Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ab2d246d-a182-371a-bc59-9c907d654829.roa
File: ab2d246d-a182-371a-bc59-9c907d654829.roa (raw, json)
Hash identifier: CyrTieNFjEDTGP2+/kbuX3PDuoGloU5DnZyUopD3M7E=
Subject key identifier: 10:1B:BF:A0:C1:1B:81:BB:1C:B5:34:E3:20:E1:4F:63:48:56:C0:A5
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F43285848562F3E9BBDF259B962606C60
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ab2d246d-a182-371a-bc59-9c907d654829.roa
Signing time: Thu 26 Dec 2024 17:01:36 +0000
ROA not before: Thu 26 Dec 2024 17:01:36 +0000
ROA not after: Wed 26 Mar 2025 16:01:36 +0000
asID: 8069
IP address blocks: 20.153.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:56:2f:3e:9b:bd:f2:59:b9:62:60:6c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Dec 26 17:01:36 2024 GMT
Not After : Mar 26 16:01:36 2025 GMT
Subject: CN=ca254126-57fa-41eb-83a1-5553f0b39fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6f:ac:6f:57:5e:f3:31:49:a0:7b:4b:ca:91:
ec:28:4e:33:b5:a1:95:bc:93:eb:40:86:9b:ab:e7:
0a:9d:91:ea:a6:87:b3:76:52:b5:dd:bf:98:b3:37:
e8:4f:68:1b:51:d4:32:20:b2:40:38:ca:ba:1f:64:
12:51:a1:3c:b5:17:fa:7c:45:3e:de:e0:5e:fb:50:
d0:97:b7:2e:45:43:a9:6d:52:e5:ed:e2:23:cc:ef:
2f:8d:13:a5:97:d1:e0:77:cc:d9:e1:c3:31:a4:ed:
02:0b:29:fd:ee:87:4d:23:2e:72:53:51:80:f4:b9:
8d:c8:fd:2c:ce:12:d9:cd:02:f7:c8:71:14:ee:cb:
d6:d1:34:e9:6f:4e:c7:59:31:7f:6a:f0:1c:5e:ae:
f6:84:00:ed:96:2e:bd:e2:24:ab:06:8b:22:10:64:
d2:e3:d6:aa:31:0f:66:b9:40:94:f9:56:ed:3f:26:
b3:8a:1e:81:34:18:f6:d4:16:2a:61:ac:a5:b2:e7:
c6:ed:3d:b6:8e:c3:66:9d:30:68:05:bd:44:d4:77:
09:40:27:51:2b:7d:62:b1:1d:75:ee:56:13:7b:ec:
c5:b8:2c:fa:6c:23:03:0a:51:c5:e9:4c:98:1e:c5:
8c:32:64:a1:f0:d8:4b:aa:67:66:97:00:b9:41:cb:
cb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:1B:BF:A0:C1:1B:81:BB:1C:B5:34:E3:20:E1:4F:63:48:56:C0:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ab2d246d-a182-371a-bc59-9c907d654829.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.153.35.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:85:d1:4a:33:a8:00:a3:2b:17:82:7f:68:05:a9:06:72:53:
58:17:1d:36:9b:bb:39:d9:85:5e:f0:9a:73:89:a1:04:cc:18:
26:7f:a1:33:2f:94:f0:fa:06:04:64:3c:88:bc:20:98:a3:e5:
99:28:7a:5c:2d:15:5f:98:57:9b:7f:a8:0a:e1:85:38:ae:21:
d7:d3:13:e5:15:79:59:85:ff:bc:43:ea:5f:29:85:24:04:88:
59:65:20:e3:74:3c:25:1f:28:ff:4b:1b:99:f6:f5:24:29:0e:
20:82:3c:62:52:8a:47:8e:04:fd:08:37:b7:aa:16:af:c2:77:
c6:00:a6:cc:3e:0b:dd:8d:7a:87:0f:f4:0f:dc:53:92:42:ca:
e9:99:53:a3:20:c4:a8:82:69:f7:a1:c2:33:d9:56:0b:97:64:
d6:e7:8c:0d:82:be:70:4a:8e:28:69:ec:af:a3:91:61:48:85:
6d:c0:0b:9d:4a:1a:e7:88:9b:55:c2:1d:37:93:3d:35:d2:26:
bf:43:f9:b6:98:0a:2f:be:f9:e7:66:90:17:d0:3a:ac:09:8a:
59:fb:b1:a4:e6:94:76:1b:04:31:a4:5c:da:41:65:c1:f2:cf:
94:6a:81:78:c0:e3:cc:51:70:05:77:60:35:e4:94:dd:76:2a:
5f:0d:ca:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:17:03 2025 by rpki-client