Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4e67d494-acab-3047-896e-83e082ee4263.roa
File: 4e67d494-acab-3047-896e-83e082ee4263.roa (raw, json)
Hash identifier: GSfp4xFRKueGmE/RWcO08CadcjufFY5MsorgWSxzs6E=
Subject key identifier: FF:9E:A7:0F:3B:14:24:07:7A:FA:51:A1:14:8E:5F:1D:86:3D:4F:4E
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F43285848116FF9DD85338B225ED2A000
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4e67d494-acab-3047-896e-83e082ee4263.roa
Signing time: Mon 02 Dec 2024 02:00:40 +0000
ROA not before: Mon 02 Dec 2024 02:00:40 +0000
ROA not after: Sun 02 Mar 2025 02:00:40 +0000
asID: 8069
IP address blocks: 20.157.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:11:6f:f9:dd:85:33:8b:22:5e:d2:a0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Dec 2 02:00:40 2024 GMT
Not After : Mar 2 02:00:40 2025 GMT
Subject: CN=6f8cb642-c2d2-4829-a4ae-5881f75ce884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:77:34:be:cb:4d:ba:d5:e3:6a:0f:15:cc:68:
1b:ba:a2:fd:aa:60:99:42:71:5f:6b:de:b8:08:6e:
34:95:26:95:28:fb:ef:55:92:33:5c:d7:ea:97:c1:
a7:9a:bd:ba:6a:23:cc:82:85:c7:16:13:f3:b3:03:
06:e9:ca:f5:de:6e:37:a3:ca:7a:71:f3:bf:b5:2b:
62:92:f2:d1:cd:01:8f:be:8d:98:b3:ae:b0:e1:56:
bf:3f:23:ef:cc:5f:ad:a4:0b:02:e6:1a:7c:b9:05:
67:74:bc:e9:24:65:b1:1b:17:44:f6:52:08:ba:a3:
7b:69:5f:7c:a1:32:f8:29:13:ad:c7:dd:67:86:d9:
fc:ed:fe:08:f7:87:f3:ad:98:80:d0:a0:77:f3:6c:
47:cc:df:62:f3:19:4c:8b:07:6d:41:ea:02:05:d6:
e9:72:2b:5e:f6:60:e2:ac:fe:12:03:f7:aa:e5:28:
17:ef:0e:29:0d:24:11:df:94:e9:a1:fe:c3:73:d2:
64:9d:4b:1c:eb:5c:e6:fb:15:0b:f6:bf:97:31:06:
5c:3a:f2:39:80:d4:06:6d:74:ad:ec:cb:c1:72:7e:
c4:ec:9e:d7:65:06:ad:30:2d:6a:67:dd:06:1e:20:
b5:cf:bd:94:78:8e:be:e8:ea:c9:31:40:28:5c:19:
35:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:9E:A7:0F:3B:14:24:07:7A:FA:51:A1:14:8E:5F:1D:86:3D:4F:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4e67d494-acab-3047-896e-83e082ee4263.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.157.203.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:67:70:89:3c:3f:dd:8b:33:29:31:71:d3:e0:5a:90:86:87:
51:35:f6:4d:c6:2c:5e:70:4d:a7:e6:70:91:e4:1a:71:1d:cc:
d4:12:e9:cf:4c:d7:c7:be:11:ca:a8:00:f8:64:54:11:31:48:
2d:30:0d:f0:4b:25:a5:f3:eb:21:5f:7d:19:5b:39:aa:b4:48:
22:bd:58:54:5b:14:59:d8:5e:e9:d1:91:de:be:2a:b0:27:eb:
4f:5a:ea:a1:f7:3f:30:ef:fe:a1:77:ea:9d:e4:f3:22:33:2f:
3f:77:1e:ad:91:a9:e3:c9:e5:dd:b5:75:d6:dc:5d:60:3a:f8:
33:8c:8e:77:24:2a:8b:31:bb:bf:44:59:1b:2a:3f:4a:d6:1b:
3a:66:b8:7e:e9:3a:bd:93:71:da:ba:30:02:8b:09:3a:34:21:
54:8b:0a:97:ff:41:fd:fa:7a:b2:d6:35:d9:50:68:f6:2c:d9:
a9:16:00:36:20:47:fd:4d:61:d7:a0:c8:d1:75:1f:6d:51:a2:
67:e9:9d:6f:4e:cb:15:39:11:d3:74:50:8b:ab:e2:8b:d7:05:
f5:9b:80:1b:1c:d1:91:f2:f3:8c:bb:9e:b0:b6:4b:fd:44:9b:
b9:7d:6d:4b:7c:d4:20:c2:1e:08:7a:3b:46:ea:9d:06:97:5f:
d9:13:5b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:19:05 2025 by rpki-client