Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f936e6cc-baa1-313f-bf0e-1713ad436581.roa
File: f936e6cc-baa1-313f-bf0e-1713ad436581.roa (raw, json)
Hash identifier: huhHdlJyRTruVFysmYXEslk7Wwo8wG93pWaK0tu5DgM=
Subject key identifier: 39:9D:36:6A:25:75:32:29:C7:99:5A:42:A4:F8:AA:E7:F7:0A:06:49
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F43285848653043596043E6240E3B5280
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f936e6cc-baa1-313f-bf0e-1713ad436581.roa
Signing time: Wed 01 Jan 2025 02:00:40 +0000
ROA not before: Wed 01 Jan 2025 02:00:40 +0000
ROA not after: Tue 01 Apr 2025 01:00:40 +0000
asID: 8069
IP address blocks: 20.33.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:65:30:43:59:60:43:e6:24:0e:3b:52:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Jan 1 02:00:40 2025 GMT
Not After : Apr 1 01:00:40 2025 GMT
Subject: CN=107ec720-98e7-4633-ac96-bd44b34e9084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3a:48:95:70:3e:70:08:08:65:19:10:60:d5:
3e:7a:43:2e:6b:ca:72:ab:4b:fe:c8:bf:9c:4b:62:
30:2a:6f:39:e1:e3:b7:6c:df:d6:06:70:1f:bf:c0:
a8:d4:9a:42:74:35:8f:97:80:df:d1:49:f5:3a:e4:
b5:0d:dc:e5:be:c5:a4:6e:c7:17:9d:98:d2:0c:8a:
58:8e:d1:c5:e1:f9:e7:19:f7:c6:4e:c0:d6:ff:5b:
63:09:16:12:00:f8:e4:84:9c:2e:15:e2:71:a2:df:
af:fe:3c:fb:14:99:67:dd:90:65:76:19:4d:17:1d:
51:f5:dc:d3:bc:7f:d0:c1:b7:6e:8f:29:e7:e1:7c:
a5:9a:ed:cd:f5:a8:a8:f3:20:7d:4a:65:cf:01:b9:
36:d9:55:73:d9:54:c9:cc:fe:73:e7:0a:65:49:09:
f8:ff:94:f6:77:30:36:ca:47:6f:f2:fe:ca:1b:36:
e4:55:13:fe:9a:33:97:cf:89:0e:41:26:eb:1c:30:
34:4c:f1:93:9a:0f:b3:8b:13:46:e1:ab:f3:af:fb:
9c:b6:7b:15:86:1c:df:bc:73:de:78:69:86:ed:0b:
c2:e8:ce:c8:83:63:ef:29:3f:c3:31:ca:aa:36:28:
0f:68:4a:53:08:6a:2e:f9:19:3a:d2:8d:6f:9a:94:
ed:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:9D:36:6A:25:75:32:29:C7:99:5A:42:A4:F8:AA:E7:F7:0A:06:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f936e6cc-baa1-313f-bf0e-1713ad436581.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.195.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:e3:35:94:e0:07:93:0e:68:27:ca:9c:d8:58:d9:04:49:74:
8b:74:42:72:8b:0f:20:b9:b3:80:2d:67:aa:e1:75:47:d3:43:
96:20:a8:a6:17:34:16:b1:67:56:52:bd:c2:12:de:0b:49:ac:
7c:67:7a:97:3d:02:5a:f0:c0:4e:d5:7e:8a:dd:7f:34:7b:bf:
ef:dc:0a:be:c4:90:68:44:ca:a0:81:37:3f:51:c8:92:b3:3b:
aa:00:a7:4e:62:45:55:e7:f2:c9:d6:61:ae:61:e1:60:48:00:
5a:31:d1:bd:84:d6:ab:bf:71:ea:32:b0:48:f5:cb:ca:66:04:
ea:95:ad:4f:20:91:43:d8:9d:34:5f:8d:b0:c2:aa:07:f0:b9:
1c:d7:ed:d0:c1:86:df:94:75:95:8d:34:da:ab:da:f8:df:5c:
b5:08:4c:f6:84:d4:d5:1a:11:3f:25:89:6a:95:81:89:ad:f9:
a8:81:9b:ec:1e:51:c0:75:ed:46:6d:6e:0d:2f:33:ba:64:a7:
85:9d:19:f5:8c:36:c5:64:4a:7b:ef:bc:2a:e8:46:25:09:54:
3c:6d:c8:b3:30:fd:78:04:b9:4e:c2:86:59:f8:4d:f6:9d:ec:
c5:4d:99:36:0d:0a:ea:d4:96:13:a6:0c:74:af:2a:ad:8a:58:
eb:80:9c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:43:50 2025 by rpki-client