Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/02a83350-670d-3cb6-afe2-eff642f4f27c.roa
File: 02a83350-670d-3cb6-afe2-eff642f4f27c.roa (raw, json)
Hash identifier: 3gznMEeLQ0N6+TeqhcmAJHGZlIsEwf/M/I3OHXkUjB0=
Subject key identifier: D4:D2:64:33:53:22:0B:36:87:1E:A0:4B:CB:34:C8:A1:82:B7:B2:80
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F432858486530443F2D1F442C08B7AF30
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/02a83350-670d-3cb6-afe2-eff642f4f27c.roa
Signing time: Wed 01 Jan 2025 02:00:40 +0000
ROA not before: Wed 01 Jan 2025 02:00:40 +0000
ROA not after: Tue 01 Apr 2025 01:00:40 +0000
asID: 8069
IP address blocks: 20.33.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:65:30:44:3f:2d:1f:44:2c:08:b7:af:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Jan 1 02:00:40 2025 GMT
Not After : Apr 1 01:00:40 2025 GMT
Subject: CN=1fc123c4-ab2e-4510-9ae9-59b4d784965f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6f:d9:9b:cb:d7:ae:99:52:01:04:aa:f8:8c:
83:39:12:47:69:0b:b1:b0:bf:9f:5f:45:af:6e:b7:
b2:5c:8a:dc:34:ce:56:af:56:b2:ac:99:3d:66:80:
d8:7b:25:2c:b8:d4:fd:56:a0:9b:e8:66:5c:de:d8:
39:c8:66:6d:f9:59:f7:69:5b:bb:2d:da:45:29:fb:
68:23:66:7e:24:4e:37:fe:d6:72:59:a9:db:1a:cd:
8b:26:b8:1c:3b:2b:55:ba:7e:6d:73:0c:88:15:5b:
e8:18:61:11:3b:2b:7a:e2:9e:1d:b3:8d:f0:c0:b8:
3b:91:f3:55:dd:22:98:f8:be:ff:76:98:db:45:c6:
88:a5:71:4e:46:1e:20:8a:5a:06:ba:10:c8:2c:75:
6e:0b:0f:ef:51:9b:19:64:6a:38:a5:00:90:ea:ac:
c8:ba:41:ce:6b:9a:2b:4c:ae:5f:38:cc:be:54:38:
76:a3:4b:31:1c:a0:81:e6:5e:97:49:77:1b:79:11:
01:fc:4c:06:5d:59:f3:81:3c:58:cb:05:b1:c0:19:
ee:9c:c1:6a:5f:f3:68:3f:17:ba:48:2c:22:83:7e:
5b:60:c9:74:58:ca:ad:e0:0e:dd:e2:5f:56:24:f1:
de:cf:a3:6c:60:50:46:48:0e:82:b8:f5:8f:68:d0:
a5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D2:64:33:53:22:0B:36:87:1E:A0:4B:CB:34:C8:A1:82:B7:B2:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/02a83350-670d-3cb6-afe2-eff642f4f27c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.55.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:19:31:54:3d:8e:dc:ef:7e:f8:e0:93:ab:1b:71:a4:ce:a8:
7d:96:07:eb:7e:12:b4:a7:f6:f9:2a:fb:2f:f6:4c:8c:74:ad:
31:a4:54:d9:a2:c5:e3:0e:49:cb:90:37:be:d1:60:6f:19:d1:
50:dc:16:05:4c:d2:f2:9f:b0:f1:4f:3a:17:9d:69:14:62:f5:
72:49:9d:f3:8e:65:f6:23:34:ea:85:5b:47:cd:d0:c1:3b:95:
33:cc:27:97:ff:88:53:67:d4:80:ce:88:dc:c0:14:c6:46:cd:
a1:0c:8c:9c:32:38:9f:02:7a:74:1c:c5:e6:12:a4:c8:54:d2:
56:e6:0e:e9:ec:b9:0c:4c:c4:33:8a:63:0d:5c:3e:3f:5e:27:
11:9d:05:33:e6:d9:06:f8:a0:1e:d3:bb:4a:19:e7:19:ff:c0:
df:f1:3a:a2:d3:8d:db:ee:bd:78:87:12:ac:30:7a:c9:2a:f0:
a7:cf:27:37:3e:cf:a3:c0:12:1d:9f:b4:c6:ce:6d:c0:2d:a3:
57:58:ef:11:4a:b7:a4:54:fe:af:1d:2b:9c:9a:c7:60:bd:0f:
8d:2c:dc:f2:28:54:14:22:50:42:b3:e7:02:57:b6:f6:98:9e:
4b:f5:8c:15:cd:1c:09:a4:ae:a5:f5:42:65:9e:d5:3e:cd:4e:
ea:e4:3c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:11:28 2025 by rpki-client