Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0ac0a9ef-665e-324c-b70d-e56f5bd3a914.roa
File: 0ac0a9ef-665e-324c-b70d-e56f5bd3a914.roa (raw, json)
Hash identifier: ZHvFGb8gpIaGe+38YOcBxFIWnKAHtfxx1iuFoXsKYok=
Subject key identifier: FE:37:85:35:74:86:E9:D0:84:10:5D:E6:AF:B0:95:CE:01:65:C1:7F
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F43285848F7C13CABACF39BBFD654DFC0
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0ac0a9ef-665e-324c-b70d-e56f5bd3a914.roa
Signing time: Sat 22 Feb 2025 14:00:52 +0000
ROA not before: Sat 22 Feb 2025 14:00:52 +0000
ROA not after: Fri 23 May 2025 13:00:52 +0000
asID: 3356
IP address blocks: 20.139.0.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f7:c1:3c:ab:ac:f3:9b:bf:d6:54:df:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Feb 22 14:00:52 2025 GMT
Not After : May 23 13:00:52 2025 GMT
Subject: CN=fd397da0-1143-4a2b-a090-dbf333b6f2b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:fa:4f:e9:02:8b:b0:a6:9b:4d:ae:d3:de:94:
54:48:df:d8:bd:62:c4:65:88:74:a1:ed:bb:c1:19:
9c:f4:f8:52:e1:47:41:a0:43:fb:fe:d8:62:ca:30:
e2:b8:72:07:87:36:a4:21:8c:51:63:d7:f3:65:84:
4c:56:fb:f6:a3:a9:dc:4e:f5:97:0c:62:79:5b:95:
08:4b:fb:39:12:18:7b:40:fa:78:7f:89:2a:1a:30:
da:dd:29:08:b4:fc:7a:53:dc:8a:e6:2f:85:bd:53:
7b:80:aa:7b:65:d4:da:a7:fa:62:73:6b:b6:54:dc:
7c:86:be:cf:63:65:96:75:c3:49:95:1e:29:8d:0d:
f2:05:3d:43:05:54:5d:da:ef:7a:2f:8b:be:6b:55:
e1:3b:6d:c0:a6:2e:a8:4f:24:79:95:31:63:5e:72:
57:1c:60:fa:04:52:e9:55:6e:5a:3b:e6:4e:47:a0:
75:69:60:48:bb:49:1d:f9:e6:3e:73:15:74:c4:60:
84:b2:64:12:2b:30:4b:fc:3d:38:ca:41:3f:7f:e2:
61:63:89:5c:b7:02:59:d0:f8:bc:a2:47:e7:0c:b2:
00:fa:95:b6:79:25:4c:f0:76:1b:e4:2f:7e:49:3c:
c6:b3:98:de:71:26:b4:c1:b5:e8:9f:1f:c8:fb:ba:
e7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:37:85:35:74:86:E9:D0:84:10:5D:E6:AF:B0:95:CE:01:65:C1:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0ac0a9ef-665e-324c-b70d-e56f5bd3a914.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.139.0.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:b3:8c:d9:42:6b:5b:5d:13:4a:4c:7d:f8:88:55:9a:b5:49:
9b:41:d1:ab:9d:45:c5:89:d0:2d:05:c0:6d:b1:9d:e3:4c:82:
f5:96:47:4a:e0:56:56:55:a1:9c:12:74:09:11:48:c5:5c:a9:
71:61:9c:c1:01:93:a3:68:15:7e:6b:58:62:0f:11:06:d5:6a:
8b:f9:3d:c2:2b:02:e9:ce:e7:13:b8:7b:af:43:94:ef:dd:d8:
02:d7:47:ed:d5:c9:6c:40:c2:6b:61:7b:e6:38:43:af:a3:0f:
7b:99:24:cc:7c:9c:b2:76:aa:93:4c:bb:c3:00:c3:ac:20:17:
aa:7a:f0:e7:96:11:a5:c9:e2:d1:bd:ce:cd:dc:bf:4d:a1:cc:
bb:71:e9:e6:72:d3:4a:45:e1:bc:78:ce:ed:76:f9:7c:de:3d:
53:18:d0:e7:51:c4:7f:37:c0:43:d6:e9:1d:bc:2c:94:8a:e9:
65:60:cd:06:53:91:bb:41:fc:87:ff:92:be:7f:62:14:77:7e:
5e:90:d3:f3:5a:af:25:9f:12:d3:42:39:8d:9a:47:54:a5:37:
c6:31:30:6c:94:da:92:60:b0:44:7b:0a:11:14:fb:c1:98:69:
c1:c0:cd:a1:d0:ba:c1:2b:f5:ab:71:fd:79:22:76:cb:2d:a1:
1e:bc:8d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:30 2025 by rpki-client on console.sobornost.net