Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3ada3c10-cbc2-358a-adb9-370a16b13ac8.roa
File: 3ada3c10-cbc2-358a-adb9-370a16b13ac8.roa (raw, json)
Hash identifier: puVjG7XiSen4d5NqvfxwlhjMngzVy4jDe9M+QtJ+Uto=
Subject key identifier: BB:95:EF:05:B5:BB:2F:7C:E5:AE:AB:49:6B:6D:58:5D:72:2D:C9:6A
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F432858486530437DB164B484ACECE500
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3ada3c10-cbc2-358a-adb9-370a16b13ac8.roa
Signing time: Wed 01 Jan 2025 02:00:40 +0000
ROA not before: Wed 01 Jan 2025 02:00:40 +0000
ROA not after: Tue 01 Apr 2025 01:00:40 +0000
asID: 8069
IP address blocks: 20.33.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:65:30:43:7d:b1:64:b4:84:ac:ec:e5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Jan 1 02:00:40 2025 GMT
Not After : Apr 1 01:00:40 2025 GMT
Subject: CN=478f57d4-8b47-4512-9905-2b81a05e536d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:66:ae:5a:52:69:28:28:68:63:45:d0:8f:34:
d5:ea:eb:04:1b:fd:f7:9e:59:02:65:c8:2c:79:78:
e1:26:2b:ca:cd:05:a7:2a:df:5f:8e:8b:a2:54:0d:
69:57:79:62:dc:7c:0e:7c:51:e7:c0:e0:82:ec:3f:
a5:7b:65:1e:1b:ba:e2:6c:22:7e:eb:e5:54:52:d8:
31:22:82:a3:39:2a:11:8a:2a:8e:8f:b2:8f:ba:fd:
2a:ff:66:61:85:f7:72:e0:2c:8f:4d:81:08:05:15:
d9:7f:89:6a:98:97:68:8c:62:5e:2e:f9:ec:64:64:
af:10:b4:10:9b:a5:6f:0e:ad:be:51:e6:5f:c4:c2:
46:75:86:fe:e4:26:4e:c2:a8:7b:41:41:94:b9:cc:
c2:99:01:2d:a8:68:11:9d:1b:c9:85:9b:99:7b:d5:
be:f7:19:68:95:a2:be:1e:79:11:dd:d7:3b:ca:b4:
a6:64:5b:33:88:73:ab:e4:32:79:35:18:f2:1d:ac:
68:db:06:66:9c:9a:0a:8e:ed:e0:ac:2c:48:8c:21:
cc:a0:eb:c3:c9:70:e4:ab:f2:42:de:1a:15:9d:ef:
32:09:ac:ab:96:ab:a6:80:18:71:e2:6c:3a:65:bb:
b9:8e:de:98:62:10:7c:1a:2e:21:18:b5:ef:c3:4d:
e5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:95:EF:05:B5:BB:2F:7C:E5:AE:AB:49:6B:6D:58:5D:72:2D:C9:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3ada3c10-cbc2-358a-adb9-370a16b13ac8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.199.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:2f:7c:19:92:17:eb:24:85:18:51:30:7f:c0:ed:f1:ee:b9:
72:7f:26:65:6f:5a:e2:0b:05:a1:92:f3:af:b0:79:39:25:7b:
45:79:43:2a:cf:9e:6a:ba:06:37:f5:09:a9:77:ff:4d:b7:ea:
68:dd:2d:86:61:a1:fe:7a:37:31:48:5b:bb:9e:64:e5:f9:df:
5f:8c:5a:da:a4:d6:53:e1:81:ec:e7:35:c3:d8:4b:11:9f:67:
34:58:8b:27:44:20:80:31:d5:b9:da:28:e4:bb:89:7f:eb:a4:
d1:ac:6e:2c:57:2d:5c:33:75:94:dd:6b:38:53:6c:a5:e6:43:
04:67:de:24:b5:d3:7b:13:9d:49:2c:3e:39:84:73:b9:91:c2:
41:56:ed:7b:a4:e4:af:c8:52:28:06:d4:3e:fc:eb:f4:74:0b:
b8:54:92:24:25:45:70:c0:d2:04:22:e2:0a:54:00:c8:d8:99:
03:6c:56:25:56:a5:3b:82:e8:85:f2:09:c9:2e:39:43:b6:d9:
ab:56:dd:f5:0d:8f:fb:0b:54:85:23:21:97:9c:10:56:b6:80:
dc:ff:2c:e9:d8:91:c7:c2:1f:25:6a:2d:55:d4:9b:29:62:6f:
1a:33:75:d8:cd:f4:46:a5:23:cb:b8:24:9c:94:74:8a:2a:83:
a6:bf:4e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:14:16 2025 by rpki-client