Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3450c19e-0fd1-3623-812c-c078eb3ba143.roa
File: 3450c19e-0fd1-3623-812c-c078eb3ba143.roa (raw, json)
Hash identifier: KI2tMnl/iH0pUJNLlnrx0rF8OKGIB++H20FtRf4ifBo=
Subject key identifier: 18:CC:E9:31:72:BB:45:32:C5:C6:34:2C:C4:1C:F1:3B:65:FD:71:91
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F432858485A05797AFD246D0C8013C080
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3450c19e-0fd1-3623-812c-c078eb3ba143.roa
Signing time: Sat 28 Dec 2024 02:00:38 +0000
ROA not before: Sat 28 Dec 2024 02:00:38 +0000
ROA not after: Fri 28 Mar 2025 01:00:38 +0000
asID: 8069
IP address blocks: 20.157.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5a:05:79:7a:fd:24:6d:0c:80:13:c0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Dec 28 02:00:38 2024 GMT
Not After : Mar 28 01:00:38 2025 GMT
Subject: CN=d3f6028a-088f-4a4a-9fea-52fc2660213e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:be:3f:af:00:2e:1b:6f:bf:0b:56:f0:f4:e5:
59:b7:1c:b2:c7:11:fb:f9:63:d1:52:38:00:f8:ee:
0a:7d:6c:0d:00:f5:33:90:e6:24:d5:ba:e4:e2:09:
c7:05:54:33:e3:fd:14:cd:8e:ee:f4:36:92:7c:31:
f6:52:ba:c6:aa:4b:cd:81:1a:18:fc:7a:6b:1c:fb:
8f:61:4f:87:ba:2b:7d:f3:ee:41:76:53:45:a4:9e:
ed:1f:3f:5f:48:0f:73:7a:0d:d6:97:f2:3e:95:97:
df:32:b4:1a:0a:20:62:67:56:84:e9:a8:c7:a9:e2:
d1:45:03:4f:b1:e9:10:db:38:06:2e:f3:5d:c4:ce:
6e:13:47:70:82:d9:fd:e1:a3:b4:f9:d8:0a:49:20:
d3:51:bb:d8:d0:00:87:9f:d7:c8:17:05:8e:60:5c:
13:cb:61:b7:72:e1:8a:85:61:2e:85:0e:91:0b:8c:
da:99:86:c3:6b:40:42:8d:66:43:58:c7:b5:f3:43:
7d:61:b1:9c:2a:b7:a9:c2:16:8f:c9:7f:f8:c8:6c:
86:0a:c0:d8:8c:4d:73:29:34:25:70:52:76:6c:b4:
1f:44:f4:5f:8c:d2:6e:09:6e:73:04:1c:40:bd:fb:
f7:41:f3:2a:34:8a:a5:df:11:45:23:d4:97:a4:27:
77:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:CC:E9:31:72:BB:45:32:C5:C6:34:2C:C4:1C:F1:3B:65:FD:71:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3450c19e-0fd1-3623-812c-c078eb3ba143.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.157.228.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:9e:04:24:84:33:bb:25:1d:27:17:eb:72:35:67:63:0f:9d:
16:c8:a0:5b:0a:b2:e8:47:8e:33:19:ca:8c:6b:7c:09:fa:48:
0a:bd:55:54:76:f7:65:b3:90:b0:32:53:28:97:de:52:7c:9f:
2a:22:10:bf:cb:40:62:a1:9d:80:9e:73:28:92:f8:02:b2:ae:
dd:89:7c:59:1e:40:97:4f:99:ba:61:35:d4:3b:52:75:3f:fe:
2d:86:1c:0f:fe:1d:7e:c8:89:e2:89:3e:fc:25:11:0b:01:58:
87:12:e6:33:d3:62:b0:74:c6:fc:16:70:6d:5a:30:b9:fb:65:
f7:68:8f:e1:ee:f1:86:9e:8b:57:c5:c4:32:d1:4c:a8:4f:43:
e8:bd:bf:d3:88:87:a5:a9:7d:36:18:79:72:98:5d:25:9a:64:
9e:54:fe:11:ea:0d:e3:e1:94:77:ee:77:c5:14:d5:94:94:9e:
42:61:9e:d1:bb:b3:27:07:e3:1b:6a:88:0e:9f:ef:0f:f2:38:
41:3f:ff:48:58:17:52:4a:7b:57:2e:c5:8c:53:39:27:8b:46:
36:9c:fb:0b:7f:1b:ea:38:cb:70:83:88:58:cf:26:22:57:26:
8d:a3:76:a9:8d:ff:82:f6:c7:f9:53:c1:5d:97:60:51:ab:06:
53:fb:46:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:11:54 2025 by rpki-client