Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c6e160e3-34d1-3b1f-bb5b-b2f34cecf1c0.roa
File: c6e160e3-34d1-3b1f-bb5b-b2f34cecf1c0.roa (raw, json)
Hash identifier: BVuA9bRCsw+T567dI5m4rLCc5zohFDKHB9eEGKzzDfQ=
Subject key identifier: B4:D1:B6:CF:0A:2F:86:64:28:A9:78:BF:5A:B7:F7:DD:5E:D5:A2:A7
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584867FAEBC51A0381265BDDC780
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c6e160e3-34d1-3b1f-bb5b-b2f34cecf1c0.roa
Signing time: Thu 02 Jan 2025 02:00:39 +0000
ROA not before: Thu 02 Jan 2025 02:00:39 +0000
ROA not after: Wed 02 Apr 2025 01:00:39 +0000
asID: 8069
IP address blocks: 20.33.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:67:fa:eb:c5:1a:03:81:26:5b:dd:c7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Jan 2 02:00:39 2025 GMT
Not After : Apr 2 01:00:39 2025 GMT
Subject: CN=6bb776b3-aa3e-4b0c-94c6-159fe72c183f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:dd:01:4b:36:08:b4:00:91:28:3a:3d:6c:85:
40:4b:a2:72:6d:f1:fe:00:82:81:35:93:9f:b7:85:
7d:f1:61:fd:d3:62:0f:9e:b3:dc:82:51:44:60:ab:
96:5f:22:3c:34:e6:e6:5b:8d:60:03:4b:d5:df:39:
40:a1:11:57:ea:3d:e6:10:f8:a7:cf:1c:25:5f:72:
95:45:b3:b5:a9:c8:06:c3:aa:50:15:04:a3:e1:68:
5a:2e:f8:be:d2:0e:e9:c5:73:ff:d1:e4:31:62:16:
b5:00:c8:49:c5:b7:11:e8:0c:7b:64:a0:82:93:11:
fd:a8:0c:34:b2:4a:1e:b7:9a:4f:56:08:6f:16:6c:
7c:31:39:72:d1:de:d2:8f:4c:f5:48:eb:33:a7:03:
26:19:94:e2:a8:4e:62:9f:db:a5:ab:09:90:ed:b7:
c3:04:d3:9e:8a:c0:d7:23:68:78:68:0a:e7:8b:0a:
70:b3:65:60:b5:5b:de:14:05:29:b4:5d:4a:91:2a:
b1:e7:d4:52:1f:ab:d8:fb:43:89:94:99:df:f3:8e:
ad:1e:1c:4b:e5:07:40:3e:1d:2a:56:9c:5d:e4:7f:
86:22:d0:4b:1f:fe:7b:9b:48:26:b3:f5:64:3b:66:
d5:8f:b1:60:b5:96:d6:89:ec:6d:6b:c8:e0:0a:ec:
f9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D1:B6:CF:0A:2F:86:64:28:A9:78:BF:5A:B7:F7:DD:5E:D5:A2:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c6e160e3-34d1-3b1f-bb5b-b2f34cecf1c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.83.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:d6:da:ef:73:6a:f3:3f:90:62:4f:24:f3:67:4f:f8:70:05:
a4:67:7d:41:bb:38:82:e5:70:21:4a:27:16:c7:69:b8:8d:d1:
64:91:56:6f:97:0e:14:41:30:22:26:3e:67:d9:ea:84:f7:f0:
df:71:13:6f:17:4c:38:0c:f9:f5:30:a1:fc:90:fc:58:88:5e:
65:d1:e1:76:76:12:24:62:13:54:ee:04:90:5a:72:5b:39:b2:
95:54:f8:69:cb:1c:38:45:82:66:fa:1d:3c:7d:6a:55:ed:97:
ee:cd:04:5b:4a:cc:d3:02:a3:20:dd:c1:76:1c:78:03:f6:9d:
00:10:81:de:5f:fe:5f:c5:45:63:db:8c:ab:e5:b2:e8:53:f2:
51:5e:0c:b1:db:e5:fb:a4:69:17:91:a2:92:35:2f:e3:3d:11:
4d:68:80:7d:a5:fb:ed:6d:8b:44:66:5f:ea:65:95:73:f0:77:
91:b8:54:47:da:3a:7e:99:a1:a0:cc:8f:99:f4:54:da:7e:f9:
e5:fd:0d:4c:05:7a:92:c4:60:12:19:7e:f2:88:7f:fc:f7:f5:
4a:b5:03:c5:d8:d7:32:68:ca:59:2f:3b:a9:ca:8c:a1:b2:0b:
3d:ab:e5:e8:97:3f:a7:22:28:98:a9:27:b4:8e:e1:04:20:f3:
db:c5:85:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:57:24 2025 by rpki-client