Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d41f4dac-10ca-3cf6-b3e8-1d999e152c03.roa
File: d41f4dac-10ca-3cf6-b3e8-1d999e152c03.roa (raw, json)
Hash identifier: 6gY2ohoPEIgecTk0RMlz5TUUKcySkYRHC63ZqEHmNXc=
Subject key identifier: 8D:41:4E:E6:8C:D6:3E:D5:85:21:3F:32:CF:14:2C:8F:D8:7B:DA:34
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F432858493673BD50130195FB836E8900
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d41f4dac-10ca-3cf6-b3e8-1d999e152c03.roa
Signing time: Mon 17 Mar 2025 01:00:37 +0000
ROA not before: Mon 17 Mar 2025 01:00:37 +0000
ROA not after: Sun 15 Jun 2025 01:00:37 +0000
asID: 8069
IP address blocks: 20.33.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:36:73:bd:50:13:01:95:fb:83:6e:89:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Mar 17 01:00:37 2025 GMT
Not After : Jun 15 01:00:37 2025 GMT
Subject: CN=c384193d-6c5a-405f-9781-b798f4edad8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b6:5e:ad:31:b6:06:bf:66:03:b1:44:5d:f0:
19:a6:96:8c:99:35:90:b3:1d:33:1e:60:b0:52:43:
b2:40:64:00:74:56:1d:58:7d:a5:08:66:e0:f5:d5:
18:4e:3a:e5:3d:31:56:16:16:ec:94:c6:f9:2d:12:
91:47:68:c9:83:50:d9:98:b4:26:5a:7c:4e:8c:0e:
33:ee:af:bc:04:79:15:e2:31:8c:38:e8:51:81:13:
11:a2:b8:d3:2f:47:91:39:34:be:fa:18:a4:15:b2:
45:b4:22:05:60:e5:e3:2b:ca:6e:80:08:e4:62:9f:
93:20:01:65:ab:90:38:86:64:0b:fa:8a:66:f3:ce:
3e:68:ca:98:2e:28:2b:51:a7:9a:c1:7f:e6:17:bc:
25:9b:c4:61:0c:87:e3:ca:0f:ad:85:d3:29:9d:82:
fc:98:46:07:4e:4b:3d:d0:22:42:bc:2a:46:1a:c5:
e5:d5:1f:ef:15:76:d9:98:d3:e5:35:6e:d1:23:6c:
ac:ec:bf:c7:62:d9:c8:1c:0d:98:d8:a0:4c:1f:99:
45:83:3c:7e:a2:ab:b3:92:d9:86:4d:c8:c6:7b:0c:
86:47:3e:68:7a:cb:f4:cb:c5:59:e5:17:ba:d2:49:
19:95:1e:ec:3d:3c:23:e7:53:2e:2e:6d:bb:d2:66:
23:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:41:4E:E6:8C:D6:3E:D5:85:21:3F:32:CF:14:2C:8F:D8:7B:DA:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d41f4dac-10ca-3cf6-b3e8-1d999e152c03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.113.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:4d:a4:50:06:4d:c7:5b:a5:04:21:f0:bb:65:e6:9c:43:73:
f1:e3:58:99:f5:09:50:cc:02:58:42:c9:59:5b:82:f3:92:34:
50:0b:2d:98:8b:ac:8f:4f:df:78:35:ee:21:2e:2c:27:4a:39:
08:62:82:94:c0:24:07:fa:ce:7a:33:bc:e4:e1:1c:70:52:35:
cd:34:2a:fb:57:5b:d2:85:96:f8:3e:c6:41:88:ae:38:bb:a8:
9e:65:d6:47:b1:58:fa:37:27:83:2c:a0:df:fa:af:bc:3c:b5:
da:8f:53:de:8b:04:77:f5:e5:79:24:29:a1:c1:cd:29:46:13:
3f:fb:b5:b0:f9:1c:cc:24:e3:f5:d2:34:21:57:cd:20:ff:de:
68:63:09:a7:d5:48:52:df:0b:db:e5:ce:57:90:d4:ef:54:51:
83:08:67:26:fb:3b:7a:66:89:cf:07:b0:db:ab:43:ed:e7:e0:
de:7e:fa:c2:78:c4:3e:17:11:45:b1:23:1f:20:8f:5f:8c:66:
92:2b:00:66:ed:4b:93:cd:c7:50:8a:ef:69:42:3e:95:2f:62:
01:95:d6:15:33:bd:61:e2:d8:17:49:c4:62:a7:5d:9c:a7:50:
77:f6:bd:f3:db:0b:13:9c:71:82:20:42:e8:9e:62:de:29:79:
1a:6b:08:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:42:40 2025 by rpki-client