Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/edf37cc8-43ef-3f95-8478-5c871e14d557.roa
File: edf37cc8-43ef-3f95-8478-5c871e14d557.roa (raw, json)
Hash identifier: xhcKkRoGnkZjo8wb67lYpko8AytII82loQaoL8I0izA=
Subject key identifier: F2:B8:E3:36:CA:D8:E6:B8:DC:02:1E:A5:B3:2F:59:E5:5E:69:95:5A
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584806450D442589412CDAE02600
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/edf37cc8-43ef-3f95-8478-5c871e14d557.roa
Signing time: Thu 28 Nov 2024 02:00:38 +0000
ROA not before: Thu 28 Nov 2024 02:00:38 +0000
ROA not after: Wed 26 Feb 2025 02:00:38 +0000
asID: 8069
IP address blocks: 20.33.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:06:45:0d:44:25:89:41:2c:da:e0:26:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Nov 28 02:00:38 2024 GMT
Not After : Feb 26 02:00:38 2025 GMT
Subject: CN=0af0a031-e4a7-401c-938b-4e20d88500ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ec:cc:f5:e6:a7:e8:ff:0b:c2:d5:ab:85:31:
5f:9c:75:d3:fd:27:f5:15:47:68:3f:1c:6e:82:d4:
bd:7e:9c:52:a0:a1:ac:23:b6:b2:4f:6b:82:ae:13:
b1:69:38:9c:f1:a1:d9:a0:69:5a:76:2c:2a:3f:7e:
98:21:84:89:4c:59:4b:1d:7b:36:2b:77:c7:70:72:
8d:81:8c:c5:35:16:3e:5c:a9:72:d0:62:7b:52:35:
ed:02:22:4d:44:80:7d:73:86:be:93:50:26:65:b3:
7b:b2:da:3a:54:cf:95:40:59:92:f9:b3:97:5d:53:
9e:b8:f4:d8:5d:9b:0a:a4:66:e2:b6:f5:69:9e:0e:
39:3f:12:e3:50:1e:0c:66:56:fd:cc:b4:69:d7:cb:
ef:3e:85:3e:17:5f:8a:e1:0d:02:7a:c8:7f:9d:c1:
c5:c3:28:ba:1d:9e:c6:8b:3b:09:37:7d:1f:88:df:
38:d8:8c:e4:3d:d2:aa:87:23:56:e5:76:10:05:39:
e9:3b:26:55:78:52:fa:11:06:8b:08:83:19:6c:36:
04:7a:a7:5e:03:99:b7:24:3b:5a:11:c0:1f:16:7c:
5b:03:61:0f:c7:72:a1:7d:db:6a:04:3e:36:a5:86:
b4:5d:9d:28:60:b4:49:15:76:83:6e:8d:a0:a4:66:
5c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B8:E3:36:CA:D8:E6:B8:DC:02:1E:A5:B3:2F:59:E5:5E:69:95:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/edf37cc8-43ef-3f95-8478-5c871e14d557.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.76.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:00:99:c2:06:27:93:93:b5:70:e4:b5:1b:fb:fa:e8:2f:c4:
0c:0d:37:57:0f:fd:63:a1:16:f8:74:c9:44:65:b6:59:9e:11:
70:5c:46:c0:41:cc:39:4b:4f:01:6a:94:92:6d:7b:89:ec:5b:
56:18:b1:f7:c0:9d:07:0f:20:64:49:ff:bc:0b:77:54:de:40:
b3:2b:dc:8a:f6:eb:a3:22:d2:91:1e:7d:b0:57:82:2b:87:0b:
bb:cb:e1:31:f5:15:63:fa:9a:f1:d3:0f:c0:71:c1:d0:27:97:
32:d0:41:17:cb:a4:ee:88:25:c9:60:9b:51:69:0e:04:a1:6e:
08:84:da:27:ee:6c:93:ee:c9:e0:b5:f7:40:98:e5:2e:93:12:
8a:2f:00:de:d5:d5:56:8d:68:8e:6d:9b:47:b6:18:7b:46:0d:
0a:48:82:d8:de:a1:46:8f:09:60:a2:97:30:01:70:c2:b3:e2:
4a:27:8c:4c:92:13:3f:66:2e:f6:54:1b:aa:e6:2e:b7:db:3a:
fb:4f:17:4a:ca:a0:c2:42:26:64:c7:cf:f1:74:bf:cb:3b:66:
8b:40:aa:aa:6e:66:bc:f7:b9:6b:1b:17:15:bf:2d:c7:65:04:
eb:fb:37:a4:2a:cc:de:4e:1f:cb:10:27:4e:4d:a8:71:3e:87:
0c:fc:11:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:46:39 2025 by rpki-client