Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/bf5165e3-d1b5-30c8-9bb2-340b00e4186a.roa
File: bf5165e3-d1b5-30c8-9bb2-340b00e4186a.roa (raw, json)
Hash identifier: QTsdQee8hA54a9gl18hM8gdmLFXasM7M5HDqZe88YKk=
Subject key identifier: A1:3E:B8:4B:61:04:A9:B1:94:32:5D:8D:6E:FC:96:84:BA:A9:40:96
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F432858486530438CD9D562FEF3957A00
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/bf5165e3-d1b5-30c8-9bb2-340b00e4186a.roa
Signing time: Wed 01 Jan 2025 02:00:40 +0000
ROA not before: Wed 01 Jan 2025 02:00:40 +0000
ROA not after: Tue 01 Apr 2025 01:00:40 +0000
asID: 8069
IP address blocks: 20.33.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:65:30:43:8c:d9:d5:62:fe:f3:95:7a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Jan 1 02:00:40 2025 GMT
Not After : Apr 1 01:00:40 2025 GMT
Subject: CN=b63929ba-3579-42ef-bb43-2255ef53d71b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:26:d6:6e:18:f0:ba:6e:18:3f:b4:e0:ad:28:
5b:11:15:71:4a:eb:49:39:94:15:86:4e:44:92:3b:
18:08:37:b7:5d:04:56:47:db:65:de:cd:07:b8:b0:
cc:da:18:70:70:e6:ac:d8:68:50:bd:31:bd:cd:4c:
f1:1d:7b:1b:e2:7e:f1:a2:c6:6c:9c:9e:71:52:e8:
95:53:40:34:8f:25:57:23:ac:96:81:3c:47:50:60:
b2:c8:c6:ff:59:c1:4b:5e:a8:0b:a2:15:6d:de:6b:
ca:54:b1:86:45:25:af:92:44:af:46:11:f7:f3:33:
7d:64:b2:b7:77:1e:40:f3:e6:2d:a2:c9:da:7b:ab:
e1:aa:db:3e:7e:25:c3:b8:fe:b3:29:3d:d3:11:c1:
d5:68:2c:0b:0a:e3:f1:a9:9c:be:df:86:55:7c:54:
6e:76:ce:9f:12:55:5b:83:68:ce:cd:f7:87:c0:9d:
c7:f6:30:a6:5e:13:66:74:da:0a:e1:6a:e3:15:21:
ef:b1:5a:70:c2:95:0e:c2:d6:3a:6f:7e:ef:b4:8c:
62:e0:b0:c8:d5:e1:fe:46:87:e5:e8:6e:17:8d:42:
9e:6a:b6:f3:f2:d3:68:13:62:3c:bb:7a:94:4c:9c:
4c:15:39:ad:b5:27:d9:2c:38:02:28:29:66:f3:6e:
30:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:3E:B8:4B:61:04:A9:B1:94:32:5D:8D:6E:FC:96:84:BA:A9:40:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/bf5165e3-d1b5-30c8-9bb2-340b00e4186a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.201.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:96:3f:aa:36:7c:99:99:0a:d7:f9:87:f3:7f:12:ad:38:2f:
33:8a:af:80:21:ce:83:05:75:4b:6d:a3:e2:85:fb:ad:93:a2:
30:a6:2d:2f:38:29:21:75:c8:46:0b:d1:6a:9f:52:f5:7c:9c:
83:da:f2:f6:7a:97:2c:44:fc:40:e4:ab:39:2a:c8:a7:95:bf:
3f:a9:3b:6e:21:41:fe:1a:7c:e8:ba:48:c4:95:54:87:ff:ef:
64:1f:40:bf:25:38:68:cc:65:13:6e:c0:63:fc:ac:a9:f1:98:
5f:88:db:4c:e2:58:cc:0d:a1:e5:93:04:31:98:e9:87:11:f7:
4f:93:19:6b:6d:0d:c6:30:7a:03:10:86:b5:a9:5a:ab:c0:5c:
ca:ba:4e:51:f7:ed:99:b8:0a:9f:57:08:29:62:c4:09:1d:97:
be:32:d0:de:e0:d7:31:f2:08:01:b9:e1:cc:8b:50:ce:02:e3:
22:33:1d:82:bd:25:9f:2a:1d:71:02:f8:6a:f9:71:59:6c:f1:
86:55:dd:22:b4:5b:31:82:ab:45:ba:e0:f7:5f:0a:fd:db:cc:
19:9e:61:b2:19:95:98:3c:5c:93:f6:3b:89:62:d4:89:f5:a3:
f3:6a:03:59:3a:79:c2:3d:9d:2a:81:82:dc:6e:37:5e:1f:5d:
34:76:63:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:19:05 2025 by rpki-client