Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cfce08b9-fa20-3011-97ac-85c4ba3785d5.roa
File: cfce08b9-fa20-3011-97ac-85c4ba3785d5.roa (raw, json)
Hash identifier: zBVFO/FYcXMbxjQB5odiVbqU4DmqnEhqKUMKKjAjrVc=
Subject key identifier: 5C:8A:46:4F:54:BD:62:0B:DF:01:5F:9C:51:06:16:A3:6B:44:CA:4F
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F43285848116FFA377DDE786FCCB0EB00
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cfce08b9-fa20-3011-97ac-85c4ba3785d5.roa
Signing time: Mon 02 Dec 2024 02:00:40 +0000
ROA not before: Mon 02 Dec 2024 02:00:40 +0000
ROA not after: Sun 02 Mar 2025 02:00:40 +0000
asID: 8069
IP address blocks: 20.33.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:11:6f:fa:37:7d:de:78:6f:cc:b0:eb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Dec 2 02:00:40 2024 GMT
Not After : Mar 2 02:00:40 2025 GMT
Subject: CN=db8a8439-3f63-43be-850d-2ab99cb6745c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5e:26:0c:26:cb:63:3e:a4:35:ce:f6:ed:c8:
70:2e:42:61:69:61:82:1a:bf:1c:5f:09:41:83:59:
52:b8:e5:28:b0:e8:0b:0a:ce:d9:cd:51:a3:ef:3b:
e4:94:fb:ee:5a:0f:46:9a:5a:b9:a4:06:e0:c6:fe:
29:3b:6f:e7:7d:e3:45:a6:90:4d:6a:2d:55:06:3a:
79:88:4d:7d:11:5f:08:2f:f6:db:59:1c:2f:39:56:
44:9b:d1:99:66:91:8f:20:85:91:90:dc:d5:6e:14:
f0:e3:36:d2:37:1e:f9:3c:db:26:fe:3e:d8:43:5e:
f5:40:53:ed:6e:6b:1b:13:c1:20:2f:b1:d5:ae:56:
4e:8e:c4:4a:c2:a7:9e:9b:24:d2:8b:54:2f:1f:19:
6a:a4:78:11:62:b8:12:b9:03:12:25:bd:6c:cf:ae:
bb:88:53:30:d1:9f:a7:66:2d:34:e9:ba:f1:87:e7:
d0:34:9f:2b:86:05:cb:e4:b3:3a:69:32:d2:98:b0:
40:c7:72:68:bc:d8:9d:2f:66:c0:00:ad:e4:25:a7:
5f:04:14:56:85:1f:be:5a:c1:a2:60:7b:35:1f:05:
cb:f0:eb:df:dd:e7:11:87:06:a3:0b:be:69:36:be:
a3:05:4e:86:5e:af:52:9b:b1:d0:bf:cb:02:b8:0a:
83:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:8A:46:4F:54:BD:62:0B:DF:01:5F:9C:51:06:16:A3:6B:44:CA:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cfce08b9-fa20-3011-97ac-85c4ba3785d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.232.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:c3:68:78:90:61:76:14:85:ee:38:cb:76:db:60:e2:cd:24:
3f:1e:b0:60:6f:2a:64:26:70:28:61:55:d9:63:64:ef:9b:56:
ee:84:cd:cd:4b:2a:81:05:a6:21:ea:44:e2:1d:89:fd:ba:38:
56:c2:ef:72:16:b2:90:26:4f:a9:79:2c:fa:10:be:e0:78:e9:
f7:35:98:e8:47:c5:2c:6a:cf:2d:04:6a:8b:7f:d7:db:da:47:
4d:a5:d9:e6:fc:1d:02:c8:32:59:1b:8b:0e:cf:86:2e:a5:fa:
bb:d8:51:f6:b1:7a:3a:52:5b:8c:c8:6e:09:80:19:d3:21:b3:
4a:d6:6a:3a:2e:13:b7:a6:38:d8:32:fa:2f:0b:3a:5c:c4:ab:
78:ca:3e:dd:a8:8c:fe:75:9e:73:62:9a:9b:c8:c0:8f:2a:80:
82:0f:f7:93:d7:78:be:c7:1b:a4:c9:2a:eb:fc:ca:96:f6:c2:
b2:c3:fa:c4:fa:82:b9:0b:8e:af:5d:5b:2f:03:d2:47:d9:e0:
4c:a4:d9:0c:15:23:fc:9f:a0:96:6c:70:fc:8b:9d:92:96:d5:
ef:a1:c1:e4:f0:79:a9:44:67:2e:cb:1c:74:f7:80:14:1f:99:
ae:f9:e5:40:b0:3c:d8:a6:f5:98:bf:64:28:c6:2a:16:ad:62:
b7:47:8c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:26:54 2025 by rpki-client