Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c073bdde-3133-316c-aca0-6453facdfded.roa
File: c073bdde-3133-316c-aca0-6453facdfded.roa (raw, json)
Hash identifier: 4vSlmTdXxd0st+Y5zqN5gNI7VvicWXTGkm2W3JyZOUc=
Subject key identifier: 49:D3:F7:DB:16:07:FF:9F:73:CD:28:B0:B7:09:A4:50:6F:D6:33:CA
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584800AFC5791965090817B17300
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c073bdde-3133-316c-aca0-6453facdfded.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 8069
IP address blocks: 20.153.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:c5:79:19:65:09:08:17:b1:73:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=f2d47efd-8332-4ed2-a58e-3332c143f1d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:59:02:22:a9:ed:62:bd:ad:83:82:b1:c0:f2:
80:f1:e8:83:24:4e:0f:c4:61:30:28:2b:07:d9:57:
ef:fa:c5:7d:2a:cb:0f:da:8d:7a:d1:f3:21:0b:d8:
7f:28:b6:60:ed:c1:21:9b:b2:41:d2:6b:ec:ee:34:
43:cf:a6:6e:a5:a9:c0:ff:36:98:94:54:9c:da:6b:
51:78:e6:3b:44:b4:76:c0:8f:63:27:94:b6:0d:c9:
8b:b1:a0:7b:b4:bc:a6:08:26:58:bb:24:d8:d5:44:
62:a9:33:75:89:2e:0b:30:68:41:93:a3:d1:6d:b0:
43:22:82:1c:8c:6b:07:65:16:6b:6f:67:f0:d3:05:
d3:40:97:ee:aa:91:1e:3e:39:35:f5:05:97:2b:a8:
bf:fc:f6:3b:ad:73:cd:60:e4:4e:ad:1a:2a:7f:d4:
c8:fc:d8:9f:ee:46:dd:2c:16:21:ad:85:f5:e4:ae:
19:e2:6d:bd:4a:db:17:4b:09:22:5a:9e:92:ae:40:
29:ab:a0:45:31:08:9b:21:e0:a1:aa:64:9b:dc:fb:
3b:2a:a5:07:0f:f7:68:05:52:ba:b7:4f:f9:2b:e4:
d0:53:82:4d:36:b6:0a:0c:9b:de:4f:58:b1:8f:08:
81:5c:f3:36:08:74:e3:78:56:44:a4:39:4b:1c:86:
01:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D3:F7:DB:16:07:FF:9F:73:CD:28:B0:B7:09:A4:50:6F:D6:33:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c073bdde-3133-316c-aca0-6453facdfded.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.153.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:28:a3:1a:df:6e:c7:67:11:3d:f2:18:c0:4a:f5:77:3a:01:
ef:28:2f:67:86:8c:6c:7e:35:f6:94:7f:69:18:43:2d:3a:b3:
c1:9e:aa:bb:7e:b1:50:21:68:e3:df:c1:ef:3e:1e:8c:43:91:
25:2f:5c:d8:51:67:6e:ec:62:73:35:86:99:74:48:73:71:61:
78:4d:a2:45:8b:42:20:38:32:84:a2:f4:7b:e2:b5:31:32:9a:
24:4c:00:a9:ae:7c:39:12:2e:ed:4e:e6:f1:57:9d:f7:81:69:
1e:c4:89:e3:54:3e:54:e2:ae:d2:3b:8f:d5:df:9d:13:50:e1:
ac:80:b1:20:6d:70:16:92:f7:5d:70:02:04:c3:76:ba:af:dc:
97:91:6b:b7:d3:87:57:da:3f:06:24:a8:81:5b:5a:19:34:b8:
df:71:5f:5f:9e:f8:d1:e5:63:58:a2:57:48:0e:d2:90:c1:44:
0e:16:fb:0c:23:8a:bd:23:a5:b0:69:47:d3:33:f0:17:c8:f4:
2c:98:e4:7f:d5:a7:c6:d5:b6:4f:15:16:0a:a6:a3:82:77:6e:
fa:f1:51:e2:04:e3:20:bb:5a:1c:a8:07:48:d3:03:0f:d9:95:
c4:66:da:0c:d9:49:bc:3d:b3:54:6b:6c:38:e8:fe:44:ea:26:
61:e2:2f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:59:35 2025 by rpki-client