Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2040fb79-7dc8-3434-ae0f-4850948ea219.roa
File: 2040fb79-7dc8-3434-ae0f-4850948ea219.roa (raw, json)
Hash identifier: cMCR4q5aRoQ7+nJurC46tGTsf6dCw9Ri/kg/z43vHVc=
Subject key identifier: 4C:CF:E0:0B:03:29:3D:89:D0:50:BE:21:51:4E:4E:91:7C:A1:CF:5C
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F43285848E0069DA5F8EFE25B7DD3CB80
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2040fb79-7dc8-3434-ae0f-4850948ea219.roa
Signing time: Fri 14 Feb 2025 02:00:39 +0000
ROA not before: Fri 14 Feb 2025 02:00:39 +0000
ROA not after: Thu 15 May 2025 01:00:39 +0000
asID: 8069
IP address blocks: 20.153.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e0:06:9d:a5:f8:ef:e2:5b:7d:d3:cb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Feb 14 02:00:39 2025 GMT
Not After : May 15 01:00:39 2025 GMT
Subject: CN=91d2c4bc-1099-44ab-a977-cba35e11d227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:66:1d:55:e6:cc:00:0d:d2:ec:37:e9:b9:0a:
20:82:23:78:57:40:0b:e4:62:cf:45:14:a7:18:80:
3c:aa:6d:63:1a:b8:a9:79:04:0b:c1:e8:43:4d:0c:
93:04:7b:4a:bc:37:d8:b4:0d:e4:8e:54:1a:5d:8e:
97:73:39:1a:a8:54:6e:44:3e:13:ad:d7:8d:8f:b8:
d7:b5:dd:f0:8a:bc:61:94:ac:ce:8c:57:86:8a:4f:
ce:ba:51:69:8c:cb:75:5e:1a:31:1f:7d:de:19:b8:
88:12:30:91:2d:f5:6a:b3:e2:98:c0:af:b1:f8:f2:
7f:1b:ad:03:12:0c:68:4c:90:df:ba:22:3e:aa:f8:
eb:f4:b2:27:22:da:a2:ab:0f:1c:ff:14:50:18:6a:
68:73:44:cd:79:df:1a:b5:1a:59:c3:ee:ea:10:5f:
20:90:ac:4f:29:d2:00:7f:61:b9:c1:7e:ed:b1:f9:
76:9f:b3:ba:f3:ca:7a:47:6e:53:96:b2:f2:c0:26:
7a:d3:17:98:5e:f9:50:4b:29:9d:0c:c3:c5:ee:da:
50:85:80:4c:2d:39:c5:a7:58:53:1c:02:a9:e2:12:
ea:a7:53:ee:e2:4e:b9:a7:48:94:7c:e3:83:3f:8d:
fa:05:d9:3b:12:e9:e6:a9:e9:89:a1:1a:b7:01:8e:
61:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:CF:E0:0B:03:29:3D:89:D0:50:BE:21:51:4E:4E:91:7C:A1:CF:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2040fb79-7dc8-3434-ae0f-4850948ea219.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.153.12.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:5e:63:98:a1:7b:d2:19:68:f9:19:02:08:c3:48:a3:0d:b4:
97:bb:35:35:c6:0d:c1:75:ae:6a:c1:a7:45:2f:4e:f7:d1:aa:
57:99:d0:30:b3:46:dd:a9:a9:78:00:25:9b:3e:3f:5b:05:b5:
60:2d:24:2f:c4:ee:77:33:15:a3:fc:a4:83:8d:a4:1b:49:fb:
db:65:03:7c:ef:e2:81:ab:bf:74:e5:c1:cc:52:0a:0b:eb:84:
15:e7:3c:4a:9c:13:49:f8:85:e7:07:a5:68:b3:03:1e:2c:a0:
34:db:c2:4e:89:b3:a4:48:70:d4:6a:d4:4c:9e:84:cd:f8:36:
cb:63:e0:64:5f:2a:6e:7b:5c:64:e0:6f:b8:af:54:f3:df:93:
6a:90:fb:b0:0f:70:94:79:b5:35:49:77:b7:4d:23:3d:35:ff:
b5:a5:43:3e:47:f4:b8:22:73:88:fd:83:f2:f5:c9:83:65:20:
2d:d1:40:e3:99:26:3c:fa:9c:77:fe:65:9d:ef:89:5d:38:91:
59:91:07:96:51:c2:09:96:32:cf:8a:ef:a4:e0:35:8d:d4:76:
b6:b9:47:d4:b2:63:7c:0f:cd:16:2a:68:b2:d3:3a:0e:14:ce:
d4:8b:aa:df:9a:29:63:5e:4b:bd:0f:dc:82:ea:66:44:d9:45:
57:f0:dd:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:47:49 2025 by rpki-client