Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3a298cc3-0efd-37b4-91d3-1e3697d6a370.roa
File: 3a298cc3-0efd-37b4-91d3-1e3697d6a370.roa (raw, json)
Hash identifier: wa9mEc5O9+8T5QK/fGctshrlvgXc4iFgD5ji3UkCQCg=
Subject key identifier: 7B:AA:75:6F:99:31:2B:0F:5F:46:9E:04:6E:FC:E2:BB:13:FD:58:E7
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F43285848562F2C6A8EBC1D910981A340
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3a298cc3-0efd-37b4-91d3-1e3697d6a370.roa
Signing time: Thu 26 Dec 2024 17:01:27 +0000
ROA not before: Thu 26 Dec 2024 17:01:27 +0000
ROA not after: Wed 26 Mar 2025 16:01:27 +0000
asID: 8069
IP address blocks: 20.153.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:56:2f:2c:6a:8e:bc:1d:91:09:81:a3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Dec 26 17:01:27 2024 GMT
Not After : Mar 26 16:01:27 2025 GMT
Subject: CN=7865b7fe-1d58-4f6c-a8e7-cb4636f38f5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:50:ea:ca:98:34:d6:5f:86:78:cd:a4:c7:11:
42:50:ed:fd:a6:ed:8d:ed:15:49:c4:2a:50:6f:86:
8f:44:ff:9e:8b:db:01:c3:19:b2:f8:b7:55:cf:a1:
b4:31:57:d9:b3:86:90:01:e1:a9:02:3b:31:a9:ba:
c9:85:e3:e1:c5:b0:73:6d:a8:4e:37:3f:22:ed:2c:
c4:45:39:20:ff:59:c4:5c:2c:a7:fa:20:b3:8a:47:
f8:da:71:c9:13:a4:42:d9:0d:40:9b:95:d1:ac:42:
06:99:3c:0e:d7:c7:08:25:42:16:09:f8:37:e4:2f:
fd:a2:16:3f:39:7f:5d:30:ab:42:8a:63:50:60:72:
b5:bb:a1:5a:28:60:5b:9d:d9:87:d8:b3:6e:53:85:
fd:a3:7f:8b:16:2d:32:95:1c:08:01:0c:c2:29:c3:
d2:ab:98:7d:08:6a:e7:ca:01:55:6c:80:49:84:6b:
f0:09:8b:11:d4:da:15:c2:52:08:66:98:be:78:80:
90:6e:28:7f:3d:9b:db:4a:f2:74:09:70:b2:30:87:
f7:58:45:af:75:b2:cb:cb:cf:dc:64:ab:36:b6:08:
7d:c3:6f:83:5d:b1:20:dd:30:90:0f:78:fd:cc:6d:
dc:aa:28:92:e7:42:8a:fa:a3:44:a3:c8:4c:ea:80:
3c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:AA:75:6F:99:31:2B:0F:5F:46:9E:04:6E:FC:E2:BB:13:FD:58:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3a298cc3-0efd-37b4-91d3-1e3697d6a370.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.153.130.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:45:10:4b:37:f4:9f:f1:c5:eb:ac:ed:87:88:c4:3a:06:d2:
4c:11:97:91:11:1f:c6:1f:4d:23:cd:8e:02:dd:94:d3:71:0c:
d6:8d:15:81:ea:a8:70:ac:4d:5d:4b:90:35:d8:7a:a0:c0:f4:
b9:d6:06:66:50:51:c3:8c:a6:03:d4:4f:1f:97:9c:06:9d:a5:
12:8d:98:39:00:bf:4c:2a:e3:a9:5a:fc:bc:dd:91:58:d6:1f:
58:c4:10:a8:cf:6d:8e:67:f2:b3:14:18:ed:db:a6:50:0e:80:
9a:58:24:81:19:db:04:42:1e:a3:93:0d:1d:0e:6b:ea:e1:72:
32:70:77:e4:ad:d2:8e:16:dd:45:b3:3b:ce:29:92:e1:fd:b8:
d9:2e:4c:4f:c4:4a:98:32:47:bd:86:cb:ea:7b:22:7e:00:03:
21:67:d8:7a:a1:41:03:ba:40:49:f7:62:a6:54:0d:fc:eb:1b:
80:a8:35:d0:70:4c:b9:1b:cc:c9:f2:37:31:bc:60:2e:0e:b7:
97:1a:8e:ca:9b:d8:59:82:a7:8c:42:1c:01:42:ab:ff:24:a0:
6d:db:13:b3:05:19:b0:7b:36:53:69:01:03:10:ae:4b:7d:bd:
72:24:49:1c:e1:2e:be:2e:39:14:96:d3:1a:4f:94:2a:e9:97:
d0:98:56:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:19:24 2025 by rpki-client