Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/eabcdd13-5aa9-3cdd-925b-8749506e0bec.roa
File: eabcdd13-5aa9-3cdd-925b-8749506e0bec.roa (raw, json)
Hash identifier: NHJ5O/GWAoqcafzVE1+0zn6SNsRjludT4AS0spFZiGc=
Subject key identifier: 1A:C2:AC:10:A6:77:F0:3E:A9:56:4A:B8:DE:BA:E1:E7:04:60:07:D2
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F432858485A0579D0A2518FD66E575CC0
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/eabcdd13-5aa9-3cdd-925b-8749506e0bec.roa
Signing time: Sat 28 Dec 2024 02:00:38 +0000
ROA not before: Sat 28 Dec 2024 02:00:38 +0000
ROA not after: Fri 28 Mar 2025 01:00:38 +0000
asID: 8069
IP address blocks: 20.33.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5a:05:79:d0:a2:51:8f:d6:6e:57:5c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Dec 28 02:00:38 2024 GMT
Not After : Mar 28 01:00:38 2025 GMT
Subject: CN=407f8c87-ce64-4243-b8a4-2192c4968b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:01:fb:d0:4e:21:b9:35:8a:fc:6c:3e:ed:f6:
43:e6:77:e3:3e:9c:da:94:27:8a:73:a9:77:6f:c0:
94:cb:97:0b:db:a8:f7:5e:6b:35:7b:21:04:f6:44:
8f:25:e8:71:c6:99:1a:43:b7:b3:f4:f4:cb:e5:af:
9e:04:c9:bd:e6:17:dc:af:66:58:3d:33:7e:7c:a9:
7c:0a:cf:81:34:1e:35:e9:5d:79:f7:be:78:51:40:
67:7c:2f:61:a7:fc:9e:8e:fe:6f:6a:b2:c7:da:79:
0f:5b:ad:b7:b9:c1:2a:f8:17:7e:4d:bd:5a:cd:90:
00:13:3c:78:ad:99:d1:c8:87:3f:70:0f:e6:78:18:
62:ad:f2:18:f2:0b:01:44:46:56:3d:f3:6d:70:58:
3a:67:c2:32:13:cf:ba:55:8a:d7:00:93:e1:fc:80:
8d:23:c9:0f:8e:a9:5d:15:3d:bb:82:cd:0d:cf:6e:
5e:29:47:9f:c9:aa:3b:df:82:54:ab:de:97:a2:12:
32:cb:9c:4c:8c:92:c2:69:b3:e8:ef:5c:38:ee:da:
04:5b:b6:06:2d:28:95:79:f7:00:c2:45:bf:1d:92:
6b:f5:68:a6:15:40:21:4c:77:b9:3a:16:bd:2d:4b:
36:be:dd:08:0d:dc:cc:7f:cc:ec:c6:a7:65:b4:ce:
da:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C2:AC:10:A6:77:F0:3E:A9:56:4A:B8:DE:BA:E1:E7:04:60:07:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/eabcdd13-5aa9-3cdd-925b-8749506e0bec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.107.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:cd:9c:9c:4e:31:d8:61:0b:b1:46:c4:bb:c7:11:70:bc:a6:
88:4c:48:c6:7c:3e:3f:eb:9d:81:4e:67:64:6a:56:a7:87:09:
4c:b7:4a:34:27:3d:d0:9e:3e:4f:dd:52:53:2a:e0:4f:86:77:
18:c1:fc:5b:0b:f5:4f:f7:70:f3:b5:ae:f7:a1:4c:2f:0b:7e:
bb:fc:87:73:9a:47:c9:bd:df:14:e8:6b:e1:de:9d:b8:06:6a:
97:66:b3:bf:5c:b4:c7:57:2a:8e:af:a8:e7:f6:93:bd:ac:f3:
e9:a7:a0:22:e2:a9:c7:7f:6a:65:fd:96:95:fc:ee:3c:bb:0c:
78:32:51:1a:70:ee:37:51:b7:39:6a:10:dc:29:45:39:c1:19:
2a:d7:84:dc:42:7a:eb:45:e7:09:57:d6:ce:0d:4f:ca:fa:90:
04:6f:90:02:1e:05:5b:47:69:f8:d5:a4:b2:65:fa:2b:10:1e:
e4:13:21:d2:87:dd:d8:fe:47:28:f4:b3:fa:c2:1b:8c:74:ea:
a9:1d:d0:79:75:1f:73:7d:2c:f1:5d:b9:a5:40:35:16:0b:87:
8d:65:f7:a9:ea:dc:77:5d:20:97:a8:05:4d:ce:48:11:cb:bb:
6d:c3:80:14:25:7a:d7:09:92:84:0d:fb:59:37:bb:55:32:e4:
a4:4a:3f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:53:51 2025 by rpki-client