Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/01affdc8-cfde-39b2-92d1-54dc8e367c0e.roa
File: 01affdc8-cfde-39b2-92d1-54dc8e367c0e.roa (raw, json)
Hash identifier: cDkO6CeDsMTIrXF4YhkgteexzOul6ERjG5yucjD4o/s=
Subject key identifier: 82:8D:6C:75:5C:71:A0:21:19:0D:8F:4A:67:18:33:19:F0:A6:E5:E7
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584806450C9C99B099DC3514C300
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/01affdc8-cfde-39b2-92d1-54dc8e367c0e.roa
Signing time: Thu 28 Nov 2024 02:00:38 +0000
ROA not before: Thu 28 Nov 2024 02:00:38 +0000
ROA not after: Wed 26 Feb 2025 02:00:38 +0000
asID: 8069
IP address blocks: 20.33.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:06:45:0c:9c:99:b0:99:dc:35:14:c3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Nov 28 02:00:38 2024 GMT
Not After : Feb 26 02:00:38 2025 GMT
Subject: CN=6e5d3ada-041f-4091-a6ad-9d1cbed762ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fb:91:2c:45:b6:1a:96:c4:e9:f2:cb:93:79:
39:3a:ef:f7:32:b0:9d:a9:f4:e8:3e:25:b7:cd:53:
38:8b:d9:26:36:63:0d:55:44:88:a3:8a:a5:cb:d0:
12:6d:c3:f8:74:af:4e:28:bf:c4:ac:d6:3d:af:a0:
eb:7e:be:3c:d1:92:65:42:bd:2c:e0:92:bd:3c:86:
53:e7:60:a8:ef:ad:65:be:c4:e1:3e:c1:23:49:84:
e2:01:99:39:1c:d8:9f:30:94:95:e0:44:7c:05:38:
3c:4d:d1:c1:c1:8c:90:ec:fe:99:05:77:9b:92:0a:
88:0e:7d:50:20:be:24:fb:9c:97:45:8c:7c:e4:71:
2d:fc:b6:72:7e:7f:5f:44:2d:ec:47:5c:87:bf:de:
04:71:ad:6b:37:4d:55:65:7c:3a:a8:d6:71:3d:1c:
de:93:6d:f7:94:c1:92:ef:96:85:f0:b2:fa:03:74:
b7:37:1c:b1:26:69:1f:58:ee:c3:fa:37:f4:63:17:
d1:6e:23:d6:01:19:9c:4a:2c:b2:fd:9b:5a:b5:1d:
e2:5f:3f:53:bb:ee:47:e3:7f:07:26:35:c1:1b:b7:
97:ac:4d:67:48:eb:a2:89:58:6d:74:14:e1:fe:00:
31:b4:e9:58:01:5b:35:b4:ee:52:1c:dc:76:76:e8:
c3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:8D:6C:75:5C:71:A0:21:19:0D:8F:4A:67:18:33:19:F0:A6:E5:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/01affdc8-cfde-39b2-92d1-54dc8e367c0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.210.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:4f:00:89:1c:8c:bd:9e:32:51:bc:b1:10:c3:9e:d1:45:60:
f5:c3:18:c4:8d:8f:cc:5e:bc:05:8d:d9:41:41:22:c5:54:b1:
4d:84:5e:cb:b2:05:f7:d3:77:a4:43:54:d4:1c:7e:ad:33:49:
3d:92:89:7e:32:6b:73:7d:5d:3d:3e:30:b7:5d:82:09:56:8c:
55:5f:fa:fd:d0:b5:45:a8:43:13:3a:d8:41:d3:52:76:1d:d9:
aa:15:81:9e:11:f3:3d:c6:52:37:7b:77:27:ce:09:10:cb:a8:
99:d6:47:ca:b8:30:16:26:47:b5:6e:08:e9:f0:08:c3:c7:90:
b0:06:c0:a8:64:9d:4f:f6:00:f4:c5:31:e4:60:7c:95:db:fe:
57:c9:66:c8:37:67:9a:d6:4b:2b:d1:a5:d9:12:38:69:ac:d7:
fe:b1:e9:f4:cd:9c:53:07:e3:48:36:dc:cd:64:ca:f4:cc:ad:
1f:9f:ba:0b:2f:3c:26:d5:8b:ee:fe:03:57:33:ee:03:e5:42:
9e:2a:ed:76:ff:18:f5:d1:72:20:cb:fc:51:c7:38:84:5d:18:
12:54:60:7c:3a:ac:73:ae:ff:51:11:40:63:8c:9f:6a:bc:11:
3f:bd:16:c2:b8:d6:fa:c3:74:d5:d9:f9:a1:b9:22:f1:09:1e:
ac:8e:25:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:12:10 2025 by rpki-client