Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b500f9ea-1f0a-3934-963e-3f57b3b70047.roa
File: b500f9ea-1f0a-3934-963e-3f57b3b70047.roa (raw, json)
Hash identifier: 8OQfQUDqVRlL1isArnpM41LDH6J1DVfFieKjTNO0C6E=
Subject key identifier: B4:7D:08:EA:6C:49:91:3C:40:62:19:6F:AF:9E:15:94:3F:B3:5C:8B
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F43285847FB1A2A87E120ADBD69F91380
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b500f9ea-1f0a-3934-963e-3f57b3b70047.roa
Signing time: Sun 24 Nov 2024 02:00:27 +0000
ROA not before: Sun 24 Nov 2024 02:00:27 +0000
ROA not after: Sat 22 Feb 2025 02:00:27 +0000
asID: 8069
IP address blocks: 20.33.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:fb:1a:2a:87:e1:20:ad:bd:69:f9:13:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Nov 24 02:00:27 2024 GMT
Not After : Feb 22 02:00:27 2025 GMT
Subject: CN=ffc1c62e-44e9-4359-a1fc-607d57b1e655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:80:8f:70:78:35:15:e3:30:bc:af:33:72:f0:
54:a0:dc:ac:6b:51:2a:2e:04:ec:f3:ab:b9:1e:d5:
39:7b:39:d2:25:a1:46:55:6d:9e:21:3a:ad:85:6c:
e2:e6:fb:b0:f2:f7:44:d9:99:dd:da:22:65:d3:a3:
e0:0d:ff:e4:e7:e7:04:6b:16:d8:9e:95:02:5a:da:
18:a9:28:ef:83:83:e0:d7:34:c5:17:c3:06:37:20:
f7:f0:64:36:43:a9:ff:ed:24:16:d1:9c:4b:43:0f:
32:38:ee:f4:e6:10:a7:f6:0a:c1:81:68:84:36:64:
4d:a0:ff:37:3c:05:e8:2a:8b:f6:c4:ad:ed:2f:8a:
1e:f0:27:ea:2e:fb:13:09:a9:63:86:73:28:36:40:
db:91:a6:be:9a:ce:64:c1:cb:82:94:db:06:e5:ae:
8d:25:85:0f:7e:75:bc:c8:0a:fb:a4:02:94:db:47:
4f:65:9e:44:04:27:5e:6a:b1:43:0e:16:f7:96:bc:
7c:12:16:be:9a:8c:d6:ff:19:d8:c4:fe:4a:e3:c4:
b0:f2:ec:b7:c1:72:d3:cf:9a:12:83:f0:2c:c6:1f:
bd:ce:a9:e8:15:81:55:8c:4b:34:b5:df:02:36:ba:
16:49:b9:8e:12:c3:f9:d1:03:a1:93:62:56:8a:f8:
eb:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:7D:08:EA:6C:49:91:3C:40:62:19:6F:AF:9E:15:94:3F:B3:5C:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b500f9ea-1f0a-3934-963e-3f57b3b70047.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.17.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:60:8e:57:ba:6b:3f:09:96:c8:3f:9d:b9:ed:9d:6d:0c:e0:
3a:57:54:51:60:27:1f:49:10:01:13:df:88:29:d4:86:a7:12:
70:d0:d5:c9:50:93:bd:5d:9a:43:a2:96:c7:34:a7:8a:82:7d:
4d:a9:48:d7:28:18:68:92:fe:16:66:d8:49:69:63:fd:92:fe:
bd:31:23:dd:7f:79:eb:51:93:ba:4d:dd:52:73:71:65:8b:ef:
f3:31:d5:53:bc:d5:5b:22:e3:cf:95:0f:b0:e8:b3:e0:59:23:
2d:58:3c:09:d2:b6:be:80:e0:41:1b:ab:88:8b:dc:f4:90:36:
a4:34:23:37:9d:8e:0d:64:16:d3:02:76:1e:b3:03:3a:86:31:
e7:12:df:9d:c8:35:29:30:e2:22:91:6a:dc:d8:f0:0c:7a:08:
a4:05:65:f0:7b:38:6d:f7:c5:04:52:c4:dd:00:34:3e:31:59:
35:56:38:48:71:fe:62:5f:7e:0b:c6:22:68:90:65:3b:74:49:
f8:04:91:28:04:b9:79:07:90:cc:56:67:21:48:a9:85:85:ec:
db:e9:73:74:27:3d:ca:d0:51:30:3c:09:ec:af:1d:68:d1:f0:
b3:95:db:0d:db:00:26:29:53:6a:1a:1d:fe:c0:71:e9:a7:31:
0c:41:1b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:44:07 2025 by rpki-client