Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4dd409f5-81c8-3feb-986f-28c676a7eb94.roa
File: 4dd409f5-81c8-3feb-986f-28c676a7eb94.roa (raw, json)
Hash identifier: ZwNBPuj4HqAu05+jYJOnWOlmnCxc0ZWa2tiijKgfcVk=
Subject key identifier: 34:1E:C7:EC:C1:77:84:89:84:DC:E7:A2:51:8D:4F:2A:7E:B4:CC:90
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F43285848530B06BF9941A76A7E673DC0
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4dd409f5-81c8-3feb-986f-28c676a7eb94.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 8069
IP address blocks: 20.33.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0b:06:bf:99:41:a7:6a:7e:67:3d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=a90b7a70-b482-4471-b1ab-f05ba10f9927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:96:63:8c:e5:be:f7:aa:84:81:a0:84:e1:b1:
33:9c:81:81:9e:ee:ca:0b:aa:f0:fb:f0:fa:c9:84:
80:84:7d:fc:8e:5e:85:7f:10:2c:3d:51:1c:2f:42:
77:cd:42:86:e5:78:cd:1b:e2:93:5b:49:15:dd:0f:
fc:c6:0d:c8:b0:f2:1c:6d:41:25:00:c3:53:46:3a:
54:04:95:6a:3e:57:73:fc:df:4a:7a:ed:16:0d:0a:
2c:df:4f:98:e2:30:d2:a8:f0:59:8f:c5:45:22:ff:
cb:d6:65:43:a0:41:ef:a8:c0:bc:c6:bf:2a:98:c0:
20:c2:21:16:bd:8d:0d:8a:bc:c4:85:d5:af:8d:2e:
8c:47:7a:83:c9:48:6b:c8:5d:87:50:2d:b7:ca:3d:
d6:bd:73:50:97:5a:1f:28:f6:f2:8e:f3:9b:62:fb:
b3:08:88:34:ab:dd:d8:4c:74:1b:53:f4:66:af:ad:
be:75:82:71:4f:46:88:b6:80:c8:eb:dd:c3:3f:14:
09:7a:ed:f6:13:21:17:4e:ac:c0:c8:41:6f:67:4a:
7c:5c:68:1b:fc:bb:25:ba:bc:16:da:6f:76:42:20:
b5:4c:f4:d7:8b:cc:07:ba:e5:c5:56:e8:20:73:d9:
05:d5:79:3f:79:bd:f2:ea:19:7e:9c:7d:7e:d0:93:
3b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:1E:C7:EC:C1:77:84:89:84:DC:E7:A2:51:8D:4F:2A:7E:B4:CC:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4dd409f5-81c8-3feb-986f-28c676a7eb94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.42.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:b2:9f:74:2b:06:d1:85:22:b2:53:73:59:35:e3:95:2a:3b:
c3:84:35:e0:b8:ae:1f:e0:7a:ee:b9:9c:ee:af:40:60:c0:26:
5b:83:7b:f1:b3:c0:77:b4:d8:29:4b:97:27:bb:0a:02:1c:99:
ed:28:e9:8e:27:46:43:88:9b:a9:99:d5:17:2b:93:65:7a:52:
19:9c:f2:d5:52:ee:fb:63:c9:1d:37:d1:3a:15:ad:d7:f7:91:
77:40:8a:69:01:42:bd:a8:35:e1:42:e3:c4:cf:bb:3e:80:d9:
4f:11:42:ec:29:7a:53:f4:4e:64:4a:cf:cc:eb:71:2d:89:24:
81:4f:9d:0f:79:c4:b4:9b:71:e9:a4:5d:65:a7:29:cf:31:8f:
a9:97:35:2a:8a:85:9c:94:3b:4a:08:bb:57:48:cb:d5:76:08:
d5:92:28:4b:27:e7:49:1a:01:3f:02:67:a2:62:b2:b3:5b:28:
9a:c0:1c:9b:b8:29:d4:4c:a4:d8:cb:b5:63:7d:a8:71:80:b3:
17:91:ce:93:4b:28:c6:37:31:b9:ea:52:90:90:c1:54:47:31:
a4:18:59:ca:02:a7:5d:62:f5:5f:2b:a6:67:e0:f5:e6:b4:cc:
a9:cc:7f:68:05:77:7d:ff:f2:0a:b8:0f:67:fc:96:13:bf:73:
52:3f:5c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:24:22 2025 by rpki-client