Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18/b92067e6-1305-39ca-9edb-e1c87b1d00d3.roa
File: b92067e6-1305-39ca-9edb-e1c87b1d00d3.roa (raw, json)
Hash identifier: lhJK6XxIsvkzghUGf4YEHu20+EUu4fmxKFiFqhDggv8=
Subject key identifier: 2C:83:6A:94:07:FA:1F:B1:36:E8:58:50:5B:4D:C3:E1:39:DB:63:0D
Certificate issuer: /CN=20defc99-73f1-4ccf-93ff-ac08b7301a18
Certificate serial: 010D0C9F4328584849455ED5F67D2DA759910DC0
Authority key identifier: 19:52:F4:3C:BD:DA:D0:41:D8:6F:9A:EA:9A:E8:5C:4C:55:4D:78:63
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18/b92067e6-1305-39ca-9edb-e1c87b1d00d3.roa
Signing time: Sun 22 Dec 2024 02:00:39 +0000
ROA not before: Sun 22 Dec 2024 02:00:39 +0000
ROA not after: Sat 22 Mar 2025 01:00:39 +0000
asID: 7018
IP address blocks: 208.72.20.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:49:45:5e:d5:f6:7d:2d:a7:59:91:0d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20defc99-73f1-4ccf-93ff-ac08b7301a18
Validity
Not Before: Dec 22 02:00:39 2024 GMT
Not After : Mar 22 01:00:39 2025 GMT
Subject: CN=919baf17-d6ed-48bf-a607-d7a8b8d461f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:60:eb:a6:a6:8b:6c:52:1a:98:8a:a4:c3:1f:
12:da:bc:ba:a5:98:51:80:11:d5:06:f0:d4:96:76:
db:91:b3:2b:00:c1:4d:c3:5a:04:3f:56:3f:17:97:
a6:bb:d6:a7:88:7d:dc:1c:af:89:d3:fd:ff:46:9d:
9d:e6:92:87:bd:b2:48:35:34:dd:93:84:a2:67:35:
49:d7:39:f4:d8:fd:63:f9:2f:2f:25:50:1a:9b:34:
6f:5c:53:53:7c:ab:4d:e9:cf:0f:94:bc:cc:0a:f9:
18:a1:e5:f9:dd:3b:c7:92:e4:bd:55:68:ee:7d:65:
ae:6f:b2:28:b0:14:75:52:5a:f9:4f:91:3c:08:08:
51:b7:48:fd:c8:2f:e3:01:10:87:36:6c:b4:16:de:
96:07:4c:1b:66:01:2f:c1:ba:27:e2:9d:4f:20:d2:
74:d8:bd:45:78:66:4a:5f:32:99:10:14:aa:f8:31:
a6:16:80:c6:fb:1a:fe:c1:c5:c6:12:21:e3:45:d5:
8d:d4:86:3e:b9:3a:d0:8d:c9:e0:82:b6:04:6e:2d:
2d:b7:c3:29:19:3a:48:98:13:b9:d3:f6:6f:b7:94:
35:e0:8f:13:c3:47:a7:0b:3f:49:67:ed:a0:f0:02:
7a:59:1f:b2:c2:1e:af:e0:94:f5:89:28:de:6b:8d:
99:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:83:6A:94:07:FA:1F:B1:36:E8:58:50:5B:4D:C3:E1:39:DB:63:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18/b92067e6-1305-39ca-9edb-e1c87b1d00d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18/20defc99-73f1-4ccf-93ff-ac08b7301a18.crl
X509v3 Authority Key Identifier:
keyid:19:52:F4:3C:BD:DA:D0:41:D8:6F:9A:EA:9A:E8:5C:4C:55:4D:78:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18.cer
sbgp-ipAddrBlock: critical
IPv4:
208.72.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:47:30:1f:44:5b:ca:09:82:6b:a4:04:49:3c:b8:9c:9e:4e:
7b:c4:90:27:81:c5:10:9f:2e:3e:0e:b2:6d:a9:a5:38:6b:7e:
b4:90:44:74:ce:cb:b0:49:42:35:63:b2:c5:bc:a6:fe:14:81:
7d:8b:7d:60:8a:56:67:5b:80:36:5f:95:ca:dc:dc:6b:94:64:
0d:13:91:5f:1b:d3:00:a4:a8:3a:26:8f:ed:7a:28:63:0a:c8:
ff:a2:01:4f:28:9c:c4:98:6a:51:c6:12:c7:19:90:77:3f:35:
a2:60:f5:f3:63:61:5a:8b:ea:3b:cb:4b:03:c6:93:bf:11:de:
ea:f4:14:7e:ac:ff:a5:77:c6:d6:9c:a2:5f:25:88:d8:03:dc:
71:17:e0:0c:e5:f4:a5:46:57:0f:46:bd:63:a5:f2:6b:9e:4e:
83:e0:7d:ef:fe:e6:42:6e:2b:1e:f3:cc:58:9f:9c:4b:be:45:
ef:c0:26:b9:53:79:73:e4:46:7c:10:22:9c:5e:1e:48:94:64:
d4:8f:47:7b:88:d7:23:7d:5a:25:ab:28:19:b4:26:4a:72:28:
9e:08:31:33:e6:7c:2a:e9:22:c3:48:5e:13:26:be:4b:c9:c2:
9b:a6:02:e6:29:40:ad:68:bd:5f:98:08:2f:98:2d:99:a7:7a:
6c:f0:09:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:52:38 2025 by rpki-client