Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/dbe1ea2a-55aa-31f6-8cec-bfade03772a0.roa
File: dbe1ea2a-55aa-31f6-8cec-bfade03772a0.roa (raw, json)
Hash identifier: 9eZM4mS/BcmSS4G5EIvfydh0CQ7bDPnqvwN4F7EOdQg=
Subject key identifier: 81:B2:C3:73:E7:DB:D1:E9:4C:0C:3F:2B:F8:46:EC:1E:AE:9B:C5:8D
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F432858488AE0A9B3F153616181548580
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/dbe1ea2a-55aa-31f6-8cec-bfade03772a0.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 8069
IP address blocks: 20.157.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:a9:b3:f1:53:61:61:81:54:85:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=16272ee1-940d-453f-87b5-597ee8f4fa4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c2:5e:bc:d5:95:eb:12:19:05:3a:b4:65:89:
3f:52:6f:85:15:c1:10:dc:3d:29:27:21:d3:f9:b9:
7e:91:ff:df:53:f5:27:7b:4a:67:a0:fb:2a:1c:66:
33:72:5f:76:31:66:bd:31:26:1c:05:a0:94:4b:69:
51:59:d3:b2:b0:32:4b:6e:62:ff:29:57:d5:05:48:
c4:f4:fb:c4:17:04:b2:3e:58:07:16:f1:59:9a:2a:
a5:3d:24:b3:a7:05:d5:cf:9e:60:b0:4f:de:87:14:
24:7e:f6:c2:a5:ee:dc:4c:30:4a:d6:a3:a6:d0:ff:
85:d3:c4:d0:99:90:5f:27:cf:2b:64:da:70:f2:95:
d9:54:e9:24:b4:04:53:64:48:a4:cb:bc:5b:c4:e2:
ad:64:d4:b5:e9:3f:1b:84:0e:58:19:9a:4c:6a:c0:
e4:e7:8b:37:f4:9f:05:23:72:d2:36:16:5a:69:03:
53:85:a8:d9:54:56:3a:8c:70:9f:7a:79:66:43:de:
af:77:18:fc:8f:59:a7:26:ea:e7:79:60:df:05:2b:
24:5f:fe:91:06:b8:87:c9:ce:3e:c3:70:14:f1:e7:
df:b4:be:1d:8c:86:87:ba:6c:a8:d2:63:75:38:e6:
53:26:b0:19:d8:c2:94:a3:a3:19:e0:28:98:35:c8:
76:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B2:C3:73:E7:DB:D1:E9:4C:0C:3F:2B:F8:46:EC:1E:AE:9B:C5:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/dbe1ea2a-55aa-31f6-8cec-bfade03772a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.157.177.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:37:15:b0:4f:51:2c:36:b2:c9:bf:c0:e4:48:d4:63:7b:64:
0c:4a:ec:a3:f1:f8:d1:ac:24:1d:a7:9e:56:33:bf:91:f2:37:
b3:6a:ae:88:fa:7f:d6:1d:7b:e1:3b:3b:c9:d7:ea:04:62:61:
8c:04:23:99:7a:97:b0:c4:b8:d7:4f:40:60:d6:0d:41:98:0c:
e4:f7:d4:a8:89:49:99:15:a1:69:94:fd:20:b5:27:01:05:37:
ad:7b:a4:fe:9c:cc:0c:63:b1:29:18:22:90:99:82:35:95:98:
89:ff:d2:ab:e8:72:45:1e:0e:ac:7f:5c:bc:5e:2e:bb:b0:c6:
f3:19:a6:4f:3d:c8:ef:49:35:d2:95:37:79:22:e9:42:f4:f5:
31:f7:b0:23:70:ce:43:00:de:67:89:62:cc:f5:2c:41:91:17:
f9:49:4a:37:ad:1e:68:e5:17:01:70:24:31:09:51:b7:fe:b1:
64:63:1b:f4:12:a6:fb:27:f9:f3:4e:49:ea:54:ee:b2:7a:4d:
54:a2:70:93:9b:56:95:68:9c:77:66:41:24:1b:46:bb:43:e6:
8c:23:40:74:0b:d5:8e:5f:d3:85:0d:b6:06:25:cf:c4:fd:bd:
49:0e:ea:72:10:46:c3:98:70:aa:be:4d:e2:01:81:23:eb:6c:
1f:37:cb:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:40:13 2025 by rpki-client