Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/abad3fc4-19f2-378b-b7e4-8ec84d750389.roa
File: abad3fc4-19f2-378b-b7e4-8ec84d750389.roa (raw, json)
Hash identifier: Zlu1dveRRylsu7KcsB29MXulvEXbs2AOo2nRCDsdT3Y=
Subject key identifier: C6:5F:0F:53:2E:AB:3B:62:AB:0D:F6:C4:27:94:75:5A:FD:9D:AD:E3
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584800AFC5D42842A82C468C8980
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/abad3fc4-19f2-378b-b7e4-8ec84d750389.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 8069
IP address blocks: 20.33.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:c5:d4:28:42:a8:2c:46:8c:89:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=ba1fd1c5-b97d-4d96-b8ef-26845f30e64d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f6:a9:bf:77:22:35:61:d0:b2:2f:53:10:ca:
d2:4a:fb:d6:44:1b:44:cf:68:c6:a8:7b:1e:6c:9b:
92:e8:76:7c:92:82:56:af:9b:b8:bb:da:e4:19:50:
fd:5a:45:ab:35:b5:86:0c:62:fb:2d:0e:46:c8:bc:
bb:0c:14:c4:bc:59:4d:61:22:b0:f0:91:b1:d0:a0:
eb:c2:47:2e:ef:f9:63:23:87:a9:07:e4:d3:11:e9:
84:d6:8e:26:49:0c:0a:5d:fe:a4:07:ef:04:e6:33:
f5:de:36:e0:4b:02:7b:58:72:ef:ec:d4:76:32:06:
9d:ab:d5:0d:d6:ee:98:ad:81:83:51:63:f1:a6:0c:
f8:1c:10:e0:d8:9f:76:30:dc:5d:2c:15:55:85:08:
8d:4c:fd:c2:90:5b:f0:58:cf:63:7e:34:63:e6:8c:
d5:ef:f3:72:3b:eb:75:04:ac:91:5e:57:f5:ea:56:
97:28:75:7e:26:f5:1d:30:93:d6:e3:de:60:b3:33:
4c:bb:84:4d:89:3c:b3:25:bf:44:ed:33:88:0e:9e:
e4:b2:5a:1c:a2:e6:b2:0f:98:29:b8:a4:13:de:cf:
aa:e4:51:01:dc:a2:a5:0c:32:e1:84:79:16:a7:92:
89:f1:65:2e:a3:63:59:c6:4a:f4:08:70:ae:55:51:
41:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:5F:0F:53:2E:AB:3B:62:AB:0D:F6:C4:27:94:75:5A:FD:9D:AD:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/abad3fc4-19f2-378b-b7e4-8ec84d750389.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.97.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:bc:55:36:38:a9:3d:80:f8:1e:c7:91:7c:1e:fb:c2:b7:bb:
51:fa:5c:00:f0:8f:61:8a:25:a0:f4:d0:75:ed:ca:c0:34:3d:
63:33:85:06:92:ff:10:91:22:94:ee:e5:2d:d6:c9:f7:5f:67:
3f:13:bc:5b:52:73:79:68:92:71:82:78:ac:fc:70:0c:7f:33:
f4:6a:4b:a1:94:6e:d7:6e:80:6a:05:37:52:63:71:c5:70:18:
e5:f8:39:da:5c:72:65:aa:58:e8:fc:d6:7f:b4:fa:35:0f:be:
bb:2c:bf:5c:5e:65:11:3b:e5:b0:f8:02:a0:97:ea:81:ee:82:
f1:71:39:35:e0:fb:d4:28:fa:4e:0a:7c:8d:a8:4e:ea:ba:28:
54:94:3e:2a:2f:a7:92:84:c5:c4:48:22:6e:1f:70:72:85:c2:
fb:85:93:51:19:b2:c4:38:97:2c:9d:21:75:77:29:2d:0d:be:
f0:92:89:cf:68:53:85:c9:42:e1:1c:25:db:fd:a1:e3:73:ba:
70:12:73:d5:fa:45:e3:aa:c9:15:f6:b5:14:2f:69:37:d3:d0:
3d:b5:de:e2:68:eb:d8:29:af:5e:ab:b5:33:dc:96:22:5a:b3:
a7:dd:9d:e1:7a:ca:56:b2:78:3c:74:26:1c:16:25:05:0b:f1:
bf:26:29:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:26:48 2025 by rpki-client