Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e1e3adb7-10ca-3931-aa09-29f96ea8d2ec.roa
File: e1e3adb7-10ca-3931-aa09-29f96ea8d2ec.roa (raw, json)
Hash identifier: TMlM3pRCJ6MIK85fHA98/hEuVIyMpIR4qKpkzbXkawk=
Subject key identifier: 5A:07:05:B5:1D:D0:EC:9F:EB:1B:6F:C4:75:D4:A5:83:1E:A9:EC:A1
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F43285849473401AB5D80685D6E4539D0
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e1e3adb7-10ca-3931-aa09-29f96ea8d2ec.roa
Signing time: Sun 23 Mar 2025 01:00:39 +0000
ROA not before: Sun 23 Mar 2025 01:00:39 +0000
ROA not after: Sat 21 Jun 2025 01:00:39 +0000
asID: 8069
IP address blocks: 20.33.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:47:34:01:ab:5d:80:68:5d:6e:45:39:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Mar 23 01:00:39 2025 GMT
Not After : Jun 21 01:00:39 2025 GMT
Subject: CN=d201bc13-8840-42ef-ac78-85fb610e7dc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:86:da:60:d2:85:65:ba:e4:5b:98:2c:54:ee:
0c:9d:4c:58:8e:bb:ad:e9:c5:53:bc:31:a2:e4:af:
bf:e6:ff:f0:32:02:72:1a:aa:2a:c6:d5:d1:09:7f:
89:97:44:6e:f8:d3:34:c9:b3:ce:6c:9e:a4:40:7e:
86:2d:1e:ab:fd:10:a8:18:49:c6:2f:6b:c1:9e:d0:
80:ff:21:a1:ad:ea:e7:f5:96:aa:9b:1d:06:37:57:
51:20:19:10:09:fb:66:c9:b3:3a:46:5a:b7:0e:92:
a7:20:f1:c7:16:62:70:1f:75:b8:b5:d1:41:be:7f:
29:ea:0c:53:b3:0b:a0:24:53:53:26:9e:16:4f:be:
f4:cc:86:07:f0:d7:53:b8:5f:5b:42:52:61:f2:06:
33:80:11:ef:f3:e5:74:0c:16:62:2d:53:5c:d2:cb:
c7:dd:b9:fc:6c:92:bb:a6:31:32:45:01:18:a2:c5:
b3:46:7f:19:33:85:77:75:85:7b:dd:97:19:22:60:
7d:41:33:a6:08:a5:b7:f0:f6:5b:55:4f:24:3f:27:
59:a6:de:15:df:7c:51:f4:ed:81:f1:f3:87:0e:ba:
68:31:1f:1d:d5:6a:f3:61:24:a1:8c:47:0a:95:11:
d0:f9:af:1a:54:30:e1:3a:61:41:4f:a9:ed:c4:03:
10:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:07:05:B5:1D:D0:EC:9F:EB:1B:6F:C4:75:D4:A5:83:1E:A9:EC:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e1e3adb7-10ca-3931-aa09-29f96ea8d2ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.187.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:be:45:26:2a:82:a8:e3:ac:b8:bd:6b:36:13:f1:dc:8e:70:
6f:94:8d:b1:83:14:04:d9:11:55:70:37:c9:cc:5e:93:3c:df:
a7:19:6b:ca:6c:f1:2b:ac:07:f1:39:86:a5:74:7f:2c:c6:31:
03:cb:9b:cf:11:09:f3:8a:35:47:8b:ab:4d:cd:92:15:40:c1:
6f:67:1e:03:0c:d9:ea:5d:d7:13:b8:5b:33:6e:68:f7:a4:d3:
59:b3:9b:02:2f:47:5e:6a:6a:0f:53:f8:7e:b8:3c:19:41:91:
8e:d5:9d:17:2f:f5:79:ca:ca:b6:6c:a9:5d:1b:40:9b:d3:b3:
3f:97:4e:e7:42:53:b0:44:60:bf:aa:82:32:3e:01:bb:01:8c:
da:83:68:82:d0:7a:0b:8c:ec:af:7a:11:d6:cb:f2:aa:f7:af:
17:1d:13:bd:39:0d:11:20:59:bf:fa:8e:ea:4b:43:08:5e:fd:
ab:6c:1d:05:90:53:db:cc:26:cc:84:53:48:03:27:b4:95:bd:
fd:11:3b:13:bd:d9:4e:4c:6a:00:f8:ce:7b:53:2e:97:ef:c7:
6b:82:6b:f3:f8:5c:d7:68:a5:93:32:17:7c:48:33:7a:b4:b5:
20:00:db:e5:22:96:7d:f2:e0:33:a7:fa:62:9b:7a:49:00:8e:
7a:4f:cf:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:40:15 2025 by rpki-client