Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b7b843e5-1b24-372c-a453-258435c10dbf.roa
File: b7b843e5-1b24-372c-a453-258435c10dbf.roa (raw, json)
Hash identifier: G1JKbQbYl7okBvcVlV4C75jNVaimNSEo6IQb9HOncFg=
Subject key identifier: 81:1C:3E:63:E0:1D:FE:F5:21:BF:07:B8:EF:74:87:B6:36:C3:89:4D
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584954477EEA9571B6DFC89681C0
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b7b843e5-1b24-372c-a453-258435c10dbf.roa
Signing time: Thu 27 Mar 2025 17:25:47 +0000
ROA not before: Thu 27 Mar 2025 17:25:47 +0000
ROA not after: Wed 25 Jun 2025 17:25:47 +0000
asID: 8069
IP address blocks: 20.153.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:54:47:7e:ea:95:71:b6:df:c8:96:81:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Mar 27 17:25:47 2025 GMT
Not After : Jun 25 17:25:47 2025 GMT
Subject: CN=4d50ec0a-94e6-46bc-a844-1b00cc839240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:74:ab:81:01:ca:10:25:b8:22:ec:dd:3b:2a:
29:35:33:bf:c4:36:60:bc:cd:ee:4f:ed:aa:dd:01:
ed:1e:13:86:a9:57:18:16:20:e9:2d:fe:a6:2c:08:
73:c2:12:15:6f:f5:32:b5:51:2d:f5:55:03:b6:c0:
a9:04:c8:bd:3e:b9:2b:7c:5d:33:7d:e9:30:78:dc:
bf:3c:4a:0b:26:95:53:28:23:f1:c6:cf:59:7a:62:
48:c0:1c:54:c4:45:f0:65:f5:48:ce:b8:fc:9d:40:
ce:26:91:0c:78:93:0e:a4:aa:74:67:da:a8:a9:5b:
c4:15:79:1f:7f:f0:07:99:66:ae:f8:b1:a4:a0:bb:
15:74:f3:30:b4:eb:06:db:c8:e4:ad:13:84:03:80:
18:13:5c:f7:5e:78:fe:b6:4b:b4:9c:33:9a:bc:c3:
eb:6d:05:3e:c5:36:d2:0b:9f:0b:6f:0e:98:5e:3a:
b0:20:d0:c0:bf:dd:8c:0e:7c:76:80:cc:ef:da:0f:
79:78:23:94:55:42:21:f5:da:39:a4:dd:73:1e:cf:
03:47:4a:83:2c:4e:35:34:2d:5c:07:ec:78:fb:e6:
be:6b:c3:f8:ca:7c:ab:90:d6:fa:0e:8b:29:ce:90:
41:90:7d:db:78:5f:47:e7:de:8a:82:71:42:ed:c3:
38:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:1C:3E:63:E0:1D:FE:F5:21:BF:07:B8:EF:74:87:B6:36:C3:89:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b7b843e5-1b24-372c-a453-258435c10dbf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.153.141.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:8e:8a:2d:03:6f:8d:d4:61:81:b2:02:f1:55:e0:9f:14:10:
79:38:9a:ba:86:5b:3f:6d:81:eb:ca:b6:d3:e4:83:34:a1:d7:
4d:d5:9f:81:99:65:df:d9:26:24:db:5b:8f:46:b4:46:bc:4d:
47:a1:81:6e:f0:bc:9c:88:40:39:17:80:8f:38:1f:69:47:86:
90:8a:32:86:85:1f:c0:63:76:82:9c:c1:18:8b:94:af:e7:76:
bf:7c:a5:aa:11:0d:fa:da:c4:52:c4:3a:3b:04:9e:1d:31:d3:
7b:25:fe:ea:c7:04:1d:16:a7:98:46:93:47:da:eb:f6:8c:3f:
2d:1b:db:1a:8b:5a:ae:2b:04:c0:1b:4a:25:5e:7c:37:a6:ca:
99:15:c7:4f:f5:bb:60:0c:3a:c5:89:44:cc:e1:42:fa:01:db:
4f:38:87:58:8f:b2:9b:48:6a:bf:d0:68:f7:f7:c8:7c:c3:3b:
96:c2:f3:21:cd:b0:11:d6:fb:28:8d:58:55:68:74:6c:d8:96:
73:3b:21:bf:86:e9:94:b7:fc:8e:f9:51:16:30:f8:63:d2:d3:
ab:76:87:0f:15:13:ea:f3:9a:8d:59:24:d6:23:95:5b:9d:ae:
ab:56:c2:f6:cf:fa:d1:2a:cf:de:ba:aa:1c:ef:c8:e3:69:64:
69:28:6d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:37:09 2025 by rpki-client