Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/788d5c93-80f1-3a3c-ae31-932a1affb56c.roa
File: 788d5c93-80f1-3a3c-ae31-932a1affb56c.roa (raw, json)
Hash identifier: gAL11fNVUDPD0K6h/NhU6QOwhaGMCzY8OC2oGCkl2m8=
Subject key identifier: 9E:03:DF:9A:7B:65:39:33:26:F2:4C:6E:26:DF:73:0E:0F:57:BA:1E
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F43285848A9963589B0A6810C97B722C0
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/788d5c93-80f1-3a3c-ae31-932a1affb56c.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 8069
IP address blocks: 20.33.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:35:89:b0:a6:81:0c:97:b7:22:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=a9777aaa-e6ce-4a65-a88e-2e006d3f8286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:00:1b:85:95:76:dc:99:da:4e:3a:4e:95:79:
26:e0:2c:41:0c:b2:30:27:7c:06:3c:f6:f1:ef:1e:
cd:7f:79:b3:fa:6e:7a:cb:5c:d9:48:46:e7:1b:16:
62:3e:0e:63:ca:e8:60:da:54:45:b7:05:1c:f5:17:
bc:61:71:3a:40:d7:87:2f:00:47:b1:20:5d:c5:05:
40:30:06:03:d9:e5:ce:71:91:b0:d4:b6:3e:22:10:
39:d7:7d:ce:0b:4b:ed:d9:8f:03:10:58:0e:5a:0b:
4d:c6:79:a6:3f:cb:53:dd:e1:2e:7f:b0:11:b0:08:
33:81:38:d9:44:4b:2e:6e:8d:49:77:e9:6f:d8:1c:
0e:4a:f2:f4:be:eb:0d:88:e1:26:c4:09:42:9c:38:
31:96:b5:bc:67:9b:8d:de:ce:bb:7e:e6:e2:e4:45:
61:e3:6b:a8:e2:50:77:c5:eb:96:13:0d:84:eb:58:
0a:dc:eb:c6:46:b9:7c:e3:94:1e:d7:c3:6b:8d:9e:
df:be:f1:2c:78:89:54:a7:38:81:97:6d:76:d0:11:
a4:78:ad:ca:67:cc:4b:7b:17:e7:59:3f:2f:d6:96:
e7:d9:6d:d6:cc:76:89:35:03:40:e9:11:13:f9:22:
f7:fd:14:a4:47:0a:08:31:7a:c8:b8:56:73:a3:c3:
71:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:03:DF:9A:7B:65:39:33:26:F2:4C:6E:26:DF:73:0E:0F:57:BA:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/788d5c93-80f1-3a3c-ae31-932a1affb56c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.183.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:92:eb:d1:45:fc:16:f0:53:0d:e0:75:98:80:e0:78:02:c8:
6e:1e:30:14:81:0e:3a:5e:d7:c0:1e:0c:7b:3c:de:18:d0:ae:
c2:9a:c0:04:34:19:b6:c4:44:5e:d5:ee:f6:71:9e:0b:c2:af:
ec:9f:cc:f0:8d:21:43:5d:6c:d0:7f:5b:8c:dd:4f:4b:6c:c9:
05:9f:69:dd:13:6b:78:8e:25:40:05:00:07:39:ad:9c:b7:19:
fb:e8:b9:c8:9b:af:bf:01:44:5c:90:e4:fa:f9:08:45:e2:bb:
e8:01:d1:f8:91:94:6e:4a:9a:7d:12:ff:8d:47:07:8b:5e:86:
bd:23:c2:97:7e:2d:8d:1d:69:2d:27:61:a1:18:eb:65:f2:05:
86:42:b1:5b:01:80:e0:29:d8:69:8e:c7:c9:4e:e0:d9:9d:a9:
cc:23:59:bb:a7:38:5d:09:79:89:35:09:69:55:98:4c:95:22:
c5:47:ec:f0:d6:61:9f:e9:ef:49:35:55:12:9e:5f:b7:36:ec:
ab:da:67:a2:8e:ac:54:c6:84:7a:18:89:c5:e6:5b:e2:f3:93:
5c:75:a0:13:56:b3:0b:d8:04:11:ce:16:9a:8a:c9:27:ef:10:
03:a1:46:d6:49:06:af:d4:5e:7e:26:c1:31:7a:b0:2a:fe:55:
47:18:c2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:37:08 2025 by rpki-client