Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b12175cf-2702-3731-83e8-14996dac56a9.roa
File: b12175cf-2702-3731-83e8-14996dac56a9.roa (raw, json)
Hash identifier: 93LZU3lMzBaCtf7DbjQpwS7559QLwq28LS8XglQtmko=
Subject key identifier: 5B:EF:19:CC:66:D6:8A:6B:50:07:D1:90:2A:4B:00:D4:EC:13:01:58
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584806450CD2467E63103CF2D7A0
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b12175cf-2702-3731-83e8-14996dac56a9.roa
Signing time: Thu 28 Nov 2024 02:00:38 +0000
ROA not before: Thu 28 Nov 2024 02:00:38 +0000
ROA not after: Wed 26 Feb 2025 02:00:38 +0000
asID: 8069
IP address blocks: 20.33.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:06:45:0c:d2:46:7e:63:10:3c:f2:d7:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Nov 28 02:00:38 2024 GMT
Not After : Feb 26 02:00:38 2025 GMT
Subject: CN=972c9431-b720-474e-a90d-8abdbbe7dfcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:37:39:e3:e8:ce:41:a3:81:9e:8d:0c:8f:2d:
c4:d5:05:1d:10:1e:0c:e1:68:4e:83:14:98:e8:ff:
78:00:20:9f:97:ea:3c:d8:3b:3c:9a:92:e8:08:99:
90:a5:27:8d:e0:24:f0:51:9c:1a:f5:91:16:17:b7:
d0:95:c4:e1:fc:76:97:30:b0:2f:5b:d1:74:a2:26:
d5:55:cb:57:fe:aa:df:a1:1a:07:89:32:db:0a:9d:
cd:6b:4d:6b:fe:bc:5f:f5:df:66:19:c4:fa:d3:f8:
5f:34:c6:10:50:ec:13:ec:6b:e4:aa:4a:cc:4e:39:
11:af:2e:54:82:4c:02:a7:58:c5:b8:39:ac:c5:a9:
45:9d:35:c6:c9:84:ad:88:ec:ea:b8:b9:57:c5:6c:
7e:f0:e7:4a:80:66:83:b2:30:20:60:dc:e6:d6:25:
81:4f:e2:a8:35:e6:47:5d:bb:7b:ee:17:d3:1d:b5:
49:b9:69:7c:50:9f:eb:86:79:d1:e6:49:ab:62:52:
7a:19:42:5a:88:88:63:52:26:d5:89:2d:3e:f8:71:
00:f9:d8:38:71:14:da:ea:66:f4:10:10:5b:f8:63:
82:17:bd:33:73:d4:c5:13:75:47:09:c8:16:e3:6d:
e5:71:a4:8d:3b:64:3b:94:2a:1d:15:13:2c:9c:7a:
71:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:EF:19:CC:66:D6:8A:6B:50:07:D1:90:2A:4B:00:D4:EC:13:01:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b12175cf-2702-3731-83e8-14996dac56a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.219.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:7f:d9:00:61:66:c0:ab:6a:56:d4:53:d8:26:48:fb:65:bb:
e1:1f:25:1b:a1:02:1e:23:1c:14:06:c5:47:bc:8f:2a:48:76:
80:cc:12:78:69:93:22:c2:d9:e5:bc:cf:10:72:90:bb:0b:c1:
1f:a5:b0:c0:0f:1f:03:ad:a3:29:e6:9d:07:a4:78:89:b2:d0:
dc:8e:4a:b9:62:71:92:47:6b:1c:92:6c:1d:08:7a:00:6e:df:
a3:b6:56:23:94:bb:22:2a:92:f9:a2:ec:4b:c6:59:97:dc:d8:
da:09:ea:0b:6d:b6:8a:58:58:06:3f:9a:5f:db:8f:06:98:e2:
63:60:d8:a2:9e:30:27:af:0e:e4:4a:22:58:bd:22:9b:b6:d3:
45:b5:75:58:2b:07:a6:79:c0:e9:c8:3b:da:94:73:28:c9:d4:
29:6f:ac:ab:9f:94:fa:58:53:19:f9:6e:7e:c1:8c:c8:80:3a:
34:fe:06:d3:ec:08:f7:dc:d4:7a:e8:69:b6:5f:e2:a3:99:40:
da:f2:fd:20:73:0c:3e:bc:31:e6:0f:33:d0:f3:98:c6:fb:b3:
35:b9:37:da:82:a6:21:a3:fd:6e:d7:9b:cc:85:5f:56:1d:eb:
cf:7a:cd:83:46:9e:72:d5:43:7d:e8:e3:ca:b8:5c:d1:05:c1:
d7:d0:3a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:55:43 2025 by rpki-client