Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c4be3537-2874-3869-b91f-11d82490f73e.roa
File: c4be3537-2874-3869-b91f-11d82490f73e.roa (raw, json)
Hash identifier: yMsKWJQWQDwdt8EpzWXM6ixAiWQNab234MwgajAgZPc=
Subject key identifier: E8:00:61:B3:BA:B5:23:ED:3A:8B:C3:43:CF:C3:5C:A2:13:08:54:DE
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F43285848B35B70B2A472A019282E26C0
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c4be3537-2874-3869-b91f-11d82490f73e.roa
Signing time: Wed 29 Jan 2025 02:00:39 +0000
ROA not before: Wed 29 Jan 2025 02:00:39 +0000
ROA not after: Tue 29 Apr 2025 01:00:39 +0000
asID: 8069
IP address blocks: 20.33.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b3:5b:70:b2:a4:72:a0:19:28:2e:26:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Jan 29 02:00:39 2025 GMT
Not After : Apr 29 01:00:39 2025 GMT
Subject: CN=e1d8e93c-03df-4d5b-b068-5f0cc0e15d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:2b:b0:7d:f8:35:c5:e8:16:59:39:8f:c9:d7:
61:1a:1e:20:35:33:1b:c8:e2:f3:e1:b4:64:af:55:
99:3d:07:09:a7:ca:02:c7:fc:57:60:70:57:83:99:
6d:eb:c1:fa:c4:08:51:23:de:0e:69:30:ac:b2:be:
5c:7e:66:c0:1a:58:fa:05:b0:14:69:42:2e:3e:3c:
3c:06:f6:c5:af:5c:fa:2c:7f:7e:f3:47:74:71:f7:
62:29:68:58:ce:b0:16:1f:94:a6:2b:30:53:65:35:
2e:7b:8d:83:d0:1a:77:7b:01:3b:c6:08:7d:e9:dd:
33:23:65:09:bf:37:32:b6:04:46:fe:fd:be:06:73:
2a:1b:ad:19:62:5b:ef:e3:59:4d:c6:d4:a3:1e:43:
55:a5:d3:4f:c8:3a:77:4d:06:e0:85:7e:59:66:1b:
5a:5b:04:09:45:8f:14:c0:ba:2e:61:6d:99:12:14:
70:21:30:a5:d1:ac:85:34:69:97:20:20:5c:9e:95:
d5:28:56:57:90:a8:c1:b5:b2:e3:55:51:ef:d4:49:
a8:5c:96:16:f0:8c:4a:8d:6c:7d:47:43:46:1c:d5:
25:64:41:2f:12:ef:87:4c:39:a9:f8:03:dc:ed:1b:
8f:01:b5:45:b1:72:eb:c9:8c:bf:c9:90:c8:b1:6e:
75:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:00:61:B3:BA:B5:23:ED:3A:8B:C3:43:CF:C3:5C:A2:13:08:54:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c4be3537-2874-3869-b91f-11d82490f73e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.132.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:28:ea:3d:1b:f9:6d:a5:d5:46:9e:6f:47:a0:97:85:a0:cc:
98:05:b1:af:3c:cf:85:6a:e8:06:9f:ad:3e:b2:ef:40:da:2e:
fd:d1:eb:e4:90:d4:19:d8:9a:d2:01:c3:d2:ea:ce:16:dc:c5:
4a:98:33:b7:f7:2e:90:e1:92:8e:7f:f0:c2:0e:95:c8:69:c4:
d8:e2:26:71:02:eb:54:0a:9d:d7:15:1e:f1:e4:37:e5:fd:f3:
d2:52:fc:bf:0b:47:27:ed:45:99:e4:38:1b:2a:dd:a1:f2:48:
ea:53:e4:ed:7f:b4:c3:90:07:59:2e:b0:4c:a1:1d:68:40:5b:
d6:6d:65:81:6e:52:c4:77:d9:cd:ca:0f:41:dc:cf:a1:97:81:
0a:c4:51:58:02:15:2e:8b:e5:db:23:61:3b:5e:5b:60:a4:c3:
39:b0:88:f2:b1:ec:94:4d:3d:e3:75:40:c6:0e:de:f1:2b:d6:
66:96:ef:62:2b:b9:6b:4a:8a:fd:c6:02:e9:9c:0d:73:eb:e4:
9e:03:08:18:cc:02:57:05:d5:a5:db:96:33:9f:e7:72:e6:c6:
6a:4e:0e:86:7d:e9:0f:c7:d2:5d:74:cb:59:44:fa:58:f3:48:
4d:3b:96:d5:06:ea:d0:60:07:e3:da:65:01:50:75:8b:5d:92:
fd:46:fa:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:42:32 2025 by rpki-client