Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/67363bc5-afc2-3ebd-99c4-8fe80b1aaef3.roa
File: 67363bc5-afc2-3ebd-99c4-8fe80b1aaef3.roa (raw, json)
Hash identifier: PvxJLAXUth73Iz9Bqhoj8f8M+lKeP164g5igOHobgHE=
Subject key identifier: E5:B0:C4:CE:E5:6C:48:74:F6:E6:D9:32:6C:FA:D8:6F:A3:C5:BD:33
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F43285848562F30756DF8BF3D763C8D00
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/67363bc5-afc2-3ebd-99c4-8fe80b1aaef3.roa
Signing time: Thu 26 Dec 2024 17:01:29 +0000
ROA not before: Thu 26 Dec 2024 17:01:29 +0000
ROA not after: Wed 26 Mar 2025 16:01:29 +0000
asID: 8069
IP address blocks: 20.33.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:56:2f:30:75:6d:f8:bf:3d:76:3c:8d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Dec 26 17:01:29 2024 GMT
Not After : Mar 26 16:01:29 2025 GMT
Subject: CN=caa5b453-66ef-4a9e-802c-b7d6531b56eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:2e:94:c2:7c:c7:8f:59:62:c8:02:ec:05:b9:
80:bf:4b:2a:95:49:f3:33:30:b1:8b:19:37:5a:27:
38:60:d5:d3:d4:fc:b7:21:15:cc:5d:e0:21:4d:76:
6a:88:89:26:86:48:1e:d2:d7:73:2c:87:0d:87:9a:
f3:a8:4f:b4:13:d3:77:cb:1b:67:bd:a8:ce:93:64:
97:ff:6d:6c:05:40:0e:82:f6:41:7f:9d:60:f9:bb:
66:f9:6d:78:72:62:9a:e5:77:52:cf:dc:da:8d:ec:
6f:14:73:0d:fd:e1:ca:61:f2:df:5d:e7:96:52:96:
48:5f:42:bd:fb:5a:06:ff:e4:dc:f9:ea:d9:54:81:
59:f4:e8:6a:cd:ef:7d:a7:b3:f3:5e:0c:c5:9c:c0:
11:d3:4f:fd:f6:6a:e5:cb:d4:50:34:bd:ed:3b:07:
e3:ea:31:48:64:5a:88:32:fc:57:c5:16:28:b9:ba:
a4:30:bd:10:a2:70:00:96:5c:4d:07:4e:0a:5e:09:
77:6b:2b:70:bd:95:48:8a:71:7d:ba:5d:01:e9:4c:
bc:66:ca:ed:c1:c0:9d:26:f9:41:0f:c5:4e:9a:73:
cd:f1:0a:5a:62:eb:32:41:c3:35:d0:47:8b:05:62:
74:88:a9:09:1e:a1:5a:03:86:7a:2e:66:ad:b8:e1:
fb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B0:C4:CE:E5:6C:48:74:F6:E6:D9:32:6C:FA:D8:6F:A3:C5:BD:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/67363bc5-afc2-3ebd-99c4-8fe80b1aaef3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.117.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:46:22:be:31:84:24:44:cd:56:bc:cf:92:55:b1:4d:29:78:
66:b6:a3:e1:28:55:27:8b:33:ec:16:c0:be:2a:89:e5:e2:40:
64:a1:45:cd:6b:1f:bf:e3:86:98:6c:30:8c:04:ed:59:af:6b:
b2:88:59:ef:d6:b9:96:b3:7d:5e:10:a0:93:22:11:53:07:4a:
01:8b:16:9e:9d:6a:02:93:3f:d6:1b:bf:37:12:6a:d1:10:e5:
9c:b4:73:02:53:96:f9:2c:7b:22:4f:63:63:94:3b:91:7b:e9:
9c:a8:0e:14:65:02:a9:64:c3:a6:40:44:03:0a:7c:6e:03:34:
f2:85:c3:da:40:73:84:e1:5e:66:2d:9b:dd:41:e1:d4:70:b2:
08:d9:6d:1b:c3:9f:d6:88:50:0a:80:2d:16:8b:e9:d7:f3:1d:
87:2e:3b:3e:28:5d:37:9c:74:cd:37:15:9b:4d:af:1a:00:89:
f0:df:a6:fe:27:e5:c8:7b:34:ff:d9:20:90:63:e4:63:b5:b9:
8d:c8:8b:cb:24:6a:00:61:2d:76:12:63:bc:cd:19:da:08:69:
0b:ca:a3:59:c5:a6:3c:2e:3a:69:84:74:71:dc:73:d5:82:27:
58:2a:16:ac:80:a1:22:1d:af:5d:18:32:1c:22:8e:ff:a6:dc:
14:88:95:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:13:12 2025 by rpki-client