Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/19eeb1b8-4ee6-3a5a-8669-0ec5d5e20141.roa
File: 19eeb1b8-4ee6-3a5a-8669-0ec5d5e20141.roa (raw, json)
Hash identifier: DNpUoeemzeMRg3sJHJ3b0HO/gKSjC+hqf8oyJJUI9po=
Subject key identifier: AB:6C:31:BC:18:D3:4A:B7:36:C7:E8:2C:2E:50:1B:3A:59:2F:0F:14
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F432858485A05799AFB147C18D7386000
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/19eeb1b8-4ee6-3a5a-8669-0ec5d5e20141.roa
Signing time: Sat 28 Dec 2024 02:00:38 +0000
ROA not before: Sat 28 Dec 2024 02:00:38 +0000
ROA not after: Fri 28 Mar 2025 01:00:38 +0000
asID: 8069
IP address blocks: 20.33.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5a:05:79:9a:fb:14:7c:18:d7:38:60:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Dec 28 02:00:38 2024 GMT
Not After : Mar 28 01:00:38 2025 GMT
Subject: CN=8658e288-d784-4c67-8ebd-6f40b2464c4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f0:b2:36:73:38:b8:91:2c:c5:69:eb:7c:a8:
21:ed:ac:e7:ff:a5:8a:40:4d:f4:74:c0:29:d2:73:
3c:ce:51:4c:1d:2a:40:4a:37:df:2e:2b:be:e5:d5:
90:a2:0a:b2:34:a8:8b:62:25:a1:aa:c9:ff:57:40:
17:3f:8c:e4:ae:ca:b0:a6:ca:1f:19:1d:cf:c0:01:
fd:22:b7:79:c5:04:45:11:3d:d7:cb:e6:04:23:07:
14:66:8f:d9:f2:14:55:72:c4:06:e2:70:29:72:7d:
f1:fe:de:93:8a:89:31:62:3a:4e:6a:99:4c:75:32:
7f:a9:ad:6c:4c:a2:ad:78:6d:e4:b5:0f:92:4e:43:
b3:3b:13:19:0f:b6:d1:2a:65:08:c2:dd:62:60:b5:
68:01:81:3c:81:f6:c2:72:9c:58:b1:b7:de:f6:d4:
27:64:15:c8:1a:5f:e8:eb:26:fc:d3:da:d4:da:35:
bb:58:6b:21:50:5f:15:3e:5f:b6:8b:59:99:f7:08:
a1:dc:02:ae:f6:79:ac:2f:64:ea:50:03:01:ed:7c:
94:d7:5e:73:02:68:a6:fb:82:53:96:9a:16:d8:7e:
98:c9:cf:0f:44:c6:c4:91:5e:e7:f3:ee:41:54:9b:
73:40:7f:bc:81:fc:27:2b:5e:4c:6d:09:62:e8:73:
4c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:6C:31:BC:18:D3:4A:B7:36:C7:E8:2C:2E:50:1B:3A:59:2F:0F:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/19eeb1b8-4ee6-3a5a-8669-0ec5d5e20141.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:b1:55:f0:0f:58:29:19:9a:fc:a2:a0:d5:61:d6:23:75:2f:
71:62:36:9e:16:8e:11:f8:08:80:1f:8d:59:55:e9:2b:bf:b5:
3b:a3:fb:f4:54:c9:1e:c3:51:32:19:49:a1:7c:da:61:17:4d:
c5:d8:88:7a:3d:35:6f:a0:05:09:d9:e3:bf:d5:90:c5:b0:81:
49:39:b5:f2:d6:5f:5b:d4:08:f8:64:93:f3:07:92:36:4a:5c:
3a:e1:e2:a0:48:d0:6d:a3:f2:a9:5b:7f:eb:c1:26:7f:75:9a:
fb:af:9c:72:b4:00:82:a5:35:e4:c8:98:94:fa:6a:cb:61:2f:
93:32:93:0d:26:0a:3d:7c:ba:91:90:e7:ad:cc:3c:5c:64:32:
b1:01:8b:73:50:91:8a:4d:35:fd:c1:3e:cd:4e:22:e1:20:1f:
90:c9:09:cb:5e:9a:3e:02:4b:5e:52:43:29:33:15:a5:90:19:
13:e7:f1:0f:df:15:f7:ff:41:a7:ef:b6:21:ef:f9:b4:fe:d7:
c5:da:ba:c9:25:9b:fa:33:66:1a:f7:6c:96:31:9d:17:7a:93:
86:d0:7a:3f:9a:1d:71:2a:88:71:ea:e0:22:5e:8f:78:d8:da:
f9:7c:37:f9:8d:ee:60:3b:d7:cd:1d:88:9a:07:42:bd:54:5c:
cf:0a:a1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:52:16 2025 by rpki-client