Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e15108f0-4e7f-3ae2-9d82-42d91cfe5bb4.roa
File: e15108f0-4e7f-3ae2-9d82-42d91cfe5bb4.roa (raw, json)
Hash identifier: ZXBErDQdPmzym02lDU0ZE4ePdTBiIIMmhX7XVXHHFk8=
Subject key identifier: BE:92:A2:D9:3E:4D:54:CB:4E:2B:B2:9F:EC:8E:52:F9:10:80:04:2B
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584883E5CA0ADFA8D06C35C08300
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e15108f0-4e7f-3ae2-9d82-42d91cfe5bb4.roa
Signing time: Sun 12 Jan 2025 02:00:38 +0000
ROA not before: Sun 12 Jan 2025 02:00:38 +0000
ROA not after: Sat 12 Apr 2025 01:00:38 +0000
asID: 8069
IP address blocks: 20.33.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:83:e5:ca:0a:df:a8:d0:6c:35:c0:83:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Jan 12 02:00:38 2025 GMT
Not After : Apr 12 01:00:38 2025 GMT
Subject: CN=f10d8a0b-3805-4e7d-90c2-89920197095d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:90:e6:83:3e:41:56:ea:95:4a:68:bc:59:54:
29:ff:d2:8e:94:b6:4a:9d:26:1c:72:91:2a:b0:aa:
b5:20:06:85:2b:fa:21:e9:66:d6:6e:ae:3d:e9:6d:
3a:c8:f8:64:a0:40:39:b5:2b:43:8f:eb:f4:27:ae:
b1:85:bb:91:10:f9:de:a4:75:ac:c9:85:b9:17:f1:
ed:c2:62:32:bc:8e:0e:ba:d6:e0:40:c6:ed:05:f1:
19:1a:8b:c1:07:0d:7a:44:d0:11:45:a6:52:b1:7a:
c5:3a:5c:0a:eb:11:d3:2f:af:f7:24:9d:01:04:fd:
26:58:87:64:ed:31:57:eb:3e:00:e5:cd:08:d3:bb:
57:f4:39:15:c1:bf:cd:25:b1:b3:79:96:64:48:ce:
be:de:5a:66:1e:fb:35:2c:32:84:05:b0:4f:25:a2:
6e:08:b7:64:0f:69:78:b4:b2:95:df:a0:06:3d:d1:
73:f8:b6:c7:33:74:4c:ea:b1:89:c4:a2:86:e6:c1:
66:dc:ea:34:60:cb:fe:6b:bd:94:d9:91:5c:f5:56:
a6:94:27:b5:92:e3:e6:ab:15:56:31:04:58:30:73:
c0:cf:17:b2:12:f7:a7:d2:73:98:4c:93:e9:f4:b7:
67:91:5a:aa:73:95:bf:1f:c5:b0:80:20:4c:72:8a:
26:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:92:A2:D9:3E:4D:54:CB:4E:2B:B2:9F:EC:8E:52:F9:10:80:04:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e15108f0-4e7f-3ae2-9d82-42d91cfe5bb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.64.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:4f:c9:62:ce:ef:fd:4e:09:f1:42:db:79:2a:a7:ed:b0:b1:
78:20:38:7d:87:40:46:91:5d:d0:de:d1:28:1e:d0:68:31:71:
95:8d:6b:44:bc:20:4b:be:ac:8b:b2:8f:74:2f:39:a6:d7:1c:
3d:8f:26:b9:6d:d2:e7:f9:e8:bf:cd:4c:02:dc:2a:f9:5c:d5:
68:d3:5c:7b:35:44:fe:9b:2f:80:44:f2:cb:d0:5a:c3:e6:3a:
d2:0b:bb:90:13:61:ee:52:c8:88:b7:31:45:0c:ee:ec:1a:10:
86:83:68:e9:c6:26:f0:1c:a1:b7:0b:52:a9:cf:61:40:64:9f:
5e:4b:70:b1:a3:35:7a:45:0e:54:e9:11:d8:a0:86:1a:de:ea:
b6:b7:86:fc:8a:f3:58:4f:9d:ba:c0:b6:f0:c4:13:42:35:bc:
04:be:e3:92:75:75:a6:47:41:df:d5:53:51:27:22:cf:02:cb:
da:4e:44:f1:74:0c:6a:68:04:71:9a:6f:30:96:96:8c:20:fb:
01:f7:fb:6f:f8:26:18:5d:ba:93:b4:f6:54:ca:72:dc:6b:5d:
dc:c3:77:bf:cd:59:30:96:79:78:cd:6e:ab:4d:04:2e:e5:63:
0d:0c:b7:37:63:ea:23:db:79:e2:2a:69:3a:f1:8a:cd:49:54:
71:85:3f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:21:20 2025 by rpki-client