Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/063f2ce7-3b3d-348c-89ff-ee5a805a81f4.roa
File: 063f2ce7-3b3d-348c-89ff-ee5a805a81f4.roa (raw, json)
Hash identifier: qLQaSi/Qz87G6x9BbtYiXlCXuMuEciej8K8z/09LjBc=
Subject key identifier: 1B:6C:E6:2F:70:6A:92:5A:CC:EC:AC:C3:AA:24:57:15:DD:41:59:BB
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F43285848562F3369AEFAEC4CC135FC80
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/063f2ce7-3b3d-348c-89ff-ee5a805a81f4.roa
Signing time: Thu 26 Dec 2024 17:01:31 +0000
ROA not before: Thu 26 Dec 2024 17:01:31 +0000
ROA not after: Wed 26 Mar 2025 16:01:31 +0000
asID: 8069
IP address blocks: 20.153.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:56:2f:33:69:ae:fa:ec:4c:c1:35:fc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Dec 26 17:01:31 2024 GMT
Not After : Mar 26 16:01:31 2025 GMT
Subject: CN=42803933-6373-4e29-b653-fc608d8b7852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e9:4d:eb:2f:dc:09:ab:77:e1:a9:1a:e8:6e:
b2:18:7e:59:f6:47:8e:f1:7d:cd:06:79:55:51:d2:
26:d4:36:f6:9b:cd:1f:75:2b:f7:42:c3:79:3a:e9:
b4:7e:53:19:44:1e:12:61:3b:ca:34:2c:36:c6:b4:
49:bb:86:a5:da:b3:f3:33:82:04:07:fb:2d:16:a3:
bc:47:f7:17:57:bb:4e:e1:21:26:55:99:31:e4:73:
91:de:bc:22:ce:6c:9e:47:80:53:ec:c4:1d:72:4d:
ae:7b:bb:e8:ed:43:0c:5a:aa:98:6d:9b:73:c4:d6:
9f:95:e6:79:7c:db:6d:68:ee:8d:4a:b8:41:f5:7b:
fa:0d:eb:52:9b:09:b0:e1:f0:f5:9b:db:dd:e1:e2:
13:47:05:60:49:c1:6a:10:81:09:06:9a:a6:d5:f1:
a4:34:d6:43:de:2e:9d:31:37:75:cd:17:83:eb:88:
06:0d:d4:78:8e:fe:d6:6d:56:86:52:c8:fa:dd:5b:
e7:3a:f3:d1:8a:13:22:d4:fa:d0:60:f6:bb:01:a1:
a9:17:52:17:eb:27:90:ba:ff:1b:96:ab:28:d5:49:
29:30:2b:9e:89:22:c2:c8:c9:7e:11:9d:83:22:30:
59:2b:f9:2c:0a:42:39:f6:9f:bb:dc:b9:1c:2b:95:
2c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:6C:E6:2F:70:6A:92:5A:CC:EC:AC:C3:AA:24:57:15:DD:41:59:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/063f2ce7-3b3d-348c-89ff-ee5a805a81f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.153.16.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:6a:83:b5:88:aa:ba:27:c6:8a:7e:9e:0d:34:ba:1a:e5:22:
42:eb:b7:a9:4f:60:9b:b9:09:ba:5f:2e:8b:e1:a5:70:ab:36:
67:2b:27:80:4f:a4:14:1c:a4:f4:9e:d6:96:59:c5:f6:b3:15:
94:21:f8:1b:62:b1:25:cb:13:ed:87:4f:63:1d:87:30:55:3b:
88:53:dd:4e:4f:07:4e:7e:50:cf:dc:0c:39:d3:cd:16:c5:7e:
90:db:f3:ec:72:4d:3d:d3:01:61:81:6b:fe:d3:2e:e5:0f:a3:
0d:8c:e9:09:71:98:54:86:a4:b8:b5:bd:81:9b:54:bf:d3:53:
d1:32:c9:f8:36:fe:f6:54:9c:f7:19:b4:7d:37:ce:7c:97:ba:
50:bc:f3:f8:e7:39:2c:bf:e0:ed:17:c3:96:2f:40:27:6c:ba:
81:3e:01:d1:ce:dd:4a:31:34:05:f3:a4:ce:4b:08:44:8d:78:
a5:10:65:bb:62:06:5e:18:0c:10:7c:61:b3:e8:7b:64:fd:81:
a2:b7:dc:dc:c4:54:8b:f2:e8:21:fc:da:6c:0c:84:a1:26:59:
b2:38:44:ab:1f:fb:6a:e2:2f:de:7e:75:05:97:2a:e7:74:af:
00:ad:0e:e3:a4:b8:c5:0a:bd:7b:9a:2c:45:6a:bc:d6:60:e1:
8f:55:69:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:12:26 2025 by rpki-client