Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da39c797-9af4-3d71-bfa2-5c4fc0b475b7.roa
File: da39c797-9af4-3d71-bfa2-5c4fc0b475b7.roa (raw, json)
Hash identifier: G6jk4I1aSraA9KHf8cKQexWZSGgvBs0Td90k4FyqouI=
Subject key identifier: 8E:11:65:55:A1:86:B5:CE:8E:3C:26:42:28:11:9B:FD:3A:3C:51:6F
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584883E5C7FD09A0A0C0B93D5300
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da39c797-9af4-3d71-bfa2-5c4fc0b475b7.roa
Signing time: Sun 12 Jan 2025 02:00:38 +0000
ROA not before: Sun 12 Jan 2025 02:00:38 +0000
ROA not after: Sat 12 Apr 2025 01:00:38 +0000
asID: 3360
IP address blocks: 20.137.64.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:83:e5:c7:fd:09:a0:a0:c0:b9:3d:53:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Jan 12 02:00:38 2025 GMT
Not After : Apr 12 01:00:38 2025 GMT
Subject: CN=0ca9b767-07a4-4da7-8aaf-ec08bc126cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ee:3b:f7:d9:fb:23:25:69:46:ed:a9:87:f8:
31:3a:5a:59:b8:5d:3b:81:78:a4:6f:24:0c:cc:5e:
39:d1:8e:b7:d8:8c:be:ce:19:c9:17:06:c2:1a:ba:
bc:e9:57:c4:e8:53:bb:b3:c1:cb:fa:d3:d4:33:30:
17:4f:65:2b:cb:c7:3b:61:55:cb:00:19:1d:db:e6:
63:f8:01:ec:3d:72:e2:5c:6d:86:ba:4b:84:cd:d5:
6a:29:02:32:1e:ff:48:f7:e9:2b:e8:fe:64:36:91:
ba:43:87:58:33:71:30:ca:e9:df:88:88:e0:ee:dd:
08:77:27:c5:f2:e9:5e:bc:71:e3:69:e8:10:fd:5b:
a1:6b:46:2f:47:32:33:f6:c8:53:dc:dc:88:7a:fb:
7f:aa:cf:42:87:d5:2c:3f:e0:55:fb:21:4b:53:e4:
45:85:b7:59:44:c9:b5:e8:1c:d2:5a:2b:b7:1b:60:
97:d4:6f:4b:b6:f9:26:ff:ed:88:c6:ce:ca:e4:ed:
d6:1f:a5:ff:ff:21:c8:42:d3:b8:33:52:82:6d:71:
14:46:b5:ac:94:20:8e:4e:85:24:71:48:36:28:c6:
03:18:79:5c:16:cd:f2:60:9a:4f:f0:aa:2c:3a:a3:
47:d6:db:86:ae:fc:b2:b5:16:20:55:35:99:84:c2:
ff:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:11:65:55:A1:86:B5:CE:8E:3C:26:42:28:11:9B:FD:3A:3C:51:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da39c797-9af4-3d71-bfa2-5c4fc0b475b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.137.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:2b:71:95:3e:a9:c3:d3:ae:15:67:b3:89:bc:63:f7:27:ca:
07:7a:f5:27:be:d5:e3:bd:1d:a7:09:5f:e6:c0:f1:10:0e:a8:
58:23:30:0f:34:5f:d4:79:ee:e6:a9:cf:5e:68:73:98:c4:6a:
84:5c:6b:21:f6:5c:e1:6c:88:1d:47:7e:e4:da:92:2e:21:14:
9a:a7:b5:2f:ee:47:02:a0:ef:ff:89:10:ac:3f:6e:b0:ba:ac:
3a:6d:60:b6:93:a9:c0:cf:a3:c5:69:29:8d:c7:0f:d7:4c:e9:
e5:59:c2:6e:d0:8f:c0:ce:d5:8c:9c:09:46:e3:47:17:62:03:
cb:7a:c7:0a:6f:6d:41:29:86:8c:9a:20:be:96:53:19:f9:2d:
45:26:65:22:16:89:d4:69:41:eb:e1:87:5b:dd:be:57:97:a4:
1a:25:d7:d2:50:24:48:6a:90:fa:be:57:c6:c8:99:8f:2c:07:
0f:a3:a3:b9:64:c0:7c:9b:7d:c0:3b:f7:6c:c1:25:b6:90:38:
48:a6:93:de:b2:9d:a6:ee:3d:32:45:ba:0a:2f:5e:4c:7f:6d:
48:c3:24:3c:2e:15:60:ea:f1:d8:e0:72:88:2b:f1:fb:32:f8:
ae:58:36:71:26:86:1c:8e:dd:e4:30:8b:9b:ab:e5:e4:58:2a:
1a:06:e8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:31:23 2025 by rpki-client