Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/871537b1-1a3c-3d03-9ef9-2a8e3f5aa9e9.roa
File: 871537b1-1a3c-3d03-9ef9-2a8e3f5aa9e9.roa (raw, json)
Hash identifier: yhS9B1cPQHvM6tyDV5XhTyIvOOupf1oOrMHAWJEG/8w=
Subject key identifier: A0:14:E1:66:F6:83:B5:B1:BA:49:FD:7F:A5:83:05:0B:E9:51:0B:11
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F432858488AE0AA091020B7D4678E0D80
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/871537b1-1a3c-3d03-9ef9-2a8e3f5aa9e9.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 8069
IP address blocks: 20.33.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:aa:09:10:20:b7:d4:67:8e:0d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=cd855b41-2228-48f5-a72c-c42182f09829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:11:8a:f6:47:ee:ab:a5:26:4a:01:75:af:ef:
f4:e0:06:d9:25:cc:60:6c:71:f8:6f:4d:72:2c:71:
a9:ca:ab:09:4f:d0:fb:b1:ee:70:cb:4c:18:fd:63:
a3:07:7d:a9:d6:9e:c8:25:d5:ad:44:2c:f5:f3:f3:
e1:31:b8:14:88:4b:66:4f:c4:30:fc:d6:94:d7:e3:
5e:67:9a:65:a3:cf:a4:da:0d:65:1e:b0:eb:7d:16:
3e:70:a7:85:a7:69:f1:97:86:19:a8:02:0f:f3:8e:
9b:01:99:ba:5d:57:3f:05:44:d9:32:a2:ef:26:65:
0d:69:4b:3e:41:7d:9d:b6:7f:6c:2c:f7:26:aa:15:
71:2c:60:97:3c:ad:5a:c9:1b:31:88:a1:36:96:81:
76:39:85:17:25:1a:28:39:88:71:8b:44:38:06:14:
83:88:e4:27:0e:81:4f:8a:ba:29:2e:b0:d1:8b:c4:
13:f0:81:c5:01:b4:6c:a2:d3:f7:00:26:eb:9c:00:
b5:17:0f:ab:13:23:0d:be:85:48:61:f3:6b:e0:b8:
c2:27:b5:9b:d4:f2:f8:2d:e3:d1:cf:a5:16:71:a2:
3e:45:9b:e8:84:bb:54:f3:8b:df:10:57:14:2e:b9:
18:de:1a:aa:47:5e:1c:90:cf:a7:65:c7:32:57:4a:
bc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:14:E1:66:F6:83:B5:B1:BA:49:FD:7F:A5:83:05:0B:E9:51:0B:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/871537b1-1a3c-3d03-9ef9-2a8e3f5aa9e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.131.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:1c:00:8e:24:c0:24:23:a1:1a:f4:3a:1d:0f:84:7e:7c:2a:
51:9b:16:84:1d:d6:93:93:b4:4b:d2:61:de:e0:be:71:75:26:
3a:b9:94:57:0f:c4:23:13:a2:63:19:ce:4d:19:38:d2:c9:10:
99:4c:45:15:22:4d:3d:43:d7:e4:fc:4a:70:7a:42:f5:ad:ca:
79:c9:85:2a:e8:57:ee:e8:76:ad:12:c9:20:13:bb:2d:e3:40:
7e:19:c6:93:9f:ae:4e:b5:64:70:03:b3:2c:e3:29:62:25:2a:
1b:fc:f4:ff:02:f6:dd:1b:41:e8:d4:9f:3c:65:c5:a8:06:14:
ea:73:dc:75:a3:1e:77:f6:7f:24:14:94:b7:b4:c1:4a:fb:0f:
55:59:63:a7:9b:07:f8:72:65:a7:d8:46:af:d3:69:b1:03:37:
2b:79:31:02:3f:51:88:f3:4b:56:19:ef:70:25:df:11:99:a1:
87:83:19:7b:30:c3:5d:d1:89:ef:32:87:67:05:21:eb:d7:76:
5d:4d:bf:7b:a5:20:3f:40:6c:a0:ca:8e:26:3f:9f:37:7b:8f:
c7:50:04:7e:db:2e:f7:a1:c0:e8:6f:b0:02:e2:a6:92:a2:c5:
81:a9:8c:aa:99:4b:63:2b:06:69:92:48:10:19:b9:e0:e9:94:
ea:b4:ab:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:37:08 2025 by rpki-client