Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7b5ac41d-84f9-3c65-bed3-c388701dbf1d.roa
File: 7b5ac41d-84f9-3c65-bed3-c388701dbf1d.roa (raw, json)
Hash identifier: kzyG73SFbdq1c9L8UhtdUXXpgGq0PyDUhcSzRsEobRE=
Subject key identifier: ED:93:AE:19:36:D3:72:F0:97:CF:B5:27:F4:2F:4B:94:12:B1:CA:48
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584867FAEBB106525BFE159DEC00
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7b5ac41d-84f9-3c65-bed3-c388701dbf1d.roa
Signing time: Thu 02 Jan 2025 02:00:39 +0000
ROA not before: Thu 02 Jan 2025 02:00:39 +0000
ROA not after: Wed 02 Apr 2025 01:00:39 +0000
asID: 8069
IP address blocks: 20.33.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:67:fa:eb:b1:06:52:5b:fe:15:9d:ec:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Jan 2 02:00:39 2025 GMT
Not After : Apr 2 01:00:39 2025 GMT
Subject: CN=f05efad2-be33-4e2f-99be-18445bc45447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:66:3b:26:b6:14:55:0c:ee:01:bb:b0:39:c0:
84:6b:b0:c4:d8:dc:85:31:90:2e:19:ec:1a:f9:7a:
a4:09:10:a6:02:e3:15:76:f4:bd:3f:71:f5:75:1a:
28:4f:71:df:2c:08:98:c8:9c:da:5c:c8:88:0f:5d:
bd:6c:9e:80:8d:fb:bc:49:92:9a:32:b5:f8:65:29:
16:8c:8c:48:92:de:41:6a:39:bd:eb:95:da:32:fd:
14:2f:1a:81:e2:0c:eb:83:73:df:6b:e6:2d:40:44:
43:2f:96:21:f7:56:7a:a9:5a:23:a6:9a:78:c6:99:
e0:0c:51:d2:3b:74:b7:f5:7f:d6:6d:7b:b9:72:c2:
8c:05:1f:93:db:03:a0:aa:b7:7c:59:53:58:3f:92:
e0:98:d5:77:22:88:44:71:0a:75:a3:8e:4a:c6:a1:
fa:b9:02:03:ab:3f:8a:21:7d:13:de:31:c5:27:f5:
95:76:5b:fb:66:77:bb:41:a4:8a:45:41:77:7d:39:
79:9c:bd:69:73:55:84:80:42:c1:af:c8:41:6e:34:
a6:0a:1f:97:80:eb:a1:53:d8:11:d3:ae:14:d8:53:
3b:1a:b6:e9:ba:a9:1d:9f:32:08:5a:55:22:c9:96:
f8:15:10:bd:dc:37:f2:14:6f:69:dd:89:d9:61:a6:
dc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:93:AE:19:36:D3:72:F0:97:CF:B5:27:F4:2F:4B:94:12:B1:CA:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7b5ac41d-84f9-3c65-bed3-c388701dbf1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.80.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:4e:9e:32:68:f4:55:a2:e2:73:ad:86:93:a4:08:ab:48:8e:
e8:12:3b:22:4a:87:e7:f9:9a:75:4c:46:5f:f2:23:b2:aa:a7:
e9:f9:e0:9f:2f:5a:f4:3d:d6:9a:43:38:cc:0c:23:26:f0:38:
55:60:f5:d0:c1:00:53:bb:7a:23:e5:f5:0c:40:3e:e8:7b:f9:
94:4a:ef:28:b0:6d:60:35:ed:7f:16:8a:a0:af:06:fb:53:31:
ca:fd:47:b3:50:a4:5b:90:bc:ad:e1:4c:b7:e4:cd:66:1d:c4:
66:c0:a7:31:4a:bb:6e:b5:9a:02:f1:01:08:e1:af:5c:0c:ca:
b0:d5:18:db:1b:4b:09:a2:0a:37:a5:69:8b:ed:26:45:aa:60:
1f:7b:ef:fb:88:a0:37:a3:04:05:c0:79:0b:1c:74:a8:b6:27:
12:b6:e9:3c:fc:d9:d2:0f:62:84:8e:77:ce:88:6a:eb:67:c8:
78:9f:ac:38:2e:28:c5:13:03:f8:52:a8:54:68:bc:61:61:85:
04:67:29:4c:96:34:a7:80:75:98:d5:c6:c2:26:0c:77:7a:7b:
39:4d:7a:d1:4f:0f:ae:f7:77:3d:6b:8d:22:79:1c:ee:85:ba:
72:a8:2c:fa:ca:d5:ad:01:2b:c8:f4:bd:eb:8b:98:05:0d:d7:
18:49:09:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:19:19 2025 by rpki-client