Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3cb30814-1743-3f4c-9f2b-43e764333641.roa
File: 3cb30814-1743-3f4c-9f2b-43e764333641.roa (raw, json)
Hash identifier: K6wP9rbgzCDcvSHRcl2Y70xXLz9XW+5ps4sBfQA6f1A=
Subject key identifier: D3:45:A3:06:FD:17:2C:14:1B:33:1C:A7:4E:3F:04:5C:15:C9:96:5A
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F43285848F7C13AF04439269886E0F100
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3cb30814-1743-3f4c-9f2b-43e764333641.roa
Signing time: Sat 22 Feb 2025 14:00:52 +0000
ROA not before: Sat 22 Feb 2025 14:00:52 +0000
ROA not after: Fri 23 May 2025 13:00:52 +0000
asID: 202
IP address blocks: 20.134.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f7:c1:3a:f0:44:39:26:98:86:e0:f1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Feb 22 14:00:52 2025 GMT
Not After : May 23 13:00:52 2025 GMT
Subject: CN=3d053553-8d87-4218-8200-763aaa74ddb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7c:af:8a:c6:42:c3:dd:6d:60:75:9c:33:c6:
a0:9d:74:c8:ca:ab:86:26:bd:b4:f9:8c:19:d9:f0:
b3:63:b7:fe:82:7b:66:cc:f2:e6:a0:31:d5:e3:83:
82:5c:71:ca:b5:19:1f:1c:4b:6c:10:a5:de:2b:af:
f5:d9:56:7d:33:1f:24:77:f5:93:27:47:58:6e:c8:
60:f5:5f:17:1e:36:25:51:5e:de:46:39:d3:76:25:
15:61:1e:10:cf:a4:ac:8d:0b:83:c1:43:ad:d3:fb:
be:31:51:4a:92:c1:69:be:47:56:48:71:a9:9d:4e:
89:64:64:09:ba:69:b9:ed:cf:5f:74:72:32:72:9b:
69:ba:6c:7d:5f:e2:bd:7e:52:e6:83:71:11:74:59:
98:c4:df:45:71:05:62:72:ef:ed:e2:cd:b6:f6:0e:
99:3a:60:92:ce:de:2f:8f:5f:1e:34:1f:91:1e:69:
6d:a7:e3:39:6c:ab:f3:8c:b5:78:52:1e:94:81:e7:
9e:34:8a:05:fa:56:04:99:99:c0:df:9a:69:7e:70:
35:85:b0:0b:1f:5c:1a:e5:2a:a5:0e:2c:fe:28:24:
ac:23:41:2e:2c:d8:01:7d:14:64:50:44:9a:52:e1:
dd:a7:b0:cd:af:ab:c6:84:2f:4a:9c:09:8d:b8:cf:
62:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:45:A3:06:FD:17:2C:14:1B:33:1C:A7:4E:3F:04:5C:15:C9:96:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3cb30814-1743-3f4c-9f2b-43e764333641.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.134.1.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:a8:12:fc:e4:ac:c7:02:c0:7d:b5:46:de:18:85:c8:e0:8e:
26:c8:d9:3b:13:61:5a:d1:cd:17:7c:3d:8f:ec:7f:b8:f9:fa:
f7:16:15:4f:f5:ac:1f:f7:cb:fc:a7:cf:1f:2a:af:bd:43:39:
44:1c:66:ca:3c:96:08:b2:63:56:e9:6f:55:78:33:68:7e:12:
fd:be:bc:56:29:0a:1b:47:42:d3:6d:3f:e9:f7:d2:f5:5c:d1:
cc:93:8b:be:11:85:e9:fd:8b:d3:65:89:b0:9e:c1:f5:7e:82:
5d:67:81:b4:d8:fe:78:2e:6d:40:d2:49:2f:77:f4:ca:29:b7:
90:28:d6:dd:ab:12:51:ad:f8:06:e4:b4:b8:cc:e6:2b:ee:19:
db:27:88:e5:f8:46:55:f1:cd:47:af:21:43:be:14:2c:5b:b9:
bf:f2:ee:11:b2:8e:26:f4:90:d4:e0:e4:e6:10:0d:32:8c:19:
2b:12:3a:02:b4:08:b6:47:c8:6e:fa:54:f0:51:0c:07:14:11:
74:40:64:cb:7e:b1:5d:89:eb:50:95:e3:cd:ce:5d:14:1d:14:
1d:54:52:22:a2:4a:7d:49:a3:b3:5d:9c:df:9b:84:20:63:bd:
bc:82:32:cb:cc:82:9b:46:80:d4:81:20:62:6f:e1:09:9c:9e:
82:bf:e8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:30 2025 by rpki-client on console.sobornost.net