Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/afceef4f-d98a-3a55-87af-6d0e1ed3d7c7.roa
File: afceef4f-d98a-3a55-87af-6d0e1ed3d7c7.roa (raw, json)
Hash identifier: W5hYP1U7VNKxCVcd/AQRmxjGTastXQvktXixaKKQriE=
Subject key identifier: 59:0F:95:E6:42:14:6B:52:B5:78:B9:DD:CB:29:0B:CB:C2:3E:14:7E
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F43285848A99635996D11C4CBCDABB400
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/afceef4f-d98a-3a55-87af-6d0e1ed3d7c7.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 8069
IP address blocks: 20.33.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:35:99:6d:11:c4:cb:cd:ab:b4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=8bee96a5-cbe0-46de-b5a6-3c3cf1fd8257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:84:3b:3d:d4:8d:be:9c:06:f4:ed:08:36:b0:
25:3b:cb:bc:46:f0:ed:d1:5a:8f:59:c1:c9:a6:30:
96:75:cb:16:95:06:76:7f:0f:ae:97:1f:3e:6a:f1:
98:29:65:1a:2c:82:40:fd:25:9f:e8:78:e3:dc:78:
73:18:e4:60:7d:54:7c:6c:af:a8:04:eb:ac:42:14:
60:2f:6d:ec:1c:fa:24:9c:7c:47:0a:b8:de:0a:3d:
cf:b1:7f:0d:8b:eb:4f:77:a5:e5:54:87:2b:e9:a0:
b4:37:15:ad:98:83:0b:23:14:e2:44:9e:af:32:3e:
b8:54:15:ad:7b:50:84:31:6b:d8:67:11:e9:9c:86:
cb:99:13:78:a5:43:be:65:fc:19:1a:4a:2f:4a:9a:
96:2c:e3:5c:59:ee:98:5e:47:76:80:f9:a5:ce:dd:
8c:c4:0b:02:e1:91:7b:cf:34:b3:94:d3:6d:c0:d2:
56:56:5e:15:a5:10:d2:68:f6:1d:45:dc:a3:5e:c4:
fe:5d:11:66:cd:4a:93:04:f2:fb:ea:b2:58:9a:ae:
78:23:76:44:87:da:b3:fb:7f:75:99:67:55:d5:87:
5f:0b:d8:e8:11:69:67:4d:a8:48:20:60:d0:e5:cb:
fe:d9:14:4f:1f:ee:26:9c:ea:b5:2c:97:8b:81:db:
8e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:0F:95:E6:42:14:6B:52:B5:78:B9:DD:CB:29:0B:CB:C2:3E:14:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/afceef4f-d98a-3a55-87af-6d0e1ed3d7c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.173.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:4c:9b:4e:b3:52:01:13:3e:8f:1f:52:f8:68:de:5d:74:8d:
00:fc:10:2d:fc:e7:10:11:34:c0:7c:2b:93:93:cc:2d:32:8e:
ae:19:e1:9d:c4:4f:10:70:e0:a9:02:ca:3e:11:e0:2e:66:25:
db:bf:a4:27:9a:be:fa:ac:f8:01:cb:e6:f5:f9:72:33:18:9b:
2c:69:9e:80:6d:31:77:dd:f8:2b:a8:48:81:e2:00:a9:d7:fc:
99:92:7e:76:4c:b4:68:20:6b:50:df:e4:f7:54:3c:9f:56:47:
9a:ef:c6:a7:8f:d0:4a:15:47:29:25:53:6f:be:d7:d0:45:75:
86:18:3c:91:05:33:ab:ba:7d:ec:74:c5:7b:1f:aa:12:66:fc:
62:f1:a0:24:9b:f7:3e:f9:c8:b0:d4:44:fc:e4:f1:b8:c9:95:
c4:fb:8e:db:4c:e2:8c:15:70:ee:c3:f9:bb:80:7e:20:01:43:
76:94:f5:31:aa:97:8b:72:54:be:34:91:1f:80:7a:25:f6:d8:
43:5c:bd:5c:67:1c:53:61:d0:49:2e:ad:a3:ff:a5:bc:5f:0b:
6b:1d:e4:3e:d8:0b:7b:4a:1b:82:ac:8d:2c:b6:e4:0a:e0:57:
66:f1:b7:e9:24:01:09:c8:2a:57:c1:d9:16:e4:02:f8:78:86:
36:96:85:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:40:12 2025 by rpki-client