Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ceaea99f-2361-3e42-81dc-2424d99387d5.roa
File: ceaea99f-2361-3e42-81dc-2424d99387d5.roa (raw, json)
Hash identifier: o7LCl75hhoCH8ncounOm716+q3RINZTDmfJAkVVqXgQ=
Subject key identifier: 42:00:27:05:43:4D:92:9C:C1:39:12:3E:0D:C0:F5:69:D8:D4:71:6D
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F43285848E59BD2F95ED23D093BA2C700
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ceaea99f-2361-3e42-81dc-2424d99387d5.roa
Signing time: Sun 16 Feb 2025 02:00:40 +0000
ROA not before: Sun 16 Feb 2025 02:00:40 +0000
ROA not after: Sat 17 May 2025 01:00:40 +0000
asID: 8069
IP address blocks: 20.33.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e5:9b:d2:f9:5e:d2:3d:09:3b:a2:c7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Feb 16 02:00:40 2025 GMT
Not After : May 17 01:00:40 2025 GMT
Subject: CN=3b9b8be5-b4d4-49c5-bb9b-29c2ebc5c096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:6c:18:3b:54:fe:7f:27:3a:db:bc:32:3a:67:
4b:af:cc:9b:25:7e:60:25:6b:c8:38:a1:e8:fe:34:
a7:20:15:b7:1c:d3:d7:7a:83:43:73:83:24:31:cf:
6a:55:43:a2:71:15:e7:80:e8:de:fc:4d:d3:64:12:
d5:2c:8f:9e:27:1e:cd:fd:68:80:ca:c4:30:dd:34:
28:79:c9:00:a7:11:f8:0d:f8:ab:ba:06:6f:e5:77:
93:37:c1:cf:77:0b:d3:d6:0c:92:6a:3e:f4:23:07:
4a:74:41:85:23:0c:9a:cd:4e:9f:f7:84:02:78:db:
ca:06:a5:78:f8:f6:8b:fa:bc:f2:da:4a:71:40:26:
fd:7e:11:31:b9:51:c0:aa:f7:0d:33:17:5c:3e:60:
ab:7c:70:2b:34:44:d4:60:51:92:4f:ae:ad:2b:1e:
ea:4f:ae:ba:13:00:67:4a:2d:44:a2:9e:8f:cc:36:
d4:ce:6d:d5:84:54:83:3f:27:0d:b1:4a:f4:6b:00:
8f:e2:4e:d7:b2:0a:c4:ff:ee:d6:d8:a9:cf:42:96:
ad:91:c1:a6:9f:ce:d6:2a:c1:77:fe:bc:42:e3:1f:
b3:5a:aa:cd:b1:24:5e:a3:f1:fa:8f:fb:76:42:e7:
6d:57:e2:7e:de:d0:ca:32:79:b0:8d:45:73:62:15:
d7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:00:27:05:43:4D:92:9C:C1:39:12:3E:0D:C0:F5:69:D8:D4:71:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ceaea99f-2361-3e42-81dc-2424d99387d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.209.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:98:4d:25:b8:0a:a5:47:96:5e:d7:b2:30:eb:67:23:fd:24:
ac:98:d1:d0:ef:49:3d:76:88:60:91:ef:04:b3:16:6d:c4:ad:
0e:a6:a9:7d:be:47:b9:50:e0:58:f7:d9:98:3d:9c:13:00:4c:
c2:68:91:05:13:56:b6:1d:76:9c:7f:e8:8d:05:69:cb:d1:56:
aa:9a:45:1b:5d:44:0d:27:22:92:3d:ce:e4:90:a0:65:13:2d:
63:76:81:f2:83:1c:4e:67:d3:83:82:a5:41:2d:03:5e:c6:5b:
56:1b:88:ef:db:bc:1e:79:15:16:81:9c:21:13:b2:7c:1d:c0:
97:6c:f2:d2:be:47:1d:d9:23:b4:52:e1:9b:d9:3d:d9:89:7e:
4f:f8:b7:92:f1:ac:af:96:f4:82:b8:33:bb:b6:cc:3a:5d:0c:
1a:88:d3:2e:3c:72:9b:c8:e6:71:a9:34:77:3a:49:02:53:69:
7b:40:a0:b1:c8:54:0d:c1:00:f6:53:1b:5b:0c:2b:cb:57:e1:
02:55:50:59:d6:c5:80:79:f1:68:6a:20:1f:14:fe:04:39:11:
ce:c6:86:b4:3b:2b:27:6b:10:a6:b3:3d:b2:d4:d4:9b:e0:d2:
5c:76:26:bc:1c:e2:64:db:77:b2:62:31:85:4d:0d:e2:6e:26:
c9:25:e2:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:47:49 2025 by rpki-client