Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3dc0fad7-7fb6-3ddd-9a11-e7aeaf916437.roa
File: 3dc0fad7-7fb6-3ddd-9a11-e7aeaf916437.roa (raw, json)
Hash identifier: RYi4+0+KvWHSCzz5eh65FMycVFgBRDAR8nCZlWwujp0=
Subject key identifier: A5:19:8C:C8:32:78:C2:62:19:A0:D1:AC:4C:AC:A2:C2:BA:54:19:C6
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F432858489D05ED36020B2FCB21F92800
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3dc0fad7-7fb6-3ddd-9a11-e7aeaf916437.roa
Signing time: Tue 21 Jan 2025 02:00:39 +0000
ROA not before: Tue 21 Jan 2025 02:00:39 +0000
ROA not after: Mon 21 Apr 2025 01:00:39 +0000
asID: 8069
IP address blocks: 20.33.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9d:05:ed:36:02:0b:2f:cb:21:f9:28:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Jan 21 02:00:39 2025 GMT
Not After : Apr 21 01:00:39 2025 GMT
Subject: CN=87a274d9-d013-4413-9589-705cd053f0af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d6:28:c4:68:e3:d9:8a:10:43:72:be:5f:46:
14:0a:56:cd:ce:0f:2d:75:b5:20:69:82:5d:ab:b0:
9e:49:63:b4:34:19:4f:3b:e9:f4:f0:bc:a6:53:b6:
85:a0:9b:6b:d3:1c:fa:90:d8:22:28:4c:52:11:18:
05:71:5e:21:2b:53:8e:3c:26:a0:b3:d7:dc:ec:5e:
8f:5b:2e:51:30:4b:8e:fa:13:f7:ec:cd:e8:99:10:
76:2c:e7:d1:8e:85:83:a8:a0:ae:89:99:bc:3c:bb:
39:30:7e:fb:ce:0c:57:f6:94:b0:e0:58:ec:e0:ee:
b1:48:cb:3f:8f:37:e7:37:89:d0:1d:94:03:5b:90:
b9:3a:6a:42:6b:f9:5c:9e:79:13:f9:fa:d1:f8:64:
13:b7:ff:ef:7a:30:04:68:d9:42:89:96:8a:d9:b4:
6c:b5:97:be:54:ea:dd:92:90:e0:ee:7e:ac:04:1c:
8e:20:1c:78:95:1b:34:e7:99:f2:96:53:26:ee:26:
28:03:db:35:9b:61:52:3b:70:16:d8:ca:b3:da:64:
38:77:a8:88:d8:68:2e:01:1a:42:5c:7f:3d:fa:ba:
f4:01:5d:8a:80:0a:7f:29:90:b0:60:2c:f9:e1:c2:
c3:03:27:9f:80:5e:67:ca:82:b1:2e:72:63:91:53:
3f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:19:8C:C8:32:78:C2:62:19:A0:D1:AC:4C:AC:A2:C2:BA:54:19:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3dc0fad7-7fb6-3ddd-9a11-e7aeaf916437.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.82.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:53:16:70:30:42:71:2d:2a:36:f6:1d:95:27:46:04:c0:82:
3c:fb:77:e5:91:79:64:91:1f:d1:71:ed:c4:86:9f:19:de:a7:
a0:75:96:8e:da:84:5d:7a:61:13:44:c2:fe:31:86:b1:bd:1e:
4a:e5:c8:d7:dd:0a:3f:c8:5e:59:03:32:c9:c7:6f:17:61:b3:
d7:5f:51:d7:7b:fe:19:52:60:65:03:73:b9:9b:5e:27:ce:81:
f5:a8:1d:08:ba:39:4b:a9:6d:59:ef:6e:ad:f3:7f:27:77:f7:
ce:fa:ff:83:ee:60:12:9a:d9:5c:2b:4e:50:4f:3d:e8:88:bb:
92:e3:36:f6:63:8d:b8:53:83:34:0c:0f:df:de:7d:7c:54:99:
5d:7c:08:4f:d7:03:36:2d:3e:0c:8e:36:2f:7e:c5:ab:51:6c:
0f:2a:c6:82:e1:e5:0e:27:7e:7d:98:28:65:4b:4f:83:38:ad:
71:cd:e4:4d:27:f0:5b:51:95:8b:c4:6c:29:7b:61:16:e2:b3:
c6:ef:7f:36:3d:18:e9:e9:ae:67:43:fa:52:1b:0f:37:d8:4f:
02:0b:39:87:e4:de:0c:90:2a:93:8f:6f:3f:f5:f5:70:80:1f:
07:9f:ac:44:2a:6c:24:e2:1d:86:c2:16:17:3f:af:6a:c4:42:
33:12:98:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:40:03 2025 by rpki-client