Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/20885ce4-5a76-39c3-86d6-c90d2b265830.roa
File: 20885ce4-5a76-39c3-86d6-c90d2b265830.roa (raw, json)
Hash identifier: JflPdKbD+NYHAElLqPVrp39u+zm0AdfYYatD28c59G8=
Subject key identifier: C0:03:83:52:79:6A:D9:98:0F:2F:6B:E6:2B:CA:4A:C3:B5:66:32:FE
Certificate issuer: /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial: 010D0C9F432858486C2B1767B5D3E7C4F6A2F680
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/20885ce4-5a76-39c3-86d6-c90d2b265830.roa
Signing time: Fri 03 Jan 2025 14:00:51 +0000
ROA not before: Fri 03 Jan 2025 14:00:51 +0000
ROA not after: Thu 03 Apr 2025 13:00:51 +0000
asID: 394285
IP address blocks: 174.137.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:2b:17:67:b5:d3:e7:c4:f6:a2:f6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Validity
Not Before: Jan 3 14:00:51 2025 GMT
Not After : Apr 3 13:00:51 2025 GMT
Subject: CN=3191e584-383d-4d25-9feb-8053e767bc2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:de:dc:6e:6f:15:ff:f6:49:84:70:3e:b3:ab:
67:1c:9e:d7:05:91:75:70:38:83:f0:35:1d:6d:c4:
66:95:d9:1c:13:eb:78:32:94:1e:e0:0a:54:47:c6:
04:eb:60:c1:3f:fc:2f:f6:1a:22:34:1c:28:f7:d1:
20:07:e9:83:76:4c:55:bb:32:46:c3:2d:e3:8f:0b:
20:48:70:6b:27:15:26:de:c7:45:af:38:be:d7:3e:
9b:09:07:07:8c:d8:f5:39:7c:3d:f2:69:51:5a:6d:
90:70:20:93:75:98:29:cf:77:2c:48:85:81:15:fc:
6f:1b:2e:fe:7f:b6:2f:81:97:b4:af:3b:b1:55:74:
60:2e:84:49:9d:87:b1:20:16:3b:da:d5:66:ed:6e:
1e:da:2d:6d:e9:cc:5f:47:8b:27:d5:b0:00:80:39:
38:37:89:66:9c:31:08:4f:bd:7e:69:be:c2:80:10:
4b:56:83:a1:f0:77:34:b5:f4:12:43:e7:37:fb:7f:
e3:6c:aa:c5:c9:b4:60:68:09:f4:94:52:59:99:f2:
ad:c9:4e:8e:4e:d6:43:4b:97:9c:78:d3:1b:16:7c:
80:9d:28:12:dc:13:08:7e:84:ae:5b:4e:62:2b:0d:
ce:64:85:53:67:04:a5:3b:24:72:f4:3d:06:c8:06:
17:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:03:83:52:79:6A:D9:98:0F:2F:6B:E6:2B:CA:4A:C3:B5:66:32:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/20885ce4-5a76-39c3-86d6-c90d2b265830.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
X509v3 Authority Key Identifier:
keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
sbgp-ipAddrBlock: critical
IPv4:
174.137.100.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:ab:0f:f6:50:fb:9a:18:76:5e:33:f6:07:3e:32:d9:4c:69:
46:70:0c:3f:77:01:50:d5:33:74:5c:0c:e2:f7:33:a8:68:ec:
5b:1a:9d:05:c4:9d:34:95:9b:9a:94:38:3e:93:d5:ef:9c:2c:
86:da:99:7e:91:ae:ce:fc:d7:2e:7d:cf:ee:87:9d:33:56:60:
be:29:33:92:b6:54:e5:92:da:22:2e:86:6e:df:55:0e:85:eb:
5f:a7:ea:f4:20:f7:f2:98:d2:03:69:5f:fb:2d:d4:d5:46:89:
1b:46:81:7b:fd:f5:bf:20:80:45:55:91:a4:dc:9b:63:8b:cd:
de:6d:7b:9f:60:66:00:8d:0e:f7:95:3e:b8:77:02:08:85:5e:
6d:09:72:cd:1a:79:ff:d2:a7:15:97:f2:96:3f:94:a2:7a:aa:
f4:c6:84:a4:d2:b0:07:75:da:22:d8:6b:dd:8b:70:cd:79:a6:
1a:68:51:54:fb:9b:5c:2c:72:81:14:7f:4a:9c:84:af:e3:31:
be:ae:d1:3b:73:fe:32:b6:26:e1:33:c1:71:d2:c2:a2:cf:87:
df:c9:8f:42:78:87:5a:22:62:8f:51:ab:aa:a3:89:33:7c:0e:
5e:42:91:9a:07:da:81:98:17:a3:92:ac:dd:35:01:6a:69:72:
76:e4:70:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:19:47 2025 by rpki-client