Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2dcfd525-f3e6-335f-8507-9dbff9bd843e.roa
File: 2dcfd525-f3e6-335f-8507-9dbff9bd843e.roa (raw, json)
Hash identifier: SO7cS2cuKDVRtmXVW7cWJnvv77oUxP/5BMQTdXC5+SU=
Subject key identifier: 48:08:EC:A3:83:36:D8:57:69:22:B0:8C:A3:C3:60:A8:CC:A0:07:D0
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584867FAEBE738C43E0B674CA680
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2dcfd525-f3e6-335f-8507-9dbff9bd843e.roa
Signing time: Thu 02 Jan 2025 02:00:39 +0000
ROA not before: Thu 02 Jan 2025 02:00:39 +0000
ROA not after: Wed 02 Apr 2025 01:00:39 +0000
asID: 8069
IP address blocks: 20.33.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:67:fa:eb:e7:38:c4:3e:0b:67:4c:a6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Jan 2 02:00:39 2025 GMT
Not After : Apr 2 01:00:39 2025 GMT
Subject: CN=3b355b47-9dfd-4688-bb27-a3c74cbbd866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:75:0d:c8:10:97:eb:a8:db:9c:b7:56:1d:e0:
64:84:d8:2c:51:c2:0f:f3:6c:fb:5e:4a:23:9f:7b:
ae:44:1d:bf:2a:2e:79:11:f0:c7:81:07:75:4e:67:
67:1d:1a:59:82:e3:54:6f:90:01:57:84:a7:1d:04:
d3:89:06:e4:42:d5:25:0a:d8:50:81:73:2f:3f:a8:
13:70:00:86:7b:33:d3:ca:46:5c:e4:18:d2:e1:ab:
ab:21:04:d1:49:c2:59:5b:24:8d:a6:b2:17:b6:c8:
ab:7b:85:40:c9:7b:18:ee:52:6a:98:fe:a1:1d:b6:
4d:7e:7e:ae:48:17:4a:6a:b3:69:b8:03:ec:39:fa:
b2:f7:69:ef:eb:b2:6c:ff:3f:18:ab:88:71:49:5f:
d8:06:83:76:78:5b:d5:ac:27:58:ed:58:30:32:42:
3c:75:c6:a2:e9:1f:f9:d3:68:37:dc:31:23:ab:22:
37:c6:5a:a1:ce:47:c5:e9:10:51:28:7c:1a:c0:3d:
e1:1c:48:3d:86:0e:84:0d:7c:2c:75:c0:2f:05:0a:
c1:95:82:da:21:d7:c3:e5:41:ec:0f:de:8a:ba:aa:
75:14:a4:38:fc:65:20:cb:be:b6:8d:ac:ae:28:04:
f2:18:ff:58:47:78:3e:aa:28:ce:04:e3:73:11:4f:
1e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:08:EC:A3:83:36:D8:57:69:22:B0:8C:A3:C3:60:A8:CC:A0:07:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2dcfd525-f3e6-335f-8507-9dbff9bd843e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.77.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:d6:8e:43:fe:1d:e8:93:33:8d:96:99:c3:00:f2:81:03:0f:
c1:8d:18:e8:0c:43:4b:a9:e8:88:c6:a2:e5:8a:7a:34:b1:28:
78:ad:de:19:65:f8:c8:bf:7b:0c:f7:6a:e5:c1:35:39:f4:bc:
c8:d8:47:36:c3:c2:d5:e7:36:6f:c0:e5:30:ec:31:b5:8f:c6:
43:31:fd:93:e5:a9:63:9b:b8:c4:d5:36:26:a4:8a:e3:24:4a:
5b:5d:28:d2:c5:df:7f:1d:60:fc:b4:94:16:58:ef:e4:41:0d:
32:c2:48:ab:7d:9d:e4:ca:cf:5e:7a:eb:85:49:28:0e:7b:24:
2b:d0:f2:8b:db:78:f7:34:a8:10:5c:35:35:a5:27:1e:81:fb:
06:63:54:d8:45:45:3c:f7:6b:5b:41:49:49:ac:15:2e:5d:ba:
45:9a:ad:00:c6:58:a0:69:4c:51:7f:a2:bc:1c:9f:7a:0c:f4:
8d:47:ac:e1:b1:4e:40:6a:89:0e:17:02:85:91:b1:92:86:10:
71:fc:a0:10:66:e8:31:25:97:0b:ec:9c:a3:56:b7:8f:6e:1c:
2b:58:87:be:03:57:af:ff:b5:7f:a3:0a:7f:1e:e9:70:a3:26:
92:e4:8a:5b:11:f6:f1:df:63:d9:6c:40:1e:a9:e4:e9:f5:d2:
ce:41:cb:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:14:19 2025 by rpki-client