Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f934d4a4-fde5-3e78-b53a-cc71da69f923.roa
File: f934d4a4-fde5-3e78-b53a-cc71da69f923.roa (raw, json)
Hash identifier: 2MuJAMZ674ysCoWtndX/0YAi/Z5JEPb8ggW8Bna01PM=
Subject key identifier: 8D:4D:5B:A7:D2:70:FB:D3:23:14:94:9D:E4:B4:D8:57:AC:A0:58:24
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584883E5C7A3952857191273F4A0
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f934d4a4-fde5-3e78-b53a-cc71da69f923.roa
Signing time: Sun 12 Jan 2025 02:00:38 +0000
ROA not before: Sun 12 Jan 2025 02:00:38 +0000
ROA not after: Sat 12 Apr 2025 01:00:38 +0000
asID: 203
IP address blocks: 20.132.64.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:83:e5:c7:a3:95:28:57:19:12:73:f4:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Jan 12 02:00:38 2025 GMT
Not After : Apr 12 01:00:38 2025 GMT
Subject: CN=5e308a27-5d2b-4f9a-9d85-5d8fb9450a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4c:63:83:f1:82:4b:5b:03:58:9b:1e:16:45:
75:0f:5f:d1:eb:47:82:ee:cd:8b:73:9d:f2:50:8a:
2e:db:b5:7e:3e:ed:31:66:2a:99:f6:30:94:96:11:
f7:e0:6f:7f:41:be:a9:64:0b:78:bc:ab:68:34:b9:
3c:e4:60:13:58:39:f7:c1:97:4e:61:ee:82:4d:cf:
24:df:f5:bd:b0:d3:6e:78:de:46:24:9f:9f:11:a3:
28:ce:9c:30:e0:3c:4d:c0:af:72:cd:fb:63:04:58:
52:52:5a:89:98:9d:a1:b3:d8:3c:20:bd:eb:82:a8:
92:d2:33:3a:c6:05:c5:39:00:61:a3:68:4e:de:ec:
bd:03:ef:85:a8:98:92:77:10:91:87:2a:4c:cf:4d:
73:07:fe:8d:08:54:69:ca:a8:a5:49:92:f8:32:a4:
b5:51:50:c4:f1:84:ed:ea:10:ca:ae:30:76:8b:ac:
53:d7:8b:0d:24:17:47:d6:99:05:1b:93:42:89:c5:
4e:a9:1a:df:d5:0b:09:58:0b:6d:fa:d7:4c:bb:b8:
72:46:3e:a9:a2:e6:53:10:27:39:28:c0:73:61:10:
8a:05:3b:55:76:8a:07:f3:93:42:46:7b:e0:1e:c9:
ff:89:6a:45:46:23:a3:3c:c2:79:39:e6:ba:64:fd:
59:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:4D:5B:A7:D2:70:FB:D3:23:14:94:9D:E4:B4:D8:57:AC:A0:58:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f934d4a4-fde5-3e78-b53a-cc71da69f923.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.132.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:4e:35:1a:29:39:50:fc:11:4c:72:6a:20:45:1f:a7:6d:5c:
b5:c4:19:f2:73:12:c5:e0:98:16:3e:ba:2c:75:98:d8:26:d0:
fe:b3:a5:a1:ce:ea:b5:ad:5d:47:44:62:4e:82:d4:53:c2:b1:
9c:6d:aa:a3:77:07:6d:2b:55:34:f4:e2:d6:d6:06:d9:df:d6:
af:27:6a:c5:52:72:e5:42:89:43:37:b2:2f:64:1e:87:15:a5:
66:5a:b0:a2:01:57:66:ef:a2:1e:a4:a5:a7:11:02:7c:97:c0:
f8:21:23:0e:32:77:d8:b6:34:01:39:13:d8:61:30:4a:61:fa:
ac:b3:36:16:86:9e:7c:32:a2:8a:c0:c6:0f:bb:7d:6b:b8:35:
10:87:56:6b:40:c6:15:3d:61:76:e8:98:9e:a8:70:ec:db:e9:
c6:7c:90:56:76:bd:c3:c3:f7:82:43:8d:1e:07:7b:ec:08:d2:
45:48:b6:2b:85:00:ad:a2:47:3e:88:38:6d:04:8c:71:20:cd:
99:d5:fd:2c:bf:e5:ac:31:e8:65:d0:22:20:59:f2:77:2e:25:
f1:b1:b7:d8:fc:b3:81:95:52:16:51:34:e7:b2:d3:36:d6:4d:
6b:03:12:4a:7e:bc:5b:bb:33:5b:fb:79:47:7d:24:cc:48:2c:
b8:eb:e6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:51:16 2025 by rpki-client