Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e1e3adb7-10ca-3931-aa09-29f96ea8d2ec.roa
File: e1e3adb7-10ca-3931-aa09-29f96ea8d2ec.roa (raw, json)
Hash identifier: GF9kbzSak6HTtoLq+5TpHiqfs6rbzpU2YvXNMWXBGOo=
Subject key identifier: 89:21:A4:39:90:7C:A8:0B:B1:33:17:A6:82:72:25:44:51:C6:EE:33
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584867FAEB9BE1C3A9095B16BA80
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e1e3adb7-10ca-3931-aa09-29f96ea8d2ec.roa
Signing time: Thu 02 Jan 2025 02:00:39 +0000
ROA not before: Thu 02 Jan 2025 02:00:39 +0000
ROA not after: Wed 02 Apr 2025 01:00:39 +0000
asID: 8069
IP address blocks: 20.33.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:67:fa:eb:9b:e1:c3:a9:09:5b:16:ba:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Jan 2 02:00:39 2025 GMT
Not After : Apr 2 01:00:39 2025 GMT
Subject: CN=9599cada-3b80-40e8-9dd8-fcb49e843c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c5:fb:c9:dc:2a:53:82:6b:2e:bf:83:8d:c8:
90:37:6c:20:a1:82:0c:02:06:94:bf:31:22:e3:80:
ad:df:fa:50:57:39:6e:20:cf:7d:56:73:cb:38:fa:
cf:f7:1c:02:b3:78:f8:f7:3f:93:0a:78:1d:19:a8:
a2:94:a3:77:72:6e:a8:4b:8d:f2:48:2d:c0:95:3c:
26:7c:a4:e5:85:74:5a:4e:19:2d:31:f5:58:be:64:
bd:7f:ae:a2:d9:1b:d9:2a:e7:3e:8c:e8:d6:de:83:
93:20:37:d7:0c:40:62:b0:ce:ea:71:42:dd:9f:43:
0f:b5:6c:97:20:af:34:b4:6f:db:e6:47:e5:4b:48:
9f:ef:8e:9b:15:a2:dd:ed:1c:5c:5a:32:27:d7:4f:
89:6f:e1:00:4b:2d:1d:01:43:54:a2:32:da:73:7c:
fb:44:ec:12:ea:14:e0:10:74:5c:b0:41:79:ba:74:
f7:50:84:d9:91:9f:cc:13:c2:fa:9f:28:e9:99:b0:
a7:14:40:d5:2b:9c:26:13:7f:41:61:a8:5f:38:d2:
7e:75:7b:79:3e:e7:d8:aa:e1:bd:74:14:d6:99:47:
2a:1a:a5:f3:57:42:87:ae:d8:54:d1:7f:64:22:10:
fa:85:f0:6e:88:69:13:4e:9c:9b:70:36:9d:1b:27:
85:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:21:A4:39:90:7C:A8:0B:B1:33:17:A6:82:72:25:44:51:C6:EE:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e1e3adb7-10ca-3931-aa09-29f96ea8d2ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.187.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:01:82:ed:e5:13:b3:b7:ac:2d:98:79:87:76:95:78:ed:b3:
84:62:1b:d5:df:d8:ab:ae:ad:45:a4:d4:c4:8e:a1:f4:3e:44:
9d:09:22:73:f4:08:6a:52:91:b3:8a:c1:6d:6e:ee:42:29:a1:
22:96:ee:35:69:40:d4:b7:c3:77:9c:a4:3f:70:8b:b2:3b:51:
59:58:f4:de:41:d6:86:ac:8e:f7:a2:7c:9a:ca:fe:fe:f3:7a:
cd:03:ac:39:bb:43:e9:6d:4e:38:90:eb:fa:65:b4:d2:37:a1:
1e:08:8b:ac:e1:1c:58:bc:06:19:e7:4a:f8:7c:5b:03:80:10:
c7:3f:40:5a:e3:87:82:b7:73:eb:2e:93:6e:c5:a5:c5:23:2c:
d1:eb:e5:57:f6:4e:04:d9:c7:17:81:6d:7d:1e:13:1d:92:19:
8f:0b:2d:a9:3e:99:a8:b9:21:64:d7:1b:89:2e:8c:ab:8c:1c:
fb:73:59:96:d0:d3:63:a4:fc:fc:6a:d6:a9:97:b5:62:92:76:
e1:92:3e:ca:3f:09:e9:6f:44:55:c5:b3:e6:8b:3c:29:1f:af:
ac:af:69:0c:db:31:4a:73:94:7e:a9:87:cb:0b:1e:bc:c2:7a:
2a:f8:0a:6d:9f:f3:e6:b2:41:09:af:76:f0:8d:8e:04:42:8f:
97:7a:20:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:14:26 2025 by rpki-client