Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/61731640-5c09-3c09-a962-0cd9bcfdf6ab.roa
File: 61731640-5c09-3c09-a962-0cd9bcfdf6ab.roa (raw, json)
Hash identifier: DMs2ldUwxUdHReBmCRPlYa7/Ia9yFlK27hzVr4ogLYk=
Subject key identifier: A8:DD:BB:85:17:03:EA:FC:38:56:BE:CF:82:93:AA:AD:AA:2E:8F:C1
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F432858481F653A19F0A2DF2DAE3EEC00
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/61731640-5c09-3c09-a962-0cd9bcfdf6ab.roa
Signing time: Sat 07 Dec 2024 02:00:39 +0000
ROA not before: Sat 07 Dec 2024 02:00:39 +0000
ROA not after: Fri 07 Mar 2025 02:00:39 +0000
asID: 8069
IP address blocks: 20.33.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1f:65:3a:19:f0:a2:df:2d:ae:3e:ec:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Dec 7 02:00:39 2024 GMT
Not After : Mar 7 02:00:39 2025 GMT
Subject: CN=3ee055eb-544c-4528-b014-fd5521c913e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:67:29:4f:95:ae:75:37:fc:d6:e0:63:0b:7a:
de:7d:df:9a:6b:f5:96:73:48:aa:19:d4:a2:85:a9:
22:1a:e4:4b:11:84:a6:3e:d7:5f:69:05:2b:43:12:
f3:41:75:de:c3:e1:00:a9:e3:c4:42:7e:e8:16:3c:
f6:ff:a1:9a:d5:df:63:c4:43:76:c7:36:70:87:23:
31:f3:8a:63:5b:83:68:5a:d6:f6:e6:f2:78:f5:70:
1c:b6:c5:17:e5:6e:c4:d1:8b:24:33:12:5a:86:05:
1c:53:27:3b:29:79:2d:b8:d6:9b:35:e9:37:37:2d:
df:66:75:94:43:20:f7:b0:4c:5d:4e:8c:60:9a:77:
6d:5e:c6:b7:a2:ae:8e:cf:32:50:25:20:cb:07:fa:
99:34:5f:2b:a4:d4:18:44:83:6c:61:a6:8f:7b:f6:
52:46:42:2e:0f:27:04:07:34:24:23:67:6f:48:1c:
97:6e:60:79:07:f8:7b:34:b7:b7:1e:0f:27:4f:80:
de:f5:ad:cf:d7:4d:8e:c6:5c:2d:0e:e7:9e:e1:73:
b5:19:82:fc:b8:22:ed:3e:76:22:eb:19:03:52:ba:
f3:40:8c:c0:8d:f7:13:49:76:5c:86:23:b0:ff:f4:
1e:3a:30:25:38:6a:7f:a0:c6:c7:b6:e0:50:d7:1a:
24:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:DD:BB:85:17:03:EA:FC:38:56:BE:CF:82:93:AA:AD:AA:2E:8F:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/61731640-5c09-3c09-a962-0cd9bcfdf6ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.29.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:37:74:7c:45:05:6b:51:ab:2e:d9:e4:4f:3d:2b:d5:38:63:
1a:ac:fb:5b:fd:ca:06:74:05:3a:cb:bf:b6:30:f7:cc:fb:c5:
29:e4:31:60:a5:0c:04:4f:9b:ea:d4:00:ed:5f:34:ae:c0:28:
b0:ac:14:81:ae:aa:01:a6:73:4f:90:5f:a0:d8:a7:36:86:d4:
e6:c7:bb:9c:02:1e:ad:87:24:a1:d7:ea:e8:55:b1:c4:25:c0:
29:57:c6:6e:0a:a6:8a:18:a2:21:a0:5c:01:d0:df:bc:2f:70:
e5:75:78:9b:b3:5a:f5:23:e9:85:d0:f4:de:0e:f5:48:6d:41:
35:4e:95:fc:24:f7:f6:f8:dd:e8:9a:67:34:19:3a:d5:b6:fb:
a2:3c:0e:d5:35:d3:6d:b6:ac:d2:76:a4:83:57:c0:6e:45:9b:
68:2f:53:ed:c2:1e:00:7c:17:73:48:c7:73:d2:2d:e8:c3:80:
ba:d2:9d:0b:fd:f8:0e:06:2b:12:1a:d5:d4:5a:99:0e:05:58:
9b:0c:f5:5b:a7:91:91:58:97:98:69:62:37:99:36:f4:e5:67:
e4:d9:75:57:31:76:a8:af:2c:14:0e:6f:87:c5:5a:32:ba:af:
e0:da:ab:5f:d6:28:ae:89:08:47:eb:dc:e2:3d:0e:97:c0:e5:
92:04:3b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:10:41 2025 by rpki-client