Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9e18dbd4-209d-35dd-82a3-839e83821d7c.roa
File: 9e18dbd4-209d-35dd-82a3-839e83821d7c.roa (raw, json)
Hash identifier: 2VWkjsE2+yOzrqRCSqphZ5vhohCaSLKFwQzr4qquif0=
Subject key identifier: C9:FF:2B:79:04:B6:69:19:A1:5A:E6:57:91:1D:32:5F:5C:0D:D8:81
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F432858486530439F45F0A3925DD57300
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9e18dbd4-209d-35dd-82a3-839e83821d7c.roa
Signing time: Wed 01 Jan 2025 02:00:40 +0000
ROA not before: Wed 01 Jan 2025 02:00:40 +0000
ROA not after: Tue 01 Apr 2025 01:00:40 +0000
asID: 8069
IP address blocks: 20.33.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:65:30:43:9f:45:f0:a3:92:5d:d5:73:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Jan 1 02:00:40 2025 GMT
Not After : Apr 1 01:00:40 2025 GMT
Subject: CN=a2fd5610-3727-4443-a377-653202387699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f8:ee:76:99:b6:f0:e1:ba:32:5f:8c:34:b5:
01:3e:28:22:11:e1:7b:13:7e:58:c8:d2:1a:04:bc:
e0:71:88:2a:39:31:7e:3d:e1:f8:4e:d7:6f:a8:2a:
70:c2:b5:41:60:08:ef:83:ef:ff:c2:b2:90:a5:03:
a3:88:89:26:34:80:e0:b6:6d:95:f6:2c:c4:7a:eb:
b2:fb:4c:cf:19:e1:1a:87:0e:ff:b1:e0:f7:97:4b:
49:95:78:fe:0c:55:2b:5a:d2:c7:ca:a1:05:d7:d8:
37:a6:a5:58:69:6c:5d:9e:69:08:72:94:c3:77:2d:
ec:f6:0f:1c:a8:2b:61:52:f8:43:fe:7f:d8:e6:5a:
ee:9e:32:77:01:00:bb:76:87:f8:62:c1:6a:5c:77:
47:d6:ff:76:b5:46:06:f3:30:ba:06:d2:53:00:11:
9c:ca:15:6f:59:41:fb:0f:90:08:23:5a:0d:f4:fa:
b1:90:c5:8a:42:60:d7:39:1f:8d:74:97:86:46:58:
5f:57:91:ff:89:e1:bb:a4:ab:06:8b:d3:df:fc:e9:
7a:07:14:11:ab:54:e9:6d:e7:a8:b8:56:f8:d3:28:
d2:80:cc:df:f8:a7:12:d2:e8:3e:e2:29:41:2b:56:
8b:5d:d4:34:3b:da:77:76:b0:df:c5:a4:cd:ab:21:
04:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:FF:2B:79:04:B6:69:19:A1:5A:E6:57:91:1D:32:5F:5C:0D:D8:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9e18dbd4-209d-35dd-82a3-839e83821d7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.207.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:98:33:4b:66:1e:c4:8f:12:66:f3:ad:4f:cc:bd:52:a3:49:
77:eb:74:54:37:93:89:cc:3d:b2:d3:f1:ae:92:c2:2e:0e:5b:
9a:85:8d:04:f2:ff:34:a3:3d:d7:a0:e9:3c:98:e0:42:52:06:
c5:22:37:ec:27:40:96:d9:22:e5:9f:f2:cc:b8:4a:6f:fa:0b:
a5:b7:32:85:a1:e4:cc:a7:b6:13:52:5c:27:e5:52:1e:da:85:
6d:96:fa:7b:14:d6:1d:26:02:64:5c:15:9a:c1:46:e3:81:b4:
e9:71:6c:2b:00:44:ab:2e:10:9d:79:3c:85:c4:17:84:de:7b:
b5:c7:c5:63:06:25:62:77:56:36:aa:11:fe:b2:23:9b:95:97:
c2:6b:75:76:17:5b:e4:7b:e2:9a:b0:40:2d:8e:e9:1d:7f:a1:
75:49:40:2a:2b:a7:60:dc:31:bd:e0:59:23:4d:68:af:55:07:
71:8d:43:8b:bd:de:49:37:77:df:50:6e:88:de:e4:09:96:2d:
3a:a7:0d:5d:e2:2f:cc:32:f3:c9:54:49:96:65:64:84:35:57:
9f:e6:f4:cd:12:e6:6b:ee:2a:0d:a1:2c:d9:57:b6:c5:60:55:
f6:06:5a:44:50:c2:e6:c5:29:6c:2d:0a:a4:54:00:10:54:d6:
00:81:ac:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:10:52 2025 by rpki-client