Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/25af00ca-4f76-3e40-b823-c83ad676aaa2.roa
File: 25af00ca-4f76-3e40-b823-c83ad676aaa2.roa (raw, json)
Hash identifier: 5aQ39LxO4cVhSFKYj74jNgjT+WONhR9zPD2Yzvoc8GY=
Subject key identifier: 01:87:B6:25:80:81:B4:42:00:01:85:FC:A9:39:8F:55:1B:72:E6:42
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F43285848562F2D7062EDBE7B944627E0
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/25af00ca-4f76-3e40-b823-c83ad676aaa2.roa
Signing time: Thu 26 Dec 2024 17:01:28 +0000
ROA not before: Thu 26 Dec 2024 17:01:28 +0000
ROA not after: Wed 26 Mar 2025 16:01:28 +0000
asID: 8069
IP address blocks: 20.153.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:56:2f:2d:70:62:ed:be:7b:94:46:27:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Dec 26 17:01:28 2024 GMT
Not After : Mar 26 16:01:28 2025 GMT
Subject: CN=1be777ce-16af-4844-8e8e-5bcf84816adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:85:00:e6:22:df:5b:7a:cc:1a:57:12:9d:ad:
ec:b4:94:98:20:c2:3e:62:50:6e:13:a1:04:5b:a4:
28:36:7d:4f:78:ed:ef:5e:28:12:c8:95:2b:04:47:
9f:07:3e:4d:49:1b:30:48:73:81:cd:68:ca:69:e2:
a0:5f:51:a6:f7:7c:05:09:ad:8d:4b:54:66:33:fd:
2f:ec:be:5e:b1:55:d0:03:42:72:e8:25:4e:db:ea:
38:0b:f7:0f:ea:5e:71:34:cd:9b:38:32:ac:a8:62:
28:9f:0f:45:95:4b:c1:c2:07:e3:01:11:1d:cd:6b:
df:9a:85:98:ad:25:d4:48:94:2a:c4:c1:1f:93:7a:
a7:bb:3e:1d:f8:a2:61:be:fb:f4:92:92:75:57:35:
66:c7:3e:0d:51:b8:db:7a:c1:e4:85:93:90:c1:98:
d2:04:27:f2:3f:63:e0:b0:26:b6:98:77:ea:d2:f7:
62:62:77:37:3c:ea:ca:db:38:25:07:e6:8f:b3:6e:
8b:4c:45:ad:51:15:4b:ab:ee:d6:25:ef:32:51:f1:
76:c5:dc:dc:3c:44:2c:34:6e:13:ab:e8:c9:6a:06:
8c:70:c5:24:29:1c:27:20:c5:9f:7e:9c:00:92:22:
20:dd:32:c5:be:45:9a:33:34:3d:9c:b8:5c:0e:c8:
43:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:87:B6:25:80:81:B4:42:00:01:85:FC:A9:39:8F:55:1B:72:E6:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/25af00ca-4f76-3e40-b823-c83ad676aaa2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.153.31.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:84:d1:0b:de:74:66:69:2e:bd:4b:2d:fb:c2:a3:16:2c:e3:
bf:fe:e7:d2:d6:80:d4:fe:8b:32:74:50:8e:c0:af:b0:ea:3c:
67:df:87:59:9b:24:a4:a9:f0:18:40:f2:8e:72:15:0d:b5:d4:
29:98:0c:bd:de:ae:b1:12:ae:d1:23:91:57:54:53:c3:d4:8a:
b3:b3:b2:af:15:e9:e2:16:3e:46:96:c3:76:9d:f0:62:bf:25:
f9:73:61:72:fa:e7:69:94:62:23:5e:f3:11:94:8f:67:86:02:
a9:b3:5a:55:b4:98:5e:f2:cd:10:75:54:58:7e:f5:d0:20:82:
1f:af:6e:54:4a:98:68:28:79:9f:b0:6b:02:98:eb:fa:d0:8a:
f5:76:72:ed:e7:b2:70:1b:77:d2:d4:2d:04:33:8d:87:16:27:
85:d3:1d:26:a3:e9:31:f3:5b:58:1f:00:95:35:18:7e:8f:f5:
8e:ab:49:b3:d3:b3:36:07:ff:47:83:13:58:af:e0:d0:91:5f:
d4:e0:2e:fd:f1:8e:27:98:fc:0c:d6:d9:36:e9:0c:a4:c0:c3:
d4:16:0e:20:11:5d:1f:a4:61:e5:4c:9a:f0:11:b9:e1:52:bf:
53:cc:de:58:b3:c3:22:49:2d:dd:ea:f0:4d:52:ff:03:c7:fb:
80:f7:c1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:46:17 2025 by rpki-client