Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1fbba74b-58c0-3e62-9456-346889ccb84d.roa
File: 1fbba74b-58c0-3e62-9456-346889ccb84d.roa (raw, json)
Hash identifier: 6FUQx9xoNI7DOxmv68cyvvarxBzHC8TORFWquXD9PP8=
Subject key identifier: 6B:00:DD:56:BB:0C:6B:AA:7E:34:E0:D7:76:0D:2B:1A:1D:86:70:45
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F432858486D90607EFCD81F09FEED6280
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1fbba74b-58c0-3e62-9456-346889ccb84d.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 8069
IP address blocks: 20.33.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:60:7e:fc:d8:1f:09:fe:ed:62:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=fc480326-5769-43e8-9867-89ce9b07b80a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6a:00:f2:6e:1e:c9:d6:02:f7:98:33:26:ec:
d6:48:75:b4:f6:95:04:b6:a6:39:be:37:f5:7a:87:
de:c5:93:10:3a:55:c9:a4:6c:ba:1f:22:17:0a:81:
18:5c:8e:41:20:74:54:c5:9b:24:b6:e1:24:3c:3e:
5f:b3:47:03:95:1e:cc:12:d1:19:44:b4:f7:a4:29:
4d:ea:ee:48:2d:b2:81:13:8f:90:15:ba:d4:99:6b:
6d:a5:b1:27:14:2d:54:98:1c:63:77:ed:2f:4d:f1:
ff:91:3e:7e:be:e9:76:34:72:31:53:15:97:46:42:
5a:05:9c:04:3c:28:97:cd:e3:db:e1:c2:9a:e2:67:
eb:91:37:3e:9a:83:ba:38:b2:d6:a8:b5:5d:3f:ce:
e6:39:62:0c:90:ef:29:ab:82:35:cd:b6:41:5b:f3:
59:93:73:72:ac:01:fc:f4:64:c0:49:6f:23:5d:9e:
e9:48:7c:2f:50:08:1f:ba:ce:8f:e7:0e:bd:c0:28:
32:23:76:59:9a:17:04:74:cb:f6:c1:9c:cb:0a:b9:
14:e7:a7:69:a5:13:06:de:06:a8:fc:22:f3:45:0e:
2e:3a:09:ef:76:bb:13:7c:c0:72:71:35:a5:d2:73:
98:82:04:90:8a:2b:be:2c:49:1e:dc:ac:7a:e6:e5:
90:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:00:DD:56:BB:0C:6B:AA:7E:34:E0:D7:76:0D:2B:1A:1D:86:70:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1fbba74b-58c0-3e62-9456-346889ccb84d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.168.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:e2:4b:80:b7:54:05:91:35:32:83:e8:cf:66:ac:51:1c:34:
0b:15:39:53:ca:89:40:10:c9:56:f8:77:ff:2a:8d:a6:1e:b4:
0e:ac:c3:29:d4:66:be:0b:83:bb:23:79:23:ea:cf:4d:d0:8b:
9a:2e:0a:03:7e:e0:c3:fc:42:4d:f6:77:d1:58:24:b9:b0:73:
0d:6e:eb:cf:04:f8:5a:9b:aa:64:88:44:ba:b5:29:a4:26:86:
78:ad:96:54:99:b3:b4:07:46:91:20:56:f1:cf:63:37:48:86:
f4:83:b7:ea:0d:91:c5:cf:8f:95:6b:89:80:09:18:5b:36:3b:
bc:68:09:86:76:72:31:ec:0b:0c:2f:c0:39:9b:2b:11:95:f1:
9f:28:f0:70:4f:2b:a2:74:b3:48:d2:81:87:e4:46:89:a1:51:
27:9a:cc:c0:9f:72:23:96:92:ee:cd:e2:00:d8:9b:80:a0:9a:
80:17:bb:ce:77:40:a6:e5:01:c9:97:fe:6d:f8:5f:15:62:2f:
42:00:07:1e:70:dd:a9:99:54:4b:56:70:ae:1f:ff:8d:d5:6c:
a1:2b:c3:57:c9:9e:03:0b:81:0c:26:b2:ce:b5:65:47:48:0c:
c7:5f:27:eb:61:2f:d6:4d:34:e6:00:70:e5:1a:36:83:0e:16:
1f:59:8a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:56:22 2025 by rpki-client