Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7f3bb12b-7691-3244-85b0-12d5ab6db9f6.roa
File: 7f3bb12b-7691-3244-85b0-12d5ab6db9f6.roa (raw, json)
Hash identifier: T+PSxJ2DSCulDlNI7DuE9YPclD/lSk1bkdPf8IvOIiw=
Subject key identifier: 23:1A:5B:B8:5A:FF:05:BE:66:B9:8F:B4:63:A1:33:96:D1:48:76:F9
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584855D5A3465A0874C8C5C44500
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7f3bb12b-7691-3244-85b0-12d5ab6db9f6.roa
Signing time: Thu 26 Dec 2024 14:00:52 +0000
ROA not before: Thu 26 Dec 2024 14:00:52 +0000
ROA not after: Wed 26 Mar 2025 13:00:52 +0000
asID: 8069
IP address blocks: 20.157.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:d5:a3:46:5a:08:74:c8:c5:c4:45:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Dec 26 14:00:52 2024 GMT
Not After : Mar 26 13:00:52 2025 GMT
Subject: CN=544ca1c1-2df9-4c5c-a8e1-dd087f6a3b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:39:0e:f9:be:b8:71:15:66:f3:f5:03:30:63:
3b:80:e4:41:bc:a2:69:0f:48:a0:20:63:a8:e1:5d:
a8:e8:df:00:d0:a6:d1:99:e9:e5:f6:84:6c:26:a0:
dc:4e:12:b8:7f:b6:67:6a:3e:1b:69:a6:62:4d:ef:
94:d3:9d:28:b0:47:d0:c9:bb:76:8f:e7:e4:28:80:
08:2e:49:f7:0c:7c:f2:ca:91:45:87:33:b0:6d:d1:
39:54:0a:70:65:86:a2:39:ed:03:eb:f6:77:5b:4e:
2f:b8:61:5c:be:df:1d:14:ba:bc:b4:e4:a2:70:3c:
03:35:cc:f9:4e:28:d3:8c:e5:96:1a:19:27:a6:f3:
40:41:ee:63:99:0f:ff:ad:c6:1c:61:65:86:99:e1:
6f:de:6b:46:99:a4:da:4a:d6:32:9e:53:f2:93:cf:
a9:f7:36:2e:f1:02:49:96:23:2c:dd:28:92:9b:24:
79:3e:3c:f4:50:5d:51:56:c6:da:78:84:66:21:ca:
c0:09:5c:78:0f:9c:c3:c9:da:0f:5c:7e:d6:77:5e:
06:71:22:83:77:9e:32:6b:5a:3b:96:bf:a3:7c:ec:
d1:17:c6:ed:f8:d3:4e:3c:e0:d0:26:2f:a2:b9:14:
6f:27:6f:93:07:3e:df:2f:de:f3:bd:cf:5e:94:3c:
ff:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:1A:5B:B8:5A:FF:05:BE:66:B9:8F:B4:63:A1:33:96:D1:48:76:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7f3bb12b-7691-3244-85b0-12d5ab6db9f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.157.247.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:ca:a2:97:7b:3f:b7:21:f9:61:17:38:e0:f9:e8:ba:13:5f:
0c:83:33:97:89:91:75:9f:72:30:97:92:e5:bd:34:05:54:00:
53:26:fa:48:76:71:22:d5:ba:b9:0f:6d:05:aa:c5:2b:be:10:
65:8d:c4:67:ea:dc:7a:b2:01:70:8d:cd:01:60:e2:3e:e4:e9:
b6:ea:37:2e:6e:73:6b:9f:02:2a:93:e9:24:f9:60:5f:b3:b0:
0f:18:8b:15:e1:b7:3a:0f:c8:1d:4f:b4:9a:86:60:69:16:21:
60:15:ba:cf:20:f4:59:7d:8f:8e:b5:64:e9:4e:d4:d9:01:24:
95:d8:36:77:f1:46:39:3d:7c:23:eb:73:6d:3d:d0:cd:9f:81:
f2:e8:30:ef:7a:53:7e:d1:75:60:50:a5:2a:6a:76:a8:eb:cf:
53:36:31:73:38:03:ad:f2:4e:f9:84:8a:76:af:de:73:58:9b:
ca:1e:e2:c9:8c:16:11:d5:e7:70:8f:33:35:c2:9a:93:67:d6:
f8:e4:5c:36:b1:62:b4:c6:a2:24:fe:4f:6c:9e:d2:9d:de:d2:
9a:5f:59:f5:b8:28:bf:49:e0:2b:62:b4:8d:e2:17:35:fa:4c:
22:72:c9:fa:33:bc:6e:c3:e5:2c:c8:10:af:fc:ba:5d:56:a8:
87:7a:55:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:19:03 2025 by rpki-client