Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/61731640-5c09-3c09-a962-0cd9bcfdf6ab.roa
File: 61731640-5c09-3c09-a962-0cd9bcfdf6ab.roa (raw, json)
Hash identifier: 2Lw608TcCSIMfsnF2gNao+jHNVBNhvN5f5f+iR5ESJ8=
Subject key identifier: AF:BE:8D:E8:ED:23:0A:28:1B:3E:A4:78:F4:96:75:13:27:18:12:10
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584900216AC92BEB52C934C0F4C0
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/61731640-5c09-3c09-a962-0cd9bcfdf6ab.roa
Signing time: Tue 25 Feb 2025 14:00:52 +0000
ROA not before: Tue 25 Feb 2025 14:00:52 +0000
ROA not after: Mon 26 May 2025 13:00:52 +0000
asID: 8069
IP address blocks: 20.33.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:00:21:6a:c9:2b:eb:52:c9:34:c0:f4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Feb 25 14:00:52 2025 GMT
Not After : May 26 13:00:52 2025 GMT
Subject: CN=1962add9-62c4-4e06-9750-1823e271307e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:44:c5:ff:66:69:ae:41:2e:a0:e1:ac:c4:3f:
b6:28:6f:06:52:82:c3:5f:83:1e:47:5a:a6:f3:19:
83:7b:10:a9:f8:6f:c1:23:07:69:1b:f9:67:28:ae:
5a:e6:1b:4a:0b:64:97:79:01:b4:ee:d8:f7:b9:84:
02:5b:10:b4:7f:f4:00:0d:f5:ef:7e:94:ab:59:1e:
4c:36:55:ba:17:05:ab:63:a0:18:53:5b:49:8b:fc:
8f:d1:1b:76:5b:ca:67:8f:1c:9a:6a:cf:00:dd:a9:
09:c6:d7:20:42:09:7f:cc:7e:88:9a:17:3b:51:89:
f1:61:d4:f3:51:01:8e:a9:54:38:0a:8f:1c:1b:c9:
7e:e4:2b:27:c7:0a:c5:64:be:a5:a5:b1:62:43:74:
5b:37:e6:70:ea:03:09:56:51:3c:b7:ef:9b:28:5c:
eb:52:66:3d:6c:c5:4e:bb:88:7f:6f:e2:b2:6e:3a:
47:f2:60:4c:0b:01:f7:fc:3e:0d:17:05:9b:d8:bf:
31:a6:f7:2e:40:7d:1c:24:48:1e:fb:bf:43:35:ea:
a4:f6:d3:16:a8:d8:dd:8c:0c:35:4e:2b:82:c7:52:
ac:10:d5:86:20:c0:9f:12:af:3b:83:de:9a:52:28:
8c:33:5c:8e:78:28:92:61:05:70:4c:22:f6:8d:97:
7f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:BE:8D:E8:ED:23:0A:28:1B:3E:A4:78:F4:96:75:13:27:18:12:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/61731640-5c09-3c09-a962-0cd9bcfdf6ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.29.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:50:35:b3:ec:31:62:f2:3f:e2:eb:e2:96:f4:6e:4f:ab:08:
6a:ce:f2:d7:72:3b:ce:60:89:a6:5b:63:3f:d5:d7:f8:09:1e:
4f:f3:55:b4:86:01:14:8a:d3:20:58:a2:c8:03:8e:f0:f3:83:
9a:fa:e6:08:92:0b:6b:ef:6d:0b:8f:9f:1f:e0:d7:57:35:02:
71:e8:19:03:21:8b:44:e0:ca:30:7f:d5:9d:ee:d1:0a:81:1f:
57:66:a1:d0:a2:dc:53:cc:23:48:d9:8c:ef:02:91:e7:31:43:
5a:01:e4:93:e3:b5:1e:54:a7:ac:6f:e8:31:97:4b:8e:23:aa:
ae:a3:2d:ba:6d:80:35:16:9e:27:7e:36:f0:5c:f7:66:49:48:
bb:58:cb:a6:85:40:6e:51:26:a1:ad:3a:24:ff:76:31:fe:e6:
49:27:91:e7:3c:64:16:60:3d:02:1e:a0:43:10:e1:b8:d8:27:
96:51:27:57:00:fa:2d:37:cb:2c:81:ae:86:03:f6:54:91:e3:
03:81:76:4d:55:c0:0a:48:ab:d8:87:67:55:31:e1:e8:90:f4:
0d:e0:5c:bc:dd:4f:97:68:64:67:8b:40:d4:5e:2f:7a:a9:b4:
77:1c:1c:34:14:bd:64:7d:56:11:38:9d:09:ac:6e:f5:dc:b4:
06:1b:5f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:40:17 2025 by rpki-client