Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/71d0f7d6-9afd-338d-be2b-f05eeb35f338.roa
File: 71d0f7d6-9afd-338d-be2b-f05eeb35f338.roa (raw, json)
Hash identifier: rPBc+8KPp0g0zD0Vo11iYo8ia2p+BspHSiEIZgAmYfI=
Subject key identifier: 61:F3:86:84:51:BB:53:49:DE:4D:BC:52:C2:76:23:A1:1D:79:CF:17
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F432858493AA3E668B4EC9C68BC3CCF80
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/71d0f7d6-9afd-338d-be2b-f05eeb35f338.roa
Signing time: Tue 18 Mar 2025 13:00:50 +0000
ROA not before: Tue 18 Mar 2025 13:00:50 +0000
ROA not after: Mon 16 Jun 2025 13:00:50 +0000
asID: 8069
IP address blocks: 20.33.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3a:a3:e6:68:b4:ec:9c:68:bc:3c:cf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Mar 18 13:00:50 2025 GMT
Not After : Jun 16 13:00:50 2025 GMT
Subject: CN=656d9b9b-b423-4d60-876c-a7df6946d8b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e0:40:2a:7d:a8:22:c6:2f:58:7f:57:4f:ab:
4c:52:4a:48:38:7b:8d:01:98:3d:96:da:7b:59:03:
80:65:8d:82:a7:83:8a:05:fc:f0:55:08:1d:04:fb:
0b:54:ec:46:4f:1c:ac:a6:98:7b:2f:3e:33:97:d4:
88:4a:f1:fb:d1:de:c5:18:60:f1:26:cd:0b:42:d4:
c1:83:5a:18:f2:9d:91:ec:8e:14:40:77:6e:80:ba:
f5:3c:04:64:66:f4:e0:1f:cb:5f:33:cf:03:63:b3:
df:d1:9f:7d:46:d1:ff:bf:98:3c:b1:00:7c:c8:3b:
8e:17:14:95:06:4f:ee:b3:33:f2:6a:72:f0:ed:fd:
f7:27:36:f2:fc:ee:79:5a:f7:81:13:21:da:cb:68:
8c:08:57:3a:5e:42:ee:0a:70:01:e7:05:ee:34:6f:
b6:13:e9:d0:c3:19:fe:b6:75:7a:a9:5c:8c:95:d5:
53:f6:aa:b2:af:55:45:37:d6:27:f5:39:55:25:c3:
f3:45:80:98:65:3c:87:c5:24:b2:00:6f:0b:82:84:
90:49:db:10:6d:eb:e8:af:70:4c:a7:9f:06:6d:c9:
d0:7d:74:6c:58:3c:80:c9:07:38:66:9c:34:0e:e2:
49:59:f5:b7:6c:80:04:b1:9e:32:cb:8d:ea:a6:8f:
36:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F3:86:84:51:BB:53:49:DE:4D:BC:52:C2:76:23:A1:1D:79:CF:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/71d0f7d6-9afd-338d-be2b-f05eeb35f338.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.233.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:90:91:c6:56:6a:ea:9f:c7:08:62:08:46:85:ff:5f:e2:50:
37:52:de:80:2d:73:96:3b:b4:ed:c0:7c:32:90:67:17:40:14:
e4:63:ae:63:ed:a1:2a:f0:ba:e3:e1:5b:fd:1c:a4:66:da:b6:
79:81:23:15:ad:e1:4b:9e:03:e3:42:f7:20:1e:85:3a:1e:a1:
a1:1f:66:08:ee:8f:ea:a8:2f:ad:93:17:f4:c9:be:c0:ce:6a:
51:20:0f:af:4e:25:eb:f1:48:1b:f2:78:32:37:11:fd:b0:f4:
81:9a:45:f7:21:de:80:12:2b:59:c1:83:5a:26:2a:fc:ad:8a:
46:09:f3:f7:33:95:bf:87:bc:a4:ae:c9:70:4b:98:a9:21:bb:
e7:20:33:b0:9e:b9:00:3a:43:1a:b5:c4:f0:d0:08:71:9a:0c:
6c:58:d7:72:b1:22:7e:e7:e9:53:8c:cf:f9:99:f6:03:79:85:
3d:90:c9:3a:9f:cb:ae:b3:37:82:14:7e:06:2d:a0:75:10:0d:
c0:d6:0c:02:54:67:08:d3:19:c9:be:32:08:3a:9f:5b:f4:cf:
db:43:80:3e:a3:42:94:4a:20:fc:1f:e7:c1:5b:f1:d1:a0:d0:
4e:47:26:d6:db:f6:fe:dc:a1:f4:ca:e1:c1:34:8d:e1:f9:00:
65:e8:27:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:40:14 2025 by rpki-client