Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c94cb722-73e6-3d84-8ff9-c329ac78b958.roa
File: c94cb722-73e6-3d84-8ff9-c329ac78b958.roa (raw, json)
Hash identifier: 8IdD0DYSJzf/eHXkGCY2yvqG2nox8Pd0HyDmcvYmWZA=
Subject key identifier: 88:44:7B:BA:BC:04:17:07:40:31:2D:48:91:66:8E:6A:8E:26:50:F8
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F43285848562F47C2BAEEB11FEC19C200
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c94cb722-73e6-3d84-8ff9-c329ac78b958.roa
Signing time: Thu 26 Dec 2024 17:01:40 +0000
ROA not before: Thu 26 Dec 2024 17:01:40 +0000
ROA not after: Wed 26 Mar 2025 16:01:40 +0000
asID: 8069
IP address blocks: 20.153.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:56:2f:47:c2:ba:ee:b1:1f:ec:19:c2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Dec 26 17:01:40 2024 GMT
Not After : Mar 26 16:01:40 2025 GMT
Subject: CN=4f6b09d9-d3cb-4ced-a9be-1fe1868230b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f4:17:00:98:5c:54:a8:83:3a:e0:b7:19:0d:
e9:d8:68:53:18:e5:da:1e:95:4c:21:18:ad:c5:45:
3a:a1:4d:dc:3d:b6:ba:04:8a:6b:4b:fb:5a:5e:76:
07:7f:06:4d:44:af:69:0b:94:a9:7b:d5:5e:1f:44:
61:26:1a:2b:f1:58:ab:4a:c5:f2:0c:c4:c2:11:10:
94:85:61:9e:27:18:d7:16:b0:f2:72:84:12:cb:30:
0c:7f:56:06:5d:a5:be:fe:cc:4f:aa:ec:d7:6b:5e:
4e:aa:a4:4e:2a:f9:7f:27:3d:9e:42:de:9d:fd:54:
b3:46:1c:c3:0c:ec:5d:7d:b6:e0:1a:40:da:1f:ba:
4a:17:99:9d:50:73:41:69:e8:d9:7a:81:f1:dd:e0:
4a:50:23:20:b7:e9:b4:1b:e5:71:84:81:f5:b5:53:
98:09:64:f1:35:bb:16:63:ba:8c:81:7b:d4:a3:8f:
61:b4:27:50:29:e6:8a:c2:cd:a9:32:49:07:1d:c3:
09:af:26:c7:5d:1e:7f:5c:e6:50:fa:3b:6f:33:d6:
1a:eb:29:eb:38:d1:96:c7:d5:2c:0a:26:64:48:97:
ef:67:ad:69:ce:43:4f:b7:0b:89:da:2c:94:31:60:
b0:e7:82:ee:ef:75:7a:f9:7c:0c:d1:e7:3f:13:74:
08:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:44:7B:BA:BC:04:17:07:40:31:2D:48:91:66:8E:6A:8E:26:50:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c94cb722-73e6-3d84-8ff9-c329ac78b958.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.153.132.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:f1:60:2f:de:88:34:9f:0c:0e:93:4d:b6:9d:a4:7e:f4:03:
16:e2:d6:c1:21:51:f0:e5:2f:60:96:4c:8f:77:f5:09:e9:d5:
2c:e8:14:6d:fb:eb:f4:ca:b9:02:0f:02:b4:7d:e9:d6:3b:8d:
0f:1a:02:9a:5f:b6:eb:3e:3a:e9:53:01:4b:92:db:fd:9b:a1:
87:f3:7f:99:44:26:9b:9e:2c:67:42:f3:d9:2a:35:c1:41:f8:
71:c3:7d:34:16:90:12:79:5a:ba:7c:57:1e:e8:21:e8:e6:e0:
58:98:c5:f1:dd:4b:21:a5:a4:ea:98:b6:e9:9f:d3:45:3f:00:
10:48:16:13:88:09:58:00:68:8c:ca:51:70:dc:d7:7b:16:06:
ff:53:1c:ca:e4:3a:15:4b:2c:a1:14:96:cd:e3:54:8e:f1:66:
88:5a:e1:e9:5b:4d:f4:f2:b9:84:5e:fd:d6:ba:1c:94:fc:02:
28:ed:1b:38:ba:c6:1b:60:f5:7e:47:10:a6:d4:46:3e:6b:e5:
c2:80:52:f2:ee:70:33:d2:6c:e5:e3:2b:f8:2c:7d:43:91:fe:
53:6b:0b:d9:74:ff:68:65:dd:fc:02:73:5d:a5:52:b6:80:4d:
35:c8:a7:4a:3b:15:31:3c:4e:63:67:6f:60:2d:68:7c:70:6b:
32:da:df:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:09:40 2025 by rpki-client