Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/78718e56-794a-397d-80d6-334e9fd3e89d.roa
File: 78718e56-794a-397d-80d6-334e9fd3e89d.roa (raw, json)
Hash identifier: nTEHxZiN+hV7kI3g34ke+jOHrMJbHDPwVfF2hbwGRdQ=
Subject key identifier: 14:98:8F:4C:2D:A9:4F:98:62:5E:94:09:43:33:7E:B9:03:9B:AF:03
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584800AFC5E23ADE0646C14A7980
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/78718e56-794a-397d-80d6-334e9fd3e89d.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 8069
IP address blocks: 20.33.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:c5:e2:3a:de:06:46:c1:4a:79:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=89a8dbc1-2e7b-403b-804c-c9c2e1507d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d8:20:72:26:30:a7:1c:4d:5b:65:88:2a:cd:
02:68:c8:a0:bf:bd:c9:0f:f5:d0:df:06:8d:e7:4e:
df:0f:05:d9:1b:b0:20:b3:d3:a2:58:fb:c7:52:3f:
b0:d2:70:9b:3b:98:12:82:cf:28:de:9c:c0:57:11:
47:ec:88:a9:d2:7e:3b:d2:02:e5:e5:3a:4f:84:4c:
e8:52:5f:ab:03:ff:bd:be:f4:1f:f6:59:c9:49:91:
ee:f3:09:7e:14:7c:d0:50:36:8c:6d:23:26:c6:1b:
d6:c8:69:2e:62:4d:cf:7e:0d:e7:32:67:67:5e:fd:
0a:5b:64:ae:31:08:fb:85:dc:64:76:10:bb:68:2e:
5b:9b:ff:b9:17:96:0b:d1:f7:06:94:a7:9a:cc:33:
fd:83:9a:f1:b6:45:d6:1d:ce:63:a7:5c:32:c2:9a:
25:a0:ca:2a:a2:e1:60:2a:71:fe:3b:e6:a1:60:44:
ef:4b:7a:24:43:04:a6:73:83:6c:23:08:90:5d:ba:
cf:73:d1:3d:c2:a4:f2:da:e3:3f:1d:7f:89:60:31:
89:92:65:63:1c:44:97:9b:a1:1d:9c:ab:5a:82:9d:
fb:3d:3f:b7:60:55:d0:3f:62:09:05:aa:13:de:a6:
99:55:3f:87:db:02:02:74:ed:ba:cd:24:be:a1:1d:
24:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:98:8F:4C:2D:A9:4F:98:62:5E:94:09:43:33:7E:B9:03:9B:AF:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/78718e56-794a-397d-80d6-334e9fd3e89d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.99.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:83:bd:f2:d5:f5:61:74:b4:52:e4:32:77:44:07:fe:11:ff:
20:f0:c8:f3:44:47:bb:2a:ce:15:fe:47:5b:df:ee:e0:75:06:
24:24:7f:28:9d:3d:cf:6a:8f:4a:3d:29:b0:f6:27:8a:5a:d7:
7d:3e:64:ca:f6:65:85:d0:0f:39:5f:c1:9c:52:2f:04:fe:e0:
2e:21:ea:23:fa:b5:da:75:8d:f1:53:9c:0e:c7:ca:e0:25:e6:
f8:f4:ff:5f:aa:71:b1:03:6b:d1:79:ee:bb:0e:f7:fc:ca:9a:
0c:44:6a:bb:32:a6:42:e4:39:af:dc:3c:39:66:5a:70:53:2c:
f1:bf:7d:17:50:f2:59:37:fb:8e:ca:74:15:10:81:81:c0:e6:
87:6c:52:d5:b6:ad:99:f0:da:7e:4d:70:95:64:6e:a2:6f:1b:
1a:56:54:1f:6c:e4:01:c8:11:7a:42:0d:08:e1:d0:78:69:2f:
13:ef:f3:24:01:54:12:e9:75:e7:65:61:fa:10:6a:0d:44:61:
c8:51:e4:c4:53:4c:4a:86:c3:7a:50:1d:f1:ca:87:a9:5a:10:
7a:2a:c5:d8:9b:67:bc:9d:0e:49:df:c2:8a:b7:69:b7:a1:01:
aa:ff:90:6f:07:03:2b:24:92:bf:41:8c:89:da:75:8a:29:7f:
4d:16:9f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:35:53 2025 by rpki-client