Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d9441c3a-aac1-3bca-92fb-30618dd1f2ba.roa
File: d9441c3a-aac1-3bca-92fb-30618dd1f2ba.roa (raw, json)
Hash identifier: nPHHImfws/JZ3XIFXC9JhqOBpiy9sahUMtX2fu13wT8=
Subject key identifier: 77:70:E6:03:CC:E2:C6:68:18:73:B8:0D:CA:B8:95:2F:13:98:38:EE
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F43285848562F4F07389DE01EA8EDB080
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d9441c3a-aac1-3bca-92fb-30618dd1f2ba.roa
Signing time: Thu 26 Dec 2024 17:01:44 +0000
ROA not before: Thu 26 Dec 2024 17:01:44 +0000
ROA not after: Wed 26 Mar 2025 16:01:44 +0000
asID: 8069
IP address blocks: 20.11.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:56:2f:4f:07:38:9d:e0:1e:a8:ed:b0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Dec 26 17:01:44 2024 GMT
Not After : Mar 26 16:01:44 2025 GMT
Subject: CN=28852243-9c46-4e06-87ee-d9446cfda30e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d2:56:60:04:d1:6e:3f:78:f0:29:8c:2a:2f:
4f:36:2f:85:ec:a5:a9:83:b6:05:73:59:e7:b3:23:
3e:6b:2c:1d:d6:ad:b0:fd:d8:1c:36:31:0d:f8:6b:
f4:72:45:fe:25:b8:ad:f7:62:87:fe:0f:5b:fa:bb:
73:12:64:22:92:0b:13:5a:0c:b3:69:ff:af:df:00:
1f:b3:ca:50:70:05:32:a0:a8:3c:35:76:d0:53:b9:
84:ba:69:44:19:27:18:35:e9:9c:8c:09:8b:ef:6b:
68:ae:05:29:1f:1d:2e:8c:88:12:69:60:20:2a:63:
30:2c:af:d1:7d:86:0b:78:30:0a:8c:dd:de:08:9b:
45:78:5b:ad:b7:7e:35:72:d3:17:4e:37:ee:e4:0d:
85:31:91:b6:12:49:9e:4c:bb:45:46:b7:00:19:99:
53:bb:1d:66:c6:3b:21:8a:49:71:24:b8:e1:7f:73:
78:45:6f:20:df:e4:88:24:05:1c:06:d8:45:a2:e6:
13:38:06:ca:4c:4e:bd:59:94:4e:ee:29:50:a7:d4:
68:65:cc:96:ec:37:38:2b:81:bd:2b:93:2d:e5:05:
a4:bb:3d:75:5b:57:f4:3c:ed:5a:c4:5b:ff:28:c7:
fb:d5:9b:c9:f6:07:a1:d9:43:dc:3a:bd:1c:20:c9:
24:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:70:E6:03:CC:E2:C6:68:18:73:B8:0D:CA:B8:95:2F:13:98:38:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d9441c3a-aac1-3bca-92fb-30618dd1f2ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.11.173.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:41:90:7d:35:f1:60:01:3c:6f:0c:1b:d4:c9:fd:55:d3:29:
46:57:f8:1d:1a:8b:73:3f:b4:90:1a:b1:18:57:a7:1c:b0:1f:
25:a3:62:51:30:05:31:53:9d:7c:58:6b:1e:e9:3f:3c:65:b8:
8b:37:a4:5d:b7:7e:61:b2:10:e7:d1:0c:fd:9a:ca:02:10:b0:
9c:91:74:8d:19:9a:ef:c0:1a:93:f2:0a:22:49:e9:46:97:34:
40:e4:7e:39:82:b5:4c:30:64:c0:c6:14:ab:63:69:39:2c:90:
cd:6e:26:c8:01:9a:73:bf:62:fe:d2:2c:74:ce:59:cb:e0:88:
24:61:b0:66:88:e1:70:ea:c7:f6:df:17:7a:ec:36:ef:12:7e:
19:d0:1c:7e:37:47:b1:56:b8:b7:62:1a:fd:f9:a3:06:7e:2d:
48:ca:4a:d2:88:df:eb:0a:b9:d7:51:6b:a3:f2:48:46:fe:f9:
73:f1:09:f1:d8:34:ba:53:67:20:01:bd:dc:e6:8f:28:98:d7:
de:65:d4:03:dc:34:9f:60:1e:90:55:24:6c:ab:4f:01:88:fb:
14:c6:57:4a:6f:26:49:5d:0b:58:a4:4a:7a:d2:38:d2:dd:1c:
13:29:47:92:56:b9:83:e3:87:d2:4e:a6:76:6b:5e:03:43:d1:
91:a5:50:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:21:16 2025 by rpki-client