Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/343b56e4-2785-3758-8b98-7b8ee4b8652f.roa
File: 343b56e4-2785-3758-8b98-7b8ee4b8652f.roa (raw, json)
Hash identifier: MRLoX+79zUNenv26So8ioWKsujp9rnWJi6JaJUxyhPk=
Subject key identifier: 19:4A:4A:97:D0:EE:68:68:7B:0D:BA:18:35:AE:F0:93:25:3A:55:50
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F432858486530432BD28B362779781480
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/343b56e4-2785-3758-8b98-7b8ee4b8652f.roa
Signing time: Wed 01 Jan 2025 02:00:40 +0000
ROA not before: Wed 01 Jan 2025 02:00:40 +0000
ROA not after: Tue 01 Apr 2025 01:00:40 +0000
asID: 8069
IP address blocks: 20.33.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:65:30:43:2b:d2:8b:36:27:79:78:14:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Jan 1 02:00:40 2025 GMT
Not After : Apr 1 01:00:40 2025 GMT
Subject: CN=665bcd82-4036-492b-9e29-9de377a4fac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:cf:34:15:ce:af:6e:b0:0e:87:cb:d6:69:90:
d7:56:c5:09:fa:54:d6:92:32:0e:60:92:e1:2f:6b:
46:9a:34:4b:59:7e:1f:a3:26:51:ca:a4:4f:9d:5f:
29:ac:98:e1:0a:59:65:58:9d:b9:2a:aa:07:e9:80:
26:a9:95:05:d8:d1:db:ff:31:bf:7b:bd:56:c8:ca:
e9:de:6e:a4:cf:85:38:67:c5:25:51:a9:e0:8b:37:
6a:a8:fa:61:fd:5e:3b:45:71:d3:c8:34:72:0f:fa:
31:be:9a:e7:04:15:47:7d:11:20:4c:cb:cc:8f:65:
44:07:1a:f4:a4:95:98:70:61:10:fe:5c:5b:0c:52:
ec:4c:07:05:75:46:06:8d:ab:c2:cf:d7:97:df:80:
3a:4a:a8:ae:1f:01:39:65:df:0d:e9:58:35:ed:f3:
76:95:49:77:f6:01:c7:bd:29:94:c2:80:f0:f8:65:
39:28:75:47:41:11:64:11:3a:b1:47:7c:48:72:41:
d9:79:3c:c1:72:ad:f9:81:5b:49:b9:3c:45:fd:fd:
a1:ee:86:c9:d1:92:2f:5a:6c:03:17:60:e6:4b:69:
10:0d:d4:e1:92:d0:68:32:28:48:fe:fa:eb:ee:6f:
1b:ed:fb:ba:99:e6:02:9a:df:ac:19:bd:8c:75:cc:
a5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:4A:4A:97:D0:EE:68:68:7B:0D:BA:18:35:AE:F0:93:25:3A:55:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/343b56e4-2785-3758-8b98-7b8ee4b8652f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.185.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:9b:88:c9:b4:f2:52:a2:e9:a4:be:98:d3:cc:90:49:0e:7d:
01:31:e6:0d:12:0a:1b:a0:a7:09:be:5c:9b:c7:13:9e:f3:d5:
ce:35:97:04:2b:bd:c5:d7:89:a1:03:22:33:e7:65:f7:0a:2e:
44:c7:9e:61:8b:f3:4e:57:bd:6d:0c:f1:e7:65:de:f8:8a:74:
23:22:e8:4d:b2:4e:4d:f1:4a:1f:6e:b5:02:b4:c7:ca:89:41:
c4:16:89:af:6d:2e:71:46:83:ea:0e:b1:b0:6c:93:d6:e7:c8:
80:2f:67:11:d1:58:f0:c9:40:78:89:30:6c:92:b2:65:be:36:
8d:f4:24:49:9a:b8:91:c3:cd:1d:13:49:f6:65:5d:4b:8e:e9:
97:26:92:ea:6b:39:c5:19:75:43:de:5e:d5:d7:06:76:fd:e0:
5c:bd:8e:32:27:d7:eb:68:5b:69:05:76:7d:3b:7c:1f:5c:17:
77:4f:76:5b:8e:7d:d6:eb:8a:0d:c2:92:38:39:c0:fe:fc:af:
c3:b7:a4:ce:0e:fe:64:ed:d4:59:28:87:aa:76:dd:e7:4f:95:
34:c9:ab:d9:a7:d6:cc:d8:65:68:e4:b1:7b:d9:58:c3:5f:55:
46:fb:24:4d:c3:7e:3a:47:a5:e7:54:06:aa:ff:f1:0b:13:20:
3a:19:ed:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:26:33 2025 by rpki-client