Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d3d4e8bf-bf55-38de-9130-ab101d948b21.roa
File: d3d4e8bf-bf55-38de-9130-ab101d948b21.roa (raw, json)
Hash identifier: ChNwdUTEfs0fpGV4J54s5Wn8asanKqGuebHG6amVHz8=
Subject key identifier: 82:B7:C3:61:A7:A1:0A:3F:6C:29:B2:59:3A:4A:81:47:1C:DB:B2:58
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F43285848A9963536B94F3E9A1F6001B0
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d3d4e8bf-bf55-38de-9130-ab101d948b21.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 8069
IP address blocks: 20.33.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:35:36:b9:4f:3e:9a:1f:60:01:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=680c3656-75c1-4732-8423-57a5baba834d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8d:b5:18:fb:d1:c4:d1:af:58:15:98:e3:cc:
a1:c7:08:c2:7d:cf:62:48:cc:b3:55:53:28:04:8c:
7e:ae:de:c1:e8:3f:55:e4:5d:d1:f7:ae:85:c4:c6:
63:8b:c2:e0:23:98:ad:32:3c:b0:6d:57:72:c5:92:
b3:7f:80:06:c0:47:7e:3b:d2:d3:b2:f6:b8:56:49:
21:7c:a1:fa:9d:90:f7:18:35:9e:27:cf:ea:01:03:
7d:87:ee:f6:83:c7:a2:9f:39:c4:a8:61:af:f7:36:
14:c5:98:66:81:98:93:70:1a:e5:9f:c4:f8:f9:e3:
17:23:54:65:84:9f:ce:f7:37:b0:3c:76:c3:dd:74:
b3:ba:00:d3:ab:39:73:ff:54:ed:ff:2e:ce:bd:d5:
0d:bb:ba:02:23:0c:78:d8:81:b0:fe:28:d7:f7:d9:
41:d6:5c:45:f0:bf:79:e8:0b:dc:dc:46:ba:e6:02:
f5:14:e9:a8:24:fa:39:37:d4:4b:77:f7:89:82:38:
16:55:46:f1:71:14:79:2f:44:5c:c3:93:4c:c5:78:
54:6b:a0:c7:9b:5d:10:fa:cb:41:b6:19:08:7f:8a:
0e:4c:c4:a3:82:c7:70:c8:51:9d:72:43:52:0b:38:
14:8b:93:28:8e:bb:e7:e0:b3:5b:57:a0:02:00:6b:
74:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B7:C3:61:A7:A1:0A:3F:6C:29:B2:59:3A:4A:81:47:1C:DB:B2:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d3d4e8bf-bf55-38de-9130-ab101d948b21.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.24.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:1f:01:7b:0a:9b:0c:19:d9:9b:07:4d:b1:96:5e:77:81:18:
bd:8a:59:61:c0:0a:60:0e:ef:70:c2:ce:16:2d:19:07:7d:e8:
01:cc:1e:ce:3b:36:54:c6:75:15:6d:b7:bc:e5:05:3f:49:7e:
3e:66:b3:02:ee:b1:c2:0c:28:9f:0c:c4:8b:a8:57:59:6f:ba:
2d:b6:8f:b3:a8:6c:7a:71:e4:e8:99:79:8e:51:c5:24:c0:64:
5e:6d:46:5f:c1:fc:b7:11:9b:40:3c:6c:63:d2:b7:71:f7:0d:
18:1f:f3:30:1f:9d:8e:5b:cb:41:1b:79:99:0f:c8:fa:17:e7:
1a:15:53:e9:e4:a8:64:d8:8b:24:37:f7:9e:2e:ea:8f:77:ef:
d3:c1:bd:c5:6e:6f:bf:b7:da:9a:06:3e:1d:04:40:48:94:dc:
68:a2:59:50:62:55:37:2b:5d:b9:50:2d:ad:a3:a9:74:f9:7d:
74:18:71:27:d6:bc:40:d5:34:31:cb:5e:21:42:ad:dd:a1:13:
6b:89:fa:81:bb:f0:c9:80:66:06:f8:f9:6d:d5:15:89:14:ae:
cc:3f:82:b4:79:09:24:a6:22:59:1f:55:74:ad:64:af:e1:fd:
04:90:e3:32:89:75:93:3e:df:85:86:cc:b3:65:1e:fa:96:78:
c9:f1:2c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:50:03 2025 by rpki-client