Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ff8e386e-f345-3347-af96-09dacf6ef59f.roa
File: ff8e386e-f345-3347-af96-09dacf6ef59f.roa (raw, json)
Hash identifier: f0f/WENMMZgzRfSd/NWUA6+wqMS5TMUnLYXBk9oM6fA=
Subject key identifier: 3E:8E:2B:06:78:AC:F7:80:B9:70:8D:1D:59:76:80:28:7C:70:05:67
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F43285848562F407AF3811424FDA4A440
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ff8e386e-f345-3347-af96-09dacf6ef59f.roa
Signing time: Thu 26 Dec 2024 17:01:37 +0000
ROA not before: Thu 26 Dec 2024 17:01:37 +0000
ROA not after: Wed 26 Mar 2025 16:01:37 +0000
asID: 8069
IP address blocks: 20.33.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:56:2f:40:7a:f3:81:14:24:fd:a4:a4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Dec 26 17:01:37 2024 GMT
Not After : Mar 26 16:01:37 2025 GMT
Subject: CN=6635650e-7fb1-46d4-9061-9480178013fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9f:46:c0:bf:6c:52:c8:e4:43:6a:0b:e6:f3:
d5:41:94:15:1d:65:0e:30:e2:43:83:df:63:87:a3:
ee:d7:a0:e4:1f:c7:72:11:97:a6:dd:09:eb:0b:1b:
e8:1a:77:8c:10:d6:c4:2d:38:71:0d:a5:49:c9:02:
a8:31:19:9c:a4:c9:41:1c:14:3d:f9:08:5b:e3:62:
2f:4d:3a:31:00:af:26:08:77:2d:f8:3a:ed:ed:9b:
9e:28:a5:76:32:de:5f:29:39:be:ff:7a:59:d0:ed:
6d:b5:dc:d1:85:a7:bf:7a:a9:d7:de:64:7f:c9:5e:
f9:df:b0:52:3e:f3:7a:cc:d6:c7:b1:22:51:4c:12:
21:71:4d:46:21:82:ad:6b:6a:fd:ad:d1:fb:17:fc:
ef:06:d1:20:bd:6b:d7:94:5a:1c:2f:2f:be:5d:c4:
5a:c0:52:f7:ae:c5:b4:1f:47:dd:5b:70:46:5f:6f:
22:56:2a:e1:d1:8c:07:08:ee:b1:03:49:1e:f3:c4:
5f:a0:0a:03:9f:49:f9:55:a5:6c:23:5f:d6:a4:e2:
83:be:9b:f5:f6:51:4f:e5:94:88:80:6c:4e:0c:9f:
78:14:5c:56:e8:34:30:e4:1d:b8:f9:b9:cd:9d:e4:
0d:05:57:90:76:3c:da:77:40:b9:4e:87:dd:64:2a:
3e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:8E:2B:06:78:AC:F7:80:B9:70:8D:1D:59:76:80:28:7C:70:05:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ff8e386e-f345-3347-af96-09dacf6ef59f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.123.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:e8:84:f3:dc:eb:97:a0:0f:82:d0:a5:61:14:f8:b4:08:03:
0d:3c:9e:1f:e9:34:bb:a3:42:39:2a:8a:8e:79:55:db:50:d9:
50:ca:90:65:f9:b1:fb:a9:9e:c1:0b:c6:a3:04:83:f2:18:e4:
e2:c8:ae:7e:bc:b0:6f:c5:58:c4:57:20:dd:f0:e5:5a:8f:aa:
83:98:c9:f9:74:4b:81:a1:11:6e:30:91:e2:eb:6e:fb:5b:d9:
73:3c:0a:ea:01:d7:f4:a5:84:c6:c3:e6:96:d4:65:d3:de:16:
69:9a:34:ca:cf:12:be:03:7c:92:f7:53:e6:79:69:f1:58:67:
69:a6:47:31:e5:53:a3:ba:94:90:60:10:ed:87:9a:31:f7:86:
31:85:c9:e9:42:7f:d7:a8:56:7e:56:55:82:4c:a8:a7:02:9b:
e7:01:b9:40:a5:3d:e2:d8:ab:4b:0b:24:41:73:21:c3:f4:82:
88:b3:b2:71:89:ee:ea:70:af:d3:cf:9e:b3:1e:77:45:c9:85:
28:38:b7:97:96:b1:70:02:05:df:06:30:8c:56:f1:19:eb:39:
b2:8a:c0:2c:d8:b1:c1:bb:34:c3:b7:cc:97:00:11:87:c4:41:
c8:ab:73:45:08:1a:b5:9d:f6:84:4a:47:a1:dd:cd:d3:ad:f7:
e5:d7:ad:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:45:03 2025 by rpki-client