Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/33088dce-4351-3949-b0c1-0d50e44527bc.roa
File: 33088dce-4351-3949-b0c1-0d50e44527bc.roa (raw, json)
Hash identifier: WMDUUHSTVCP2Xyn0WXUkyU0RzmwhDP0TLDwdyJm8Rtc=
Subject key identifier: 97:62:AD:E3:E4:16:66:4A:23:DB:FB:7E:EA:D1:3B:45:9D:F1:44:26
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F43285848116FFA66A94BFF26B0539780
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/33088dce-4351-3949-b0c1-0d50e44527bc.roa
Signing time: Mon 02 Dec 2024 02:00:40 +0000
ROA not before: Mon 02 Dec 2024 02:00:40 +0000
ROA not after: Sun 02 Mar 2025 02:00:40 +0000
asID: 8069
IP address blocks: 20.33.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:11:6f:fa:66:a9:4b:ff:26:b0:53:97:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Dec 2 02:00:40 2024 GMT
Not After : Mar 2 02:00:40 2025 GMT
Subject: CN=41304116-6404-4c57-9601-1b33721943c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f3:37:e7:37:2c:31:d1:cc:a0:58:f8:ca:3d:
16:6b:12:3e:37:b4:3b:af:83:4d:95:ef:32:c8:fc:
fa:cf:e7:18:d0:71:c5:a6:9c:4b:13:50:ea:ce:2d:
49:38:a3:1a:04:35:bc:43:34:94:b2:ea:52:a9:d9:
32:98:04:8f:f8:cd:0e:d7:8a:5b:25:e8:15:1e:60:
0c:f1:76:52:cd:1a:22:64:4d:4d:33:3b:56:e1:99:
e6:95:3b:00:34:7d:ad:a4:df:c3:dd:c0:50:32:d9:
93:c4:a3:3b:44:5c:b1:0a:a4:ed:04:0e:37:c7:7f:
a9:de:1b:27:40:4f:93:4f:95:c9:c4:5c:0a:7e:8f:
e0:85:f1:a5:2f:00:91:13:48:af:34:a9:33:ca:c4:
83:6c:b5:42:04:8a:98:ca:45:55:95:73:46:fc:e1:
cc:1e:82:f3:2e:f0:fd:15:34:ae:23:98:e9:35:30:
fe:61:87:b6:db:76:5c:81:c0:f4:5b:4e:07:f0:d4:
26:38:23:6f:14:4c:ec:24:b0:72:ef:9a:95:98:94:
3d:b5:8f:17:36:89:d7:c9:00:11:47:5f:96:dc:c1:
f5:78:d1:c0:89:c1:a6:27:6f:38:4f:39:6b:e5:1b:
63:44:ac:c1:da:9c:a9:15:96:97:94:f1:ac:ef:3e:
38:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:62:AD:E3:E4:16:66:4A:23:DB:FB:7E:EA:D1:3B:45:9D:F1:44:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/33088dce-4351-3949-b0c1-0d50e44527bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.86.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:ca:dd:5b:99:29:77:c5:73:7b:c4:6b:44:a0:1b:24:d9:85:
1c:3e:42:70:2d:8f:b9:2b:43:d0:0c:36:98:4c:0f:b2:07:d9:
fd:9c:dc:39:98:7a:e2:72:bc:e0:25:e2:6a:15:3d:97:5f:db:
bf:b9:62:54:a9:2e:88:93:49:da:e2:33:e1:f2:3e:50:fe:d7:
b8:39:bd:26:cc:34:95:4d:e0:12:4b:03:07:3b:f0:14:ce:fa:
36:bc:00:ba:ed:79:80:fe:5e:e5:ae:c9:e8:d3:6a:e4:b5:fe:
b4:5a:6d:f9:0b:5b:e3:c4:a5:7d:d7:61:6c:3c:00:c9:b7:eb:
5a:80:d3:04:ee:53:7f:c8:e4:91:2d:36:68:58:ca:4b:1b:8a:
6b:1a:2f:ab:98:e7:9d:3f:ad:dd:14:d4:52:68:ce:19:28:c9:
26:66:0c:5d:d4:af:76:db:08:b4:c5:46:f2:be:9c:8b:b2:d6:
d0:49:81:22:b5:42:39:38:4e:79:84:db:9e:25:a3:95:5a:04:
5c:ca:ab:5a:b5:8b:50:b3:e2:8b:ed:04:f9:6e:42:22:66:45:
76:68:75:03:1f:f1:16:40:e3:6a:72:c5:0f:04:a9:13:be:43:
22:2f:96:a5:81:e3:0f:c0:d2:12:88:0a:69:20:1e:d7:12:1f:
12:c7:20:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:50:38 2025 by rpki-client