Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/72697b93-e646-3a7c-af08-bda99f4f1b1f.roa
File: 72697b93-e646-3a7c-af08-bda99f4f1b1f.roa (raw, json)
Hash identifier: CLtwUCWlG2ilC1kJoMxGgltpXF500Wr2C7EySZ1y3jk=
Subject key identifier: 98:D7:7A:DD:24:45:70:11:34:EE:D4:C6:F1:DC:0A:5D:03:B9:05:8B
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F43285849544766B3A8BCBC972455D9C0
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/72697b93-e646-3a7c-af08-bda99f4f1b1f.roa
Signing time: Thu 27 Mar 2025 17:25:35 +0000
ROA not before: Thu 27 Mar 2025 17:25:35 +0000
ROA not after: Wed 25 Jun 2025 17:25:35 +0000
asID: 8069
IP address blocks: 20.153.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:54:47:66:b3:a8:bc:bc:97:24:55:d9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Mar 27 17:25:35 2025 GMT
Not After : Jun 25 17:25:35 2025 GMT
Subject: CN=4fda0823-1af0-4a59-a57c-56d79a34c9bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5e:0d:5e:e0:3c:18:5b:fd:47:21:56:25:97:
29:87:14:0c:e2:46:73:48:1b:a4:13:e3:32:5c:b2:
0a:ca:63:fb:b4:3e:ee:cf:8b:6c:53:09:ca:24:dd:
2b:97:22:dd:73:1b:f3:fe:b7:7f:2e:b8:76:89:18:
dc:f5:b9:01:d7:00:88:2f:15:5c:6e:af:d3:a0:69:
13:a1:12:55:4b:a4:09:5a:cc:f9:96:8d:dc:77:7c:
dd:f8:8a:b2:54:1c:5d:d9:18:06:f6:23:c7:98:78:
8e:80:77:e7:6c:f3:38:b4:3a:c9:9d:23:c2:84:37:
b7:a8:d8:1e:64:88:7a:f9:21:c6:61:4c:42:01:20:
5e:2b:10:16:e4:ec:f0:e0:d7:bf:70:98:d9:b4:69:
a6:6e:d7:81:2a:e2:88:e6:38:5f:d5:59:89:d5:80:
d1:ee:68:d2:02:8e:fc:fe:b8:97:a6:38:e0:08:9c:
6c:44:f4:e9:35:db:9c:55:b7:25:bd:65:a3:5c:d8:
2c:98:02:d6:c6:9f:76:2f:36:ce:c5:a0:79:01:f4:
4c:9f:0c:74:12:06:28:51:1c:57:77:11:4b:0b:a2:
af:62:12:ae:63:49:d4:d5:c2:5f:f1:35:cf:29:81:
90:89:20:4e:a5:aa:aa:26:f5:2f:92:b7:35:16:4c:
2e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D7:7A:DD:24:45:70:11:34:EE:D4:C6:F1:DC:0A:5D:03:B9:05:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/72697b93-e646-3a7c-af08-bda99f4f1b1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.153.143.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:06:6d:7c:19:1c:11:6e:f4:a8:3d:56:1d:53:a6:ef:4b:24:
76:c5:b7:68:a0:dc:33:59:55:c6:fa:e3:d8:3b:75:56:d4:a1:
5d:48:82:87:67:cf:04:75:da:d1:e8:cb:80:55:23:f5:c4:0c:
1d:2a:42:09:50:32:6b:30:ab:34:72:69:a2:ab:71:58:0a:3d:
ac:9a:25:36:81:54:1b:30:65:0b:92:b9:0c:86:1d:7b:74:6a:
0a:c6:fe:d9:4b:e5:ed:f8:14:d6:ad:4d:7f:ad:74:44:a9:d5:
b1:c7:4b:ce:f8:ab:26:be:e1:83:11:bb:c9:f0:93:49:74:c7:
50:ec:4b:e3:3b:5a:3b:fa:d3:1d:5a:4f:5c:2c:c0:11:b7:b8:
7e:b7:7f:2d:22:11:33:5c:fa:4d:2b:c2:8a:45:2a:10:cf:4a:
89:58:17:a4:a2:76:10:9b:92:a4:5d:13:a8:a6:06:29:52:a1:
6f:61:a5:24:ff:d7:35:9a:b3:36:17:ee:09:05:30:ed:6e:23:
1a:da:b1:9d:62:5b:7e:d2:92:cb:72:d3:cd:e1:a5:bd:1c:b1:
b8:f3:2e:0b:9e:c4:32:f6:ad:34:3b:bb:5a:9a:e9:02:4f:a3:
03:73:bd:1e:e8:e3:e3:be:e4:64:4f:55:f3:ea:19:bd:b9:5e:
5d:0c:33:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:37:00 2025 by rpki-client