:37:ec:58:fd:39:7c:ab:
4f:8f:c7:b0:a9:ba:9b:9b:4a:12:22:47:92:f6:70:
76:fd:8e:d5:06:41:66:8b:31:ab:3e:19:e0:56:8b:
59:61:24:49:ce:60:76:05:29:a0:13:24:5a:79:a2:
d2:a1:69:25:7a:2e:71:e9:75:3f:fc:c8:07:6c:f8:
63:9b:55:fb:c1:4a:42:7d:f5:88:0d:31:1c:d1:e1:
c8:d8:db:e1:bc:60:f6:10:ee:db:8d:e3:13:d4:d9:
62:30:08:d7:9f:14:dc:01:c6:08:a1:31:4f:45:3d:
13:c3:95:95:e8:4d:33:c0:3e:21:15:9a:db:64:69:
39:e6:a4:0b:45:8d:cd:fd:bb:46:d6:0c:1a:2b:bf:
dd:18:bd:75:6f:7f:07:07:c8:ca:b5:97:5c:74:68:
24:d6:5d:56:a2:b9:97:b5:f6:59:64:f8:c3:c5:2e:
94:8f:73:bb:c4:e6:51:89:16:5c:6f:c5:18:93:b7:
fb:d8:50:97:a0:35:79:61:6e:28:43:ae:6f:67:07:
50:db:de:33:5e:ef:9a:64:fe:dc:b5:d7:4f:1e:9b:
3f:3e:07:3e:cb:3f:4e:62:de:e6:f5:ea:df:d8:c6:
29:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:7B:C3:8B:35:57:00:4A:9E:0D:61:94:32:23:77:FE:1A:C1:CA:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d55e9cd1-5e98-32d9-9dcd-38a4e1a9c17b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.132.230.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:77:f1:8f:fa:53:3b:19:17:d8:9b:f5:27:d8:91:68:02:11:
ae:5f:4a:bc:c8:5c:46:02:9d:93:51:5b:44:06:c8:bb:d1:7d:
af:b4:3a:c6:53:58:84:93:1e:71:56:d6:bd:11:16:e0:d5:17:
0a:dc:58:a4:99:a6:49:bc:e6:59:78:ef:22:70:d0:9d:ea:2b:
8b:b2:c4:30:d7:37:35:b9:87:d2:31:28:f6:18:13:67:89:c5:
ed:0c:d2:32:e9:38:f1:50:7e:75:0d:5b:03:eb:b6:87:24:64:
48:c7:f8:66:6a:6d:54:44:17:ce:55:dd:d4:01:d8:ac:f2:71:
da:54:3f:b5:3a:f6:cf:90:e9:d2:13:c2:1e:90:16:eb:47:c7:
04:7c:f6:f5:77:58:f9:6b:7b:83:e8:b1:8e:61:64:77:ec:78:
e0:9e:76:c4:ce:3c:34:97:65:42:8e:58:87:e8:66:a1:b9:d6:
58:1e:35:00:eb:8f:4d:2c:7f:77:ea:5c:4a:73:80:17:3c:fe:
c4:43:75:0c:92:4d:9b:97:f6:76:97:e7:92:53:e2:80:2d:8b:
4a:5c:c8:af:77:c2:00:ae:15:96:f4:8e:fe:8b:c6:d4:b7:d1:
ad:a2:86:4e:74:87:24:0d:b9:0e:11:1f:ab:74:3b:1a:5c:66:
91:c5:b8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:33:47 2025 by rpki-client