Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/49ef2e2c-77ef-37c9-b327-24e8ee20ef0b.roa
File: 49ef2e2c-77ef-37c9-b327-24e8ee20ef0b.roa (raw, json)
Hash identifier: KOAS2abGos89Ly+C3HH4YoKAYu+p3yJPRFC8eNCV+Ck=
Subject key identifier: 28:AF:67:6D:FA:17:E7:5F:EA:03:9B:A0:1E:ED:1B:DA:17:AB:5E:D6
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584954476C20885B492E89E3CA80
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/49ef2e2c-77ef-37c9-b327-24e8ee20ef0b.roa
Signing time: Thu 27 Mar 2025 17:25:38 +0000
ROA not before: Thu 27 Mar 2025 17:25:38 +0000
ROA not after: Wed 25 Jun 2025 17:25:38 +0000
asID: 8069
IP address blocks: 20.153.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:54:47:6c:20:88:5b:49:2e:89:e3:ca:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Mar 27 17:25:38 2025 GMT
Not After : Jun 25 17:25:38 2025 GMT
Subject: CN=79055d65-1c6d-4a73-912b-38e8623cca45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6d:70:65:58:39:ce:06:5e:c1:f1:27:0a:de:
2f:9e:8b:49:01:d8:5d:bb:f3:32:68:99:f4:35:3f:
d1:da:a4:d6:d5:9c:7b:b2:34:20:b4:3b:c4:c6:e9:
c0:04:17:77:2c:99:3c:82:de:54:4e:58:7c:bb:04:
3e:6f:23:a7:13:eb:93:bd:61:74:7f:23:98:8c:d1:
0f:4b:b9:34:a7:ce:e9:4d:44:df:8a:3c:ce:6b:01:
74:3e:c0:9a:59:7c:07:fc:6d:3f:db:4b:bb:44:17:
83:e2:88:93:01:7c:aa:57:06:72:39:c9:ee:e3:51:
cb:81:4d:9c:88:eb:c4:bb:ee:e2:c6:1c:fd:62:42:
76:48:68:07:bd:db:7f:e1:7c:b4:8b:0e:7d:e4:19:
0c:b6:08:a9:b2:52:f4:5c:77:fb:2a:8d:36:22:43:
e1:bd:57:63:2b:2b:17:69:d4:ac:ec:f4:ef:23:3c:
c8:9b:5e:0c:df:62:56:5b:d2:82:8c:53:fd:e5:62:
59:b1:fc:b3:44:e2:36:17:68:19:8e:cc:02:c7:ea:
0a:36:df:c7:23:c1:96:65:85:e0:c2:f1:31:fd:28:
2b:b3:d1:ea:db:95:cd:42:5a:a4:ff:6d:b6:e6:cb:
f0:6f:7c:0e:28:f9:a0:58:a4:ce:e8:45:2a:37:c5:
32:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:AF:67:6D:FA:17:E7:5F:EA:03:9B:A0:1E:ED:1B:DA:17:AB:5E:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/49ef2e2c-77ef-37c9-b327-24e8ee20ef0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.153.135.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:54:5d:05:c7:e1:32:81:2e:08:5b:65:ac:de:fc:66:12:f3:
80:0d:e4:51:c8:a3:53:55:0e:e7:65:95:41:41:9b:2b:ad:de:
64:dc:af:af:c5:2e:14:02:d5:80:66:86:d1:3b:e0:8b:4e:80:
ce:db:5e:30:71:5e:95:28:94:8d:ce:9e:c2:c4:69:64:09:39:
a0:30:cf:41:2e:29:3f:61:ae:f0:bf:77:c6:44:0c:6f:f1:45:
33:90:83:46:ad:73:94:f6:48:05:61:a8:c4:25:84:8e:83:a4:
b1:f2:98:b8:e8:16:70:6a:12:e3:ac:48:da:8b:71:ee:62:94:
0e:82:5c:2d:86:77:65:2b:17:30:01:e1:12:3b:4a:2c:1d:6e:
eb:fe:f9:67:ff:e7:7e:b1:79:05:34:16:4c:1e:78:ce:da:71:
17:42:65:cf:cb:34:08:db:5d:11:d7:98:8e:e0:1a:6d:64:55:
ca:04:10:92:39:82:d8:52:58:93:da:5f:7b:c1:fb:50:c6:0e:
20:d2:a5:34:03:8c:9a:e3:39:b2:8d:3f:c1:57:7b:b5:c2:e3:
ee:9e:89:f8:8e:9a:a2:ca:33:de:f2:8d:6e:51:5f:16:5e:1d:
61:19:b1:9a:9c:f9:56:12:ef:cd:dd:f1:ff:5e:00:3d:5a:34:
31:2d:14:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:42:32 2025 by rpki-client