Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/50659308-5102-3fed-ac9a-ec288f3afe84.roa
File: 50659308-5102-3fed-ac9a-ec288f3afe84.roa (raw, json)
Hash identifier: ucO+LTOXSu4c9OV0MGm9xmlK764lth5KQ3fb0Wn3yAk=
Subject key identifier: 57:3B:2D:07:2C:28:E8:72:AD:2C:91:00:EE:CB:11:F6:36:8F:47:C9
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F432858493243F733F96C04797EA2F180
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/50659308-5102-3fed-ac9a-ec288f3afe84.roa
Signing time: Sat 15 Mar 2025 13:00:52 +0000
ROA not before: Sat 15 Mar 2025 13:00:52 +0000
ROA not after: Fri 13 Jun 2025 13:00:52 +0000
asID: 8069
IP address blocks: 20.33.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:32:43:f7:33:f9:6c:04:79:7e:a2:f1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Mar 15 13:00:52 2025 GMT
Not After : Jun 13 13:00:52 2025 GMT
Subject: CN=2f9f5da6-b29a-4356-afd9-abfdacc3c3f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:17:9a:ff:a8:49:d1:a5:e0:b7:bc:93:c5:11:
7b:a2:f7:9d:b4:25:49:c2:1a:52:28:9d:49:28:b0:
24:30:df:95:c8:1f:71:ae:a2:6b:f2:3f:b4:42:7d:
86:ff:d6:4b:b0:d4:cd:19:4c:42:fb:43:b7:be:d4:
b1:66:64:e1:62:6a:13:b6:74:65:fb:c8:94:f7:e5:
cf:4d:89:73:18:ef:59:69:98:0c:88:a3:ed:4f:76:
10:ac:77:ca:df:d0:63:26:f7:5d:35:dc:89:29:14:
7f:fe:93:b4:b6:92:3a:4d:ea:41:c9:d7:2e:45:69:
27:a8:84:df:f1:7d:6f:ed:0c:36:b0:3a:a6:02:d8:
f0:37:62:f5:96:0b:24:2d:8b:fc:26:1c:38:4b:bc:
a3:ba:bd:50:72:10:ee:30:5c:b2:ef:b0:f1:55:68:
b6:ee:fd:57:e3:3f:19:ae:62:3f:cc:f5:b5:dd:6d:
89:0c:5e:aa:a9:53:84:71:fb:09:7b:37:42:31:94:
3d:3f:de:29:98:1e:24:17:23:e6:9e:52:0f:ec:7b:
aa:50:2b:66:79:4e:47:e3:93:b1:0d:fb:e0:f9:e8:
a9:9c:e6:ad:83:84:10:98:bb:f6:66:dc:6f:29:0a:
ef:3e:86:64:e3:7c:9b:f1:d1:51:5b:02:a8:89:c1:
f5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:3B:2D:07:2C:28:E8:72:AD:2C:91:00:EE:CB:11:F6:36:8F:47:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/50659308-5102-3fed-ac9a-ec288f3afe84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.39.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:a6:31:c9:85:0b:43:fe:12:05:80:7d:5c:89:91:53:ce:d3:
01:f1:67:56:f6:2f:4e:59:5d:ea:79:32:18:43:3e:88:eb:dd:
04:06:e0:df:72:27:b7:f9:26:3c:3a:64:ed:32:10:af:3d:c0:
39:92:74:a5:df:24:b5:37:2d:36:e2:d6:66:68:e5:d9:ca:cd:
2e:2c:5d:52:58:66:48:cf:47:11:55:45:d2:cd:44:79:88:15:
3b:0e:ef:5e:26:f1:bc:08:37:09:b4:ea:f3:3a:13:76:53:3b:
fb:25:13:73:8b:ec:37:c6:a3:17:70:20:31:b5:c6:6f:07:48:
50:ac:56:1d:fa:ca:25:ee:7d:a1:fe:a2:e4:32:ff:2e:01:f2:
3a:0f:15:aa:98:1b:a1:e3:22:d8:4e:82:65:03:28:a6:35:35:
67:e8:c0:cb:41:d2:18:2c:2e:23:13:a6:94:9d:11:f5:cd:cb:
4d:db:e5:1c:ac:7e:77:17:30:37:38:b2:96:52:80:6b:d8:14:
83:36:ee:76:fc:56:1c:54:b1:42:b0:f3:b1:f8:d8:4a:ea:f7:
3d:c9:20:76:1a:df:24:99:88:51:e7:7c:e2:cb:be:e2:8d:ad:
f8:e7:90:e7:98:46:9b:45:ef:a8:f7:bd:b5:2b:ed:c8:20:c3:
11:b2:b6:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:05:25 2025 by rpki-client