Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2e8b32a7-5227-3075-a46f-6e68287464bb.roa
File: 2e8b32a7-5227-3075-a46f-6e68287464bb.roa (raw, json)
Hash identifier: kaVSnxBkPFLXgQJPxsGVeKX8AV/9wDVO5BDnpDHkc6Y=
Subject key identifier: A7:4B:6F:3A:32:13:87:14:28:3D:96:17:E0:3F:F2:9D:BB:20:1A:82
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584800AFC56D2B8EC805F6AD6000
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2e8b32a7-5227-3075-a46f-6e68287464bb.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 8069
IP address blocks: 20.153.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:c5:6d:2b:8e:c8:05:f6:ad:60:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=b826a3ad-38ac-4e0d-9656-0f9042483638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:62:b5:e8:d8:55:b6:02:6c:b7:19:13:75:d1:
ab:ec:a9:72:90:85:60:67:e0:88:93:1f:3d:68:6f:
4c:8d:25:86:a0:7b:d4:e0:df:4b:21:40:67:e2:37:
b4:ff:cd:a0:c6:56:3f:10:a7:7e:00:69:16:6d:8d:
b8:80:e2:e1:c4:66:72:1c:d6:b1:a5:b5:9e:97:e2:
c1:d7:34:6d:54:82:cf:74:1d:e4:26:39:90:71:e4:
69:d9:a0:74:6d:bb:d6:29:56:c0:bd:56:16:ba:13:
04:ea:b4:12:c3:b1:f5:5b:67:65:55:8d:66:04:88:
22:69:28:d2:84:c4:9f:46:02:b2:fa:bd:49:95:ee:
ec:de:c8:23:f4:8e:f8:66:a0:f4:0b:5c:84:95:85:
91:a4:2d:72:f9:d0:ef:27:f9:37:64:c8:a2:dc:1a:
d4:04:d4:29:b2:50:fa:85:02:a1:31:25:6c:96:c2:
e0:c4:53:a7:75:e0:67:8f:19:cb:2d:c3:a5:c5:8d:
ad:e0:9e:af:fe:36:33:99:06:82:c1:5a:7d:e2:51:
b0:bb:0e:be:dc:c7:94:7a:bd:62:89:97:4b:26:85:
bf:15:bd:98:76:0f:7c:39:a3:96:54:38:a5:e8:aa:
13:49:53:8c:8b:8f:65:41:f1:19:61:69:11:19:91:
32:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:4B:6F:3A:32:13:87:14:28:3D:96:17:E0:3F:F2:9D:BB:20:1A:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2e8b32a7-5227-3075-a46f-6e68287464bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.153.13.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:24:87:9b:bc:50:72:75:4e:0a:bb:fc:84:66:ce:af:64:1b:
ac:27:02:a6:2e:43:5b:d1:2b:72:03:00:69:3e:f9:5a:76:23:
b5:d7:f7:80:ce:1f:6e:13:17:c3:a9:1b:e5:cf:97:97:90:f4:
6c:03:69:ca:ee:91:5e:27:58:47:83:ba:58:b2:83:38:35:84:
f9:64:23:ef:ca:ca:4a:08:ad:3f:57:32:b6:74:a0:99:65:38:
9c:de:6b:13:62:f9:3a:62:70:a7:ce:1d:db:56:8c:6c:80:fb:
49:8d:ef:f9:02:5e:d4:c8:f1:90:66:77:3d:8f:fb:56:b0:76:
d0:a6:28:d9:33:ef:0a:08:46:dd:ea:b2:cc:f0:e7:16:04:91:
dc:f5:84:8b:4d:9a:b5:b6:4d:3f:8a:c3:4a:9a:b8:df:b1:64:
5e:bc:f9:6a:13:fa:6c:2d:95:fe:f3:d5:58:4e:cd:90:9b:16:
75:cb:4d:bb:d8:b6:6f:c9:aa:a5:38:9e:e3:30:65:69:2d:f9:
74:04:4d:d7:89:04:35:27:d9:de:e0:cd:e9:81:dd:bd:42:8a:
dd:8c:e8:cc:98:8c:e7:4c:26:7d:92:60:59:ee:23:74:39:bd:
60:7b:f5:17:45:4a:df:91:4d:74:18:41:8d:cb:70:1e:8e:da:
d6:cb:50:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:13:45 2025 by rpki-client