Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3b7990ec-64d7-3dca-87b5-ed50fec9f0a1.roa
File: 3b7990ec-64d7-3dca-87b5-ed50fec9f0a1.roa (raw, json)
Hash identifier: QXK1aihpD4p9iY6NxejOByB6r4ny1KTeiX1MtKJ+uFA=
Subject key identifier: 1C:5D:F0:BA:93:B7:23:DA:F6:E2:41:5E:BB:CD:5A:AB:BF:91:2A:49
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F43285838BBA154F2852E16651596DC60
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3b7990ec-64d7-3dca-87b5-ed50fec9f0a1.roa
Signing time: Mon 25 Jan 2021 05:00:00 +0000
ROA not before: Mon 25 Jan 2021 05:00:00 +0000
ROA not after: Sat 13 Apr 2030 04:00:00 +0000
asID: 8069
IP address blocks: 20.157.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:38:bb:a1:54:f2:85:2e:16:65:15:96:dc:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Jan 25 05:00:00 2021 GMT
Not After : Apr 13 04:00:00 2030 GMT
Subject: CN=3c5c9b30-cdaa-41a7-be40-5bb9e64da9f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f1:51:af:97:3b:de:70:e3:8d:02:bb:ca:b1:
f6:9c:e1:4c:d1:4f:62:97:70:05:f7:6b:ea:1b:55:
7d:28:db:f9:1f:d2:2e:71:3f:f5:d9:61:4d:12:8c:
d6:be:6d:f0:e9:2b:e8:b7:5e:1e:e7:2d:b2:73:2c:
d2:da:4a:05:b9:b5:1f:a2:86:26:f9:53:fa:39:37:
7b:64:87:ef:96:85:fa:9e:53:b7:9c:0d:d6:f8:49:
6f:04:c9:5b:8a:45:7b:b3:d1:9d:1f:9c:cc:f2:d7:
94:a9:07:14:aa:c4:f2:6c:68:18:09:05:8d:bb:86:
cf:68:e2:52:f4:18:8a:ee:c6:47:21:08:4a:e7:41:
98:8a:c9:89:6b:95:b6:ae:f5:67:24:f5:67:1f:f9:
0f:c4:2e:ff:cc:a6:c0:86:ef:48:ea:fe:25:04:f8:
9e:95:3d:96:66:f2:7c:35:51:a0:ad:dc:18:91:2d:
fd:2d:64:0f:df:06:d2:c4:93:46:4d:00:70:3c:f5:
42:84:01:6d:c7:7c:05:75:40:27:fe:18:c2:30:c7:
7a:ed:e0:1f:c4:4d:18:87:ba:cc:23:10:82:e9:9e:
8e:85:b1:c8:71:ed:86:92:ba:d3:0c:e8:40:01:a0:
34:8a:af:b2:8f:ad:a3:83:aa:4a:fd:ce:9c:c4:2a:
3e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:5D:F0:BA:93:B7:23:DA:F6:E2:41:5E:BB:CD:5A:AB:BF:91:2A:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3b7990ec-64d7-3dca-87b5-ed50fec9f0a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.157.96.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:cd:e5:ea:06:7e:94:8a:92:51:40:00:37:47:f6:73:2d:c1:
5c:3c:89:dd:38:25:30:ee:50:f2:b2:92:3d:c9:04:02:99:7a:
5c:73:17:fc:c0:d7:87:54:90:77:8f:cc:16:93:0a:1c:2f:6f:
97:6c:ef:8c:e4:89:ff:24:1b:6d:dd:aa:ef:97:54:5b:60:30:
e2:de:8b:6e:e1:86:4a:53:45:4d:28:de:54:55:89:31:96:e1:
5d:cf:bd:5f:b6:c6:4a:be:fa:f2:3c:e2:b0:bb:0a:24:03:ed:
bb:35:0f:88:8f:fe:a9:59:13:0d:d5:1c:6a:e1:5a:92:d1:6f:
05:cb:0b:92:86:ef:6f:d2:97:91:83:c3:27:43:62:b3:a6:fc:
7a:a3:b5:4f:53:62:99:47:b8:c5:a8:b9:e2:03:03:bf:78:35:
59:bd:53:09:de:58:2a:ef:aa:62:11:db:5d:6f:f3:63:d9:be:
fc:52:cc:2d:eb:0e:78:2a:8d:ab:5d:28:83:ff:b5:82:7c:d1:
a7:75:87:b5:84:be:9d:44:29:a0:d2:d1:17:a2:5e:05:49:5d:
57:9f:e9:21:ad:39:94:af:02:7a:d4:2e:88:2e:cf:6a:43:e3:
6c:9e:85:b9:14:fc:70:7f:86:e5:32:58:73:50:48:35:ad:ed:
85:65:54:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:40:03 2025 by rpki-client