Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5c998ab9-7b2e-30d5-97fd-aa4335abb614.roa
File: 5c998ab9-7b2e-30d5-97fd-aa4335abb614.roa (raw, json)
Hash identifier: v4Mr524/xyEFkyCJX7zr/pw9oGgmMhcV+9C/KCNZpJo=
Subject key identifier: B5:4C:FF:48:A6:C9:87:0D:BF:3E:63:C3:96:36:AC:E3:17:16:FE:C7
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F432858486D906043E1F2E71983B5B500
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5c998ab9-7b2e-30d5-97fd-aa4335abb614.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 8069
IP address blocks: 20.33.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:60:43:e1:f2:e7:19:83:b5:b5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=0a1638bf-9596-478d-8e6f-e00f5abc6164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:35:85:9a:0a:ee:6c:b0:b8:54:5a:69:e3:5a:
ad:4d:52:6c:9e:f5:67:53:b3:5e:ce:66:98:2c:40:
62:93:ef:3d:a5:6c:2f:54:d6:b4:85:b3:67:25:53:
a2:4c:84:91:cc:97:c1:0f:ce:e6:5e:6c:99:17:f2:
53:a1:40:a5:ff:f2:a1:77:ad:aa:95:f8:da:84:9d:
a1:8e:8f:f5:d1:e9:6f:0b:69:02:10:ab:a9:7c:4b:
a1:c3:7d:e1:00:44:5f:43:77:1b:7f:01:56:53:14:
b6:99:d3:a4:30:97:f6:33:b1:9c:d6:49:17:a9:26:
c2:0e:7d:94:6b:5b:16:00:98:51:99:f0:9d:53:92:
34:61:1c:b2:00:79:a4:5d:af:93:f3:42:5c:c9:16:
a3:d4:de:42:8a:7c:bd:f2:d0:37:65:3c:43:2a:8e:
37:0c:e3:2c:67:01:b8:ad:80:f8:f5:60:4c:37:27:
a3:9a:0f:9a:24:40:de:f6:34:84:be:c7:3c:0e:c8:
1b:86:13:92:ac:00:54:7a:0c:9a:4f:49:47:ec:c7:
09:80:08:81:2a:77:fe:25:26:fe:63:92:2b:0b:6b:
b2:45:a4:12:1d:0d:1e:b1:2e:bc:6a:0e:d6:bf:45:
54:41:4e:9d:5b:bf:d4:09:de:fe:5a:d1:bf:2a:a1:
db:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:4C:FF:48:A6:C9:87:0D:BF:3E:63:C3:96:36:AC:E3:17:16:FE:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5c998ab9-7b2e-30d5-97fd-aa4335abb614.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.22.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:28:e5:ae:9a:2a:86:5e:b8:47:7a:42:76:44:6f:27:e8:fc:
e0:52:06:5f:d2:9c:8b:54:8f:08:5f:ad:6a:6b:a7:f6:c2:22:
ff:fb:83:22:8c:94:b2:dc:cf:c5:4a:41:09:3d:9d:a7:88:ea:
a3:f3:74:95:ff:ec:53:4d:db:0e:ff:ca:68:aa:59:b4:8d:48:
1a:8c:28:87:f1:26:1d:98:f8:a7:e8:77:c7:07:8d:4f:bc:12:
b2:6a:cf:1a:b1:86:dd:bb:29:fa:15:af:1b:8e:c3:14:57:81:
c5:b4:e4:74:6f:28:29:9b:d9:bb:6c:d2:db:e8:5d:7a:e0:f3:
f4:93:bb:97:55:59:08:89:df:ae:6e:7b:77:14:fc:19:6c:d6:
a3:78:7a:f8:23:57:a8:26:cc:a9:96:21:9b:2d:5f:fd:dc:2b:
4d:6c:f3:6f:85:b2:cb:81:b6:00:cc:4f:7a:00:69:b2:30:2b:
9d:85:44:0d:8f:03:94:30:5b:b8:3a:d8:c3:7f:48:59:91:0a:
e4:fc:c4:c8:8f:8e:78:a0:7b:a4:db:05:0a:24:32:1a:75:77:
1e:86:63:27:63:20:30:28:21:c1:17:7c:bd:2b:b4:0f:48:49:
f2:8d:3d:bf:90:43:cd:af:22:a1:a3:2c:0c:04:e5:fb:55:12:
66:c0:3a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:26:26 2025 by rpki-client