Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/83bcf86e-8d86-36c4-9a14-fcfd04e9b8dc.roa
File: 83bcf86e-8d86-36c4-9a14-fcfd04e9b8dc.roa (raw, json)
Hash identifier: zzBAHslMb2ytMeZ0kNSBIdj2eD2HwY4g/0CeDMEbXe8=
Subject key identifier: F9:25:3A:2D:48:75:31:73:71:22:AC:B3:30:5C:87:31:A7:BF:86:48
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F43285848F22C2658A3D05C3835863B40
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/83bcf86e-8d86-36c4-9a14-fcfd04e9b8dc.roa
Signing time: Thu 20 Feb 2025 14:00:52 +0000
ROA not before: Thu 20 Feb 2025 14:00:52 +0000
ROA not after: Wed 21 May 2025 13:00:52 +0000
asID: 8069
IP address blocks: 20.33.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:2c:26:58:a3:d0:5c:38:35:86:3b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Feb 20 14:00:52 2025 GMT
Not After : May 21 13:00:52 2025 GMT
Subject: CN=43831505-a44e-4d18-a182-832a92a37b1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e0:42:b8:9a:0b:61:e8:44:48:8d:e3:b2:ec:
c5:4e:bc:ad:82:8c:22:15:0a:12:6a:4f:13:c2:45:
59:ca:94:3c:c3:e9:9a:1c:b5:e3:6d:7d:66:46:15:
61:d9:24:72:ae:a2:da:c5:ed:df:ad:66:18:87:a5:
b2:0b:ec:53:4f:29:e9:8c:cb:c2:29:eb:dc:11:d6:
94:1d:ff:d7:41:d2:7f:03:e3:7f:d6:de:a2:0d:1e:
c2:24:5c:b9:36:b0:39:0e:5b:c0:d9:1a:91:19:7f:
91:5f:10:6b:94:91:5c:25:0c:77:72:a5:9d:e4:1a:
92:4d:e3:2f:a2:44:63:ad:b4:a1:81:44:ed:c5:61:
1d:c7:a6:e0:26:3c:71:40:5f:f7:9c:69:f8:69:45:
b3:e0:ed:9c:62:41:0e:ab:c0:48:a5:37:14:d6:ab:
9b:77:4d:65:24:a5:c4:6c:cc:a3:51:88:a3:17:8a:
3a:7e:e2:9d:04:08:97:84:c3:18:8c:67:d2:a9:ac:
c9:0f:a4:88:c4:9b:bf:6b:2c:b4:19:a1:85:28:46:
9d:ae:05:61:43:6c:3e:47:6d:4e:b4:9e:44:29:1f:
d6:cb:8c:75:c6:02:f5:5e:07:f6:d8:78:c0:a2:5d:
17:fc:6f:33:ed:71:d4:53:9d:ce:f3:27:0c:3c:7d:
c3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:25:3A:2D:48:75:31:73:71:22:AC:B3:30:5C:87:31:A7:BF:86:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/83bcf86e-8d86-36c4-9a14-fcfd04e9b8dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.84.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:91:be:c4:67:fe:2c:2e:4f:a1:a2:20:5e:27:33:75:03:29:
b8:54:bd:aa:d1:c5:92:b6:07:2a:15:75:d2:87:e3:81:6e:2b:
33:01:ee:99:e4:b8:e8:b8:75:4f:23:66:1a:a7:2f:3a:f5:7e:
81:c5:9d:4b:4b:25:d8:98:99:01:8c:65:46:2e:f1:d1:8f:56:
7e:49:a6:ad:50:dc:db:09:5b:99:c1:14:31:47:b1:d2:fd:73:
e2:a0:2d:7a:0a:97:3e:81:fe:1b:6d:a7:d0:f4:1f:46:4d:0f:
1b:67:e6:7b:6a:d8:45:77:94:73:cd:06:b5:cb:d1:a3:aa:53:
43:b5:e8:72:26:ee:ed:36:09:27:1c:86:d7:27:b3:24:d1:59:
7d:41:ea:3a:2f:c6:b0:11:52:54:f3:27:fe:0a:3b:93:f3:f4:
1f:ef:8c:54:cf:00:e2:7e:d2:65:22:51:55:2a:f5:21:5d:6b:
20:1a:50:ac:53:9c:07:53:5e:f7:aa:57:c7:dd:2d:71:01:76:
cc:3f:e5:31:39:b1:7d:fe:42:67:f4:77:ef:d0:14:42:1e:05:
4b:52:a1:83:32:1e:d1:85:47:ec:5f:c3:24:47:28:26:5b:39:
94:fa:db:35:b1:1d:fe:db:65:b3:d0:97:70:35:26:00:c9:f3:
94:56:d0:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:42:42 2025 by rpki-client