Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f22aa72a-611a-3aef-bb6d-19e2e598ca38.roa
File: f22aa72a-611a-3aef-bb6d-19e2e598ca38.roa (raw, json)
Hash identifier: ocOFhxKCQfgybUcd1cQRuTyDWOMep21hO3GuTc01COI=
Subject key identifier: DE:BB:73:2E:32:8C:85:B7:5B:FC:D1:1A:CA:23:96:90:BC:83:B4:62
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F432858484C1015C42DF50E0E5D32CCC0
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f22aa72a-611a-3aef-bb6d-19e2e598ca38.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 4237
IP address blocks: 20.137.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:15:c4:2d:f5:0e:0e:5d:32:cc:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=32e860f3-8d4d-4db0-8b83-e060719c6fbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:33:8f:99:23:31:8b:72:b2:52:a4:74:98:e5:
a6:2e:08:74:80:5c:2e:5a:8e:3b:ff:14:8f:43:fd:
fb:f1:12:f1:04:3b:e7:83:51:3a:99:fc:12:79:90:
5c:a5:14:64:a7:b8:d0:94:13:e4:22:da:69:49:ec:
db:d8:b7:c9:6f:85:85:65:b2:02:71:c6:e8:76:1f:
90:a8:67:ce:ae:e8:52:d5:21:18:44:ee:19:24:30:
da:87:f9:69:c4:d9:19:8a:fa:74:17:61:ec:6b:e2:
2f:e7:74:9b:a2:c2:f0:2d:a0:04:f8:8c:51:30:95:
3e:10:aa:df:20:43:2e:68:cc:7e:44:9c:bb:53:d8:
7b:67:c3:83:60:7a:2e:3f:cf:2f:65:56:4e:3c:57:
80:1f:b9:5a:fb:03:5c:a6:0c:53:1d:72:16:c4:53:
ae:2f:3d:a7:65:0d:39:ca:f4:57:54:46:ec:9a:72:
33:23:09:17:ad:eb:7e:75:5b:29:1c:4d:6f:17:91:
86:54:70:ab:f6:f2:64:57:21:db:cd:c2:48:4e:45:
84:35:a0:5b:c9:65:50:e7:a2:da:3f:d9:56:43:f4:
45:0e:5e:65:ad:78:dc:aa:b8:ea:98:16:fa:a7:63:
72:da:79:fc:d8:74:c5:70:49:7d:bd:a9:51:85:6b:
73:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:BB:73:2E:32:8C:85:B7:5B:FC:D1:1A:CA:23:96:90:BC:83:B4:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f22aa72a-611a-3aef-bb6d-19e2e598ca38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.137.216.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:a8:d8:f3:c7:ba:5c:01:0c:53:3d:39:27:df:47:7b:b0:1a:
40:73:27:11:a3:41:29:9e:88:f2:3d:dd:9f:24:b1:95:2c:fa:
70:3f:8f:36:54:43:0f:76:24:9f:7f:26:10:5f:13:34:04:2e:
c4:96:e0:9f:20:6f:c0:3d:50:ee:06:fc:76:5f:e2:82:c0:23:
b1:c2:36:b7:1f:36:c7:7d:ac:cd:8e:b0:d6:9b:5d:98:83:aa:
cf:69:9b:da:96:82:e7:b2:bb:38:c6:a5:69:ee:89:1c:a5:4d:
20:cc:c7:1b:7b:ac:a1:2f:f0:3e:3a:df:9a:8f:dd:af:01:ac:
42:87:04:db:fa:a6:cd:22:7c:15:d1:a0:1b:1d:bf:c0:17:bc:
63:c2:c6:45:00:8d:e2:54:ec:09:1c:89:a9:b2:ea:d3:6d:c5:
6d:f0:f6:95:4a:22:cb:57:73:38:92:51:0f:da:93:86:46:2a:
63:95:87:2f:a7:56:57:4e:4b:ba:21:26:89:31:41:5b:d9:e4:
1b:e4:1d:75:5a:7c:81:03:2e:c3:dd:c2:09:28:57:07:54:a8:
12:f7:bb:3f:05:d7:ce:64:78:27:50:86:41:0f:a6:1b:d9:e1:
c4:e5:ed:f8:15:ba:30:8d:3a:89:5d:5b:d7:b4:04:4e:85:7d:
04:c2:66:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:20:49 2025 by rpki-client