Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/37580c0c-2a55-33b3-8370-f1de0df7a3d3.roa
File: 37580c0c-2a55-33b3-8370-f1de0df7a3d3.roa (raw, json)
Hash identifier: X8EFJzzKSWAX+HpLqK2PVqj3W2FSrlbljX/GfqcxSz8=
Subject key identifier: 9B:41:FA:C0:B7:D0:6D:49:AF:2A:08:4C:A3:00:90:D6:CB:49:5E:19
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F43285848E0069E1E5066E53487007040
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/37580c0c-2a55-33b3-8370-f1de0df7a3d3.roa
Signing time: Fri 14 Feb 2025 02:00:39 +0000
ROA not before: Fri 14 Feb 2025 02:00:39 +0000
ROA not after: Thu 15 May 2025 01:00:39 +0000
asID: 8069
IP address blocks: 20.33.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e0:06:9e:1e:50:66:e5:34:87:00:70:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Feb 14 02:00:39 2025 GMT
Not After : May 15 01:00:39 2025 GMT
Subject: CN=616534d7-ccef-4bec-8dd0-f3cb85330bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:24:a4:36:7d:74:e7:c2:b1:a0:d2:b6:fa:06:
0f:3d:ab:27:ff:49:70:41:98:8d:41:2c:4f:93:5c:
46:9f:98:b7:1a:50:0f:78:45:9c:4d:97:85:f3:8d:
0b:c2:14:52:09:b3:74:79:85:44:2b:31:4c:9e:0d:
35:40:5b:8a:58:22:f6:79:43:99:ee:3d:85:05:7b:
7e:cf:5c:16:5f:83:19:37:c1:ae:25:ce:71:2a:a2:
4f:c7:92:32:38:34:04:ea:2a:76:79:b9:d5:8a:0e:
99:9f:b3:49:47:92:f9:75:68:38:0e:7a:99:21:31:
72:18:44:b1:31:ff:a2:6d:7f:f8:16:20:c8:2f:4d:
91:c2:87:90:0b:6e:e9:7d:d6:ae:1f:8b:91:31:9d:
6e:f6:9b:55:be:7d:d2:d2:c8:59:68:11:1e:65:13:
f9:54:f0:0a:88:79:96:f2:55:1e:de:65:84:2b:64:
48:2e:22:14:54:db:50:0b:1a:2a:31:44:09:75:0f:
d5:8c:a2:fe:0a:e4:92:29:ff:3f:2f:bc:26:0f:74:
45:b2:43:d4:da:53:ed:64:fc:a5:51:27:8a:a0:cd:
35:e6:3f:f9:f1:9e:fd:31:ed:86:0b:2d:09:af:d4:
e0:c4:0b:81:26:74:f9:02:89:5e:74:cb:1b:5b:8b:
e2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:41:FA:C0:B7:D0:6D:49:AF:2A:08:4C:A3:00:90:D6:CB:49:5E:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/37580c0c-2a55-33b3-8370-f1de0df7a3d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.96.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:42:18:8c:b9:86:3c:5f:1d:42:0c:df:98:38:e1:3f:ce:2c:
2a:dc:56:0d:58:61:29:31:2a:51:98:0a:c1:da:ed:e3:5e:27:
10:bd:d2:c2:55:3b:f3:b0:9b:75:a5:5e:85:39:2e:c4:51:2a:
50:e6:a2:48:01:18:83:d3:ed:e9:91:12:67:b9:87:f5:e0:85:
ba:ac:cd:64:2f:a1:9d:85:2f:5d:f9:7e:c5:77:db:c3:c3:d8:
a0:95:36:ce:50:8d:59:1c:12:d7:5b:a2:dc:a2:32:cf:36:b1:
90:ff:e3:0d:8e:d8:3c:58:9c:cc:6a:e7:a2:80:7c:9c:fb:79:
2e:18:60:5a:9f:e0:c7:93:58:37:5f:d0:c0:5a:f8:59:a0:4a:
fa:10:79:71:10:92:9c:38:16:f7:7e:0e:68:8f:7e:a0:d3:59:
fd:e6:a8:9f:13:32:38:74:54:7f:3e:c2:de:e2:7d:7b:20:b8:
56:a9:da:84:c9:2f:28:90:45:2b:ad:61:c8:d2:70:f2:c1:b8:
58:c1:24:2f:56:d5:8b:62:18:da:28:4c:38:0a:b9:18:34:00:
57:b6:ec:52:26:b6:a7:83:9a:f3:b7:6d:5e:91:79:11:0a:63:
f2:60:3c:89:2f:40:02:1b:70:56:68:3a:9e:20:e8:ec:83:c1:
4f:1f:3c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:37:04 2025 by rpki-client