Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/47d92f21-0ef1-382a-9fcb-b959cc71d765.roa
File: 47d92f21-0ef1-382a-9fcb-b959cc71d765.roa (raw, json)
Hash identifier: tinLTYgSN61CG7bQqTtIYJWlmBeTiwQvw49y+UY/JPk=
Subject key identifier: 2D:E7:FC:63:47:F7:12:EC:B8:89:0C:7D:68:19:FB:5D:C4:A0:34:73
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F432858487CEB3D9DA887D7E4611FE740
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/47d92f21-0ef1-382a-9fcb-b959cc71d765.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 8069
IP address blocks: 20.33.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:3d:9d:a8:87:d7:e4:61:1f:e7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=7a456327-6ef0-4102-9db9-9dfe436dbab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:d8:88:af:02:80:14:59:df:19:cf:ae:00:49:
6c:a8:aa:f1:d6:16:ff:62:d5:51:1c:28:c3:1c:f2:
a8:35:e8:8b:0a:c4:5a:21:88:49:16:31:a2:c6:e5:
08:a5:72:a6:51:39:c9:9b:2d:ba:b3:2a:e7:ac:29:
ea:0a:33:53:f7:52:3d:6b:be:55:03:63:2f:74:bd:
0c:c3:f1:b2:09:89:fc:d3:8b:68:85:4b:84:fc:51:
bf:2e:d6:f1:c4:c3:a5:d3:20:7a:09:c1:67:bd:83:
71:8c:d6:9a:27:82:05:b3:39:00:8a:dc:e2:64:0e:
02:99:9a:b5:7a:f5:78:0f:2a:dd:0e:34:2b:a1:6a:
ee:22:8d:38:af:fb:59:28:1d:45:4f:fd:e0:fc:0a:
17:d4:f5:63:27:d5:56:ba:9a:6a:54:c3:a1:14:46:
04:9f:65:25:35:0b:e0:62:1f:35:72:19:7a:14:1e:
e9:39:1b:0f:79:b4:0e:a9:dd:94:ae:c2:12:dc:f8:
62:d7:d0:18:ae:ae:6d:62:81:05:5c:6e:f2:fc:59:
f4:68:14:7e:26:31:ee:e8:3c:90:68:49:aa:b0:38:
9b:5e:7d:0e:68:60:36:41:66:09:ff:0d:2d:8b:0b:
21:87:ea:f1:ad:a6:e0:65:f9:7a:4c:be:1d:c1:d9:
60:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E7:FC:63:47:F7:12:EC:B8:89:0C:7D:68:19:FB:5D:C4:A0:34:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/47d92f21-0ef1-382a-9fcb-b959cc71d765.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.45.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:81:97:f4:e6:11:fc:f8:7b:fd:27:7c:15:ea:88:15:ee:a0:
eb:47:a4:37:81:13:73:50:34:d3:5e:ee:e2:42:ef:48:8a:0c:
2c:54:78:fb:33:b0:7b:4e:02:9a:8b:e1:02:45:3a:55:21:7b:
b0:89:8e:3a:2d:85:4b:45:a2:4e:0b:75:ed:db:3d:87:86:4c:
f3:dc:5c:59:4e:8b:34:24:ba:d3:77:8e:a2:dc:20:4c:b5:9a:
0d:1e:cb:2c:1e:3e:9d:a2:1d:c7:3c:d6:c5:db:a6:d6:90:e9:
a3:23:a1:0c:fa:77:5c:33:7e:e8:e6:79:33:1c:91:f1:30:00:
90:6c:87:44:5a:63:69:5e:c7:64:58:ed:69:db:18:c3:8e:fd:
ad:12:bf:5f:4a:22:94:d2:66:45:08:4a:67:13:cc:ec:eb:d6:
0b:b7:30:a9:d9:e0:38:52:11:01:1f:fd:29:81:73:4f:e8:a5:
d1:45:c0:8c:59:99:48:86:a3:8e:0b:fa:e0:e2:61:8d:e8:04:
00:53:cc:41:89:06:61:8a:28:22:60:ac:5d:10:a7:d0:27:bd:
7a:a1:f6:2f:e9:85:90:f3:fc:07:1c:4a:34:9b:2d:2b:0c:8c:
f5:66:3a:c0:a0:8b:0b:6d:1a:f3:49:5a:a5:92:31:0e:a8:df:
27:8a:81:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:24:10 2025 by rpki-client