Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/cfddd6a1-ab8f-3790-8282-f78bc658b358.roa
File: cfddd6a1-ab8f-3790-8282-f78bc658b358.roa (raw, json)
Hash identifier: 6MH3oRY5AGyIe+nWbhXicrDC5B8cRX1r2hemIZzbs5s=
Subject key identifier: 4B:4C:94:50:64:DF:AB:E1:B2:DE:51:E7:16:E7:BF:C8:FA:CB:38:FB
Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial: 010D0C9F432858486695B53EE79B426483AF2EC0
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/cfddd6a1-ab8f-3790-8282-f78bc658b358.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 31898
IP address blocks: 158.120.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:b5:3e:e7:9b:42:64:83:af:2e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=190a0553-9de9-41f2-ae45-8d70ed92805d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:82:39:c6:61:ec:d2:62:bc:4e:a5:16:b8:00:
a2:05:fd:1b:f3:3e:1f:fe:47:45:91:7a:7c:c9:bd:
5d:3b:bd:a4:b6:aa:bb:7d:4f:a1:11:51:dc:c3:61:
01:db:cc:46:72:4f:11:cf:b0:f3:75:b2:f4:86:eb:
fb:29:8b:95:a9:96:22:66:ad:f4:ff:11:80:7f:2d:
6a:8a:0d:f1:fd:83:ff:97:52:96:47:68:e3:af:48:
1f:a8:dc:92:6c:dc:12:15:21:54:41:80:8c:d1:cc:
21:cd:f1:af:b8:0c:a2:cd:e8:c9:2c:53:1e:c4:a3:
9a:67:27:13:d9:4f:5c:d1:1b:89:a5:22:fa:cc:90:
f5:60:8c:60:75:3d:80:fd:d1:28:79:a1:f6:18:90:
96:c4:57:d3:17:73:61:4b:47:e2:fa:ac:90:02:00:
cc:6e:d0:a6:84:e6:04:a9:87:93:a1:f7:67:c6:4f:
7b:b3:0d:7b:0a:b0:b9:ed:68:fa:2a:64:ad:60:dc:
5e:6d:74:3a:49:e2:70:9d:76:1a:da:71:75:ab:5c:
ad:f0:09:59:07:e8:36:bb:e1:e5:e4:c5:e3:87:68:
fa:1e:05:8a:cd:ed:97:bc:56:8b:54:3b:5b:95:1c:
ba:56:e0:51:c9:b5:1d:91:f3:80:c5:8a:28:27:c9:
63:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:4C:94:50:64:DF:AB:E1:B2:DE:51:E7:16:E7:BF:C8:FA:CB:38:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/cfddd6a1-ab8f-3790-8282-f78bc658b358.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
X509v3 Authority Key Identifier:
keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
sbgp-ipAddrBlock: critical
IPv4:
158.120.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:06:5e:40:00:b6:5c:3c:1b:63:7b:1c:c1:d5:00:f1:37:b7:
6b:16:d2:a4:c5:b7:0d:19:77:78:0c:60:1e:af:09:82:00:57:
c5:6a:e9:26:f2:95:57:e2:5a:66:2d:aa:74:21:22:aa:ca:da:
85:cb:73:68:77:20:e7:2d:19:61:ce:9c:8e:cc:71:c4:5a:99:
7a:86:14:7a:54:c8:9c:5d:0a:99:55:49:43:45:25:2c:df:3b:
2e:4c:49:a9:f1:92:51:12:01:aa:7b:25:49:52:e9:40:4f:4c:
e3:ba:2e:a2:d8:d6:7d:0c:92:52:58:80:41:38:dd:ea:9d:2a:
4f:ef:df:2b:07:e9:1e:a2:a1:64:d6:a4:c9:45:94:7a:8f:24:
f7:5b:c5:43:35:87:d7:3f:a6:ff:92:e6:2d:33:1b:85:c8:4d:
3d:1c:3e:62:6c:23:7d:d9:eb:ec:5f:1a:51:ce:cb:ed:64:2d:
c7:ce:08:d0:39:6b:44:71:41:4b:4f:40:b8:e8:7b:65:7b:a3:
c5:fa:86:e0:07:d1:ed:0c:d7:b5:76:88:98:6a:60:aa:c0:44:
76:56:e6:c4:aa:f9:c7:2a:35:35:d6:14:a5:f6:b6:36:04:c2:
c9:b6:16:2b:a0:0b:aa:97:8d:ed:a6:03:02:27:06:d3:65:6e:
be:31:4e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:35:54 2025 by rpki-client