Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5c842db2-d012-3551-87ea-7b6b22348b27.roa
File: 5c842db2-d012-3551-87ea-7b6b22348b27.roa (raw, json)
Hash identifier: K5tHNoHh5gmBotOSMrTfZU+X+jg1MxPrfH1Qi1qRpnI=
Subject key identifier: 80:8E:FD:34:F8:3C:8B:80:14:46:38:C6:2E:14:20:4A:5F:5D:B3:7F
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F432858489D05EC16207D64815C77D360
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5c842db2-d012-3551-87ea-7b6b22348b27.roa
Signing time: Tue 21 Jan 2025 02:00:39 +0000
ROA not before: Tue 21 Jan 2025 02:00:39 +0000
ROA not after: Mon 21 Apr 2025 01:00:39 +0000
asID: 8069
IP address blocks: 20.33.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9d:05:ec:16:20:7d:64:81:5c:77:d3:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Jan 21 02:00:39 2025 GMT
Not After : Apr 21 01:00:39 2025 GMT
Subject: CN=ee77a198-56d5-4013-8ae2-eb7d311ffe18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f9:d4:46:cb:1b:04:04:f2:5e:7c:f7:28:b8:
35:e6:54:c4:7d:d2:11:97:d4:4c:7e:9b:fe:60:8e:
b3:31:ad:00:89:d3:4f:0a:51:aa:7e:90:10:aa:39:
5c:82:8c:ea:55:07:df:19:d0:0e:47:55:99:d3:6d:
73:86:5e:92:c6:cd:78:55:cd:87:b8:8c:d5:8a:a5:
73:fd:03:86:22:ba:e1:69:d5:97:48:0d:1d:d5:71:
1a:b2:dc:91:a1:80:60:03:1b:91:ca:42:47:cb:d3:
9c:12:6f:2b:51:07:43:db:c0:b2:25:d2:a1:3a:41:
9f:b2:40:4f:d8:15:26:27:d1:29:fb:eb:5b:1c:21:
01:77:b7:6c:90:55:ba:06:eb:3d:61:48:77:e3:32:
34:b4:8f:e2:c5:78:9b:7a:af:ce:50:25:9d:fb:13:
7e:2e:9f:90:cf:8f:fa:b6:27:9a:f4:81:31:52:8b:
9b:fc:ba:d5:8a:c7:5f:b7:92:04:1e:64:4f:5a:20:
65:5e:2a:eb:1a:bd:fc:71:bf:3c:c5:48:25:00:c1:
d4:e1:7c:e1:c0:95:49:a0:19:3f:93:38:a2:56:c5:
f6:1f:d5:46:87:63:c7:87:8d:33:1d:4b:75:a8:80:
d6:83:3a:25:73:c1:47:2a:ab:98:83:f3:8d:99:18:
f9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:8E:FD:34:F8:3C:8B:80:14:46:38:C6:2E:14:20:4A:5F:5D:B3:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5c842db2-d012-3551-87ea-7b6b22348b27.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.239.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:58:dd:f2:69:f4:d1:17:65:5f:85:d8:48:7c:c8:69:de:4f:
e4:8d:5b:d7:54:4d:d4:5c:d8:2b:8c:c2:d7:b2:57:8d:66:e5:
e1:43:9b:da:0e:01:91:11:9a:4d:0d:4f:64:ae:b2:63:78:bb:
01:d6:33:a1:13:1f:44:71:40:2d:22:c0:94:e2:59:eb:9b:9b:
f1:9d:1e:aa:ee:79:e7:94:34:61:55:0e:d7:6b:e9:49:9f:34:
74:22:fa:21:31:2f:99:4e:40:5d:6f:1f:d4:0d:f8:ae:09:23:
14:2f:5b:fa:73:aa:88:49:54:59:35:22:50:23:0e:ba:31:0f:
17:a6:c1:ab:19:27:3d:37:95:3d:30:a9:79:3c:fb:10:c1:ab:
97:22:b0:2a:fd:68:0c:f0:3b:36:de:54:56:9a:d9:92:73:83:
41:1d:b4:2a:5e:46:3f:61:19:28:ef:28:4c:1a:a2:76:65:56:
53:f0:1c:aa:e7:57:85:80:3d:95:d4:c0:78:29:c3:45:a6:3e:
b3:ff:fe:ed:0d:8b:b3:c6:54:a2:ea:75:32:8f:67:b8:3f:61:
0a:d6:5d:64:2f:b4:9c:a9:85:dc:82:7b:af:cd:03:1c:82:ac:
2c:f6:e2:34:7c:1b:26:fa:07:4b:af:fe:be:bf:0d:f4:47:64:
4b:ba:2d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:50:15 2025 by rpki-client