Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5bf04b00-bd2b-33b8-9872-6c352ab3e042.roa
File: 5bf04b00-bd2b-33b8-9872-6c352ab3e042.roa (raw, json)
Hash identifier: Kq8GYZ/Ex4t/yREXbH+2xAHKkjJePn9vDFZ0y6jrYk8=
Subject key identifier: 2C:D1:59:74:E4:2F:24:0C:17:A7:B0:A1:41:70:17:88:72:9E:C6:D1
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F43285848116FFA20B6F4A814F452CBC0
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5bf04b00-bd2b-33b8-9872-6c352ab3e042.roa
Signing time: Mon 02 Dec 2024 02:00:40 +0000
ROA not before: Mon 02 Dec 2024 02:00:40 +0000
ROA not after: Sun 02 Mar 2025 02:00:40 +0000
asID: 8069
IP address blocks: 20.33.226.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:11:6f:fa:20:b6:f4:a8:14:f4:52:cb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Dec 2 02:00:40 2024 GMT
Not After : Mar 2 02:00:40 2025 GMT
Subject: CN=90408375-0756-4997-b213-49ef7799cdd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0e:c2:55:2f:92:23:7d:84:01:6f:3a:70:1a:
3e:73:d4:f8:b1:2f:f0:47:a3:38:45:d4:d7:de:65:
b0:4c:38:db:0d:88:e6:2a:36:97:55:b1:96:cd:85:
a4:71:82:82:b2:01:06:65:e3:5b:5c:ca:ac:c5:e1:
58:1e:73:31:cf:54:cf:ba:3f:e6:76:0c:9d:3b:d8:
b6:c9:29:60:fe:45:9b:b9:cd:42:00:ec:74:d1:87:
86:59:45:f8:7c:1e:c4:52:51:a5:14:b5:a6:95:6c:
0a:eb:ed:42:96:eb:8a:e1:35:06:30:62:ba:b6:3b:
ae:0e:c0:a8:06:cc:1e:54:87:a8:d8:8f:69:c6:9b:
e7:aa:f2:d3:fb:73:37:29:25:71:15:d2:c1:5c:55:
2b:f7:0d:93:f9:4c:3b:4d:48:3a:ad:8c:a7:46:1c:
ca:c5:9f:78:d3:89:22:ca:94:39:43:3e:04:45:e7:
32:de:b1:a1:fb:55:d8:87:88:ec:1d:5c:f9:4b:d8:
a3:90:6d:e9:ed:5b:42:29:37:95:5b:f3:3a:b9:13:
c4:82:76:ee:b7:e1:1a:50:0e:b6:69:4f:c3:4b:da:
6b:6a:8d:25:13:bf:7b:e2:3c:61:1b:4a:92:cd:92:
5c:54:22:50:6e:8f:a9:87:25:57:b6:ad:7b:cc:f2:
e2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D1:59:74:E4:2F:24:0C:17:A7:B0:A1:41:70:17:88:72:9E:C6:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5bf04b00-bd2b-33b8-9872-6c352ab3e042.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.226.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:1f:85:48:08:a5:33:e5:50:73:97:45:5a:87:2b:bd:83:c3:
2f:e6:1a:c2:06:7f:fd:b1:83:1f:68:6c:47:28:26:5b:64:a6:
b2:73:f2:76:9f:53:73:c5:07:7f:33:e0:55:d9:ae:59:c4:eb:
52:86:53:4d:a4:f9:65:dd:1d:9e:57:e3:72:9b:ea:27:d8:48:
9c:ce:0b:64:e3:64:fb:cd:51:91:f5:ff:d2:64:58:70:2e:7f:
19:d3:02:60:cf:ad:e0:d0:e2:4c:16:a0:11:8c:78:28:58:c6:
03:73:ec:a2:64:6c:05:f5:39:b2:68:b2:76:0e:85:a4:ec:37:
d1:b0:b5:cd:01:a0:d1:4e:20:6d:54:44:15:90:d3:e6:56:c2:
90:20:c0:fb:25:c5:91:ca:3c:51:64:fd:f6:1f:a2:6e:0f:1e:
36:42:7b:0d:e2:9c:ee:75:5f:4e:09:95:74:db:b2:b1:f6:75:
b5:ab:92:0e:c6:e8:61:a8:2c:eb:3e:15:7c:1d:59:00:e0:61:
6a:b4:69:3a:06:84:21:47:22:54:af:56:38:18:c8:11:dc:7c:
69:4e:c5:c7:53:ad:1f:b7:1b:35:05:99:4a:36:d2:7a:d9:3f:
6e:6c:ac:ce:d3:5c:d8:0a:ec:ac:f1:b8:a2:c0:37:9c:94:28:
e9:39:f7:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:26:32 2025 by rpki-client