Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e794736c-e567-3e33-9613-3ca6fdffe5e0.roa
File: e794736c-e567-3e33-9613-3ca6fdffe5e0.roa (raw, json)
Hash identifier: 4+e4avEn3GX34rSefr2JPajF9cguWAH05eqMVeiWod4=
Subject key identifier: FB:DA:96:56:C8:71:AB:3C:B1:B8:EE:D4:D0:20:72:BA:A7:3C:88:8D
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F432858489D05ED92B846EA6CFEB4D880
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e794736c-e567-3e33-9613-3ca6fdffe5e0.roa
Signing time: Tue 21 Jan 2025 02:00:39 +0000
ROA not before: Tue 21 Jan 2025 02:00:39 +0000
ROA not after: Mon 21 Apr 2025 01:00:39 +0000
asID: 8069
IP address blocks: 20.33.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9d:05:ed:92:b8:46:ea:6c:fe:b4:d8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Jan 21 02:00:39 2025 GMT
Not After : Apr 21 01:00:39 2025 GMT
Subject: CN=3630b510-5c66-4354-b0fe-d97b270c1a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:50:6b:9e:6c:5f:9f:5f:3c:db:24:2d:97:82:
ad:7a:22:be:5a:d1:e2:14:70:2e:f0:1b:ad:49:e5:
46:dc:47:c8:f9:de:f3:17:a1:59:cc:dd:49:52:f1:
00:19:df:df:8d:be:62:85:6b:5d:2d:1c:1a:66:23:
ff:05:b4:54:e7:36:c7:dc:bb:e6:99:19:a2:7c:9b:
0f:2c:da:b5:bd:c1:83:5b:26:1d:90:05:b9:b7:e3:
13:ae:9f:10:0e:7b:c7:9e:80:a8:12:2a:3e:a3:89:
c5:a6:02:cd:fd:e5:e2:fd:e7:72:f5:64:60:fd:24:
78:fa:96:d1:66:f9:cc:02:aa:59:5e:54:96:31:b4:
5e:48:bb:b1:87:0e:7b:64:43:e2:bd:37:72:38:a1:
06:aa:94:ed:13:88:c1:4e:ac:28:4d:26:02:42:c8:
df:0e:ad:42:b6:a1:f8:1f:4e:52:fa:03:04:d1:2b:
2b:cb:07:7e:ac:15:42:f5:a8:c8:ba:42:68:fd:98:
69:d4:e2:bc:52:08:c3:5f:a4:95:24:72:cf:96:c4:
3a:79:48:b5:f8:1e:f8:d6:ec:da:c0:94:16:8d:f4:
32:5c:f7:e7:67:3b:f8:4a:10:4c:94:6d:e2:01:80:
5f:e1:a5:06:a7:59:4e:68:f1:46:96:49:29:8e:43:
50:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:DA:96:56:C8:71:AB:3C:B1:B8:EE:D4:D0:20:72:BA:A7:3C:88:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e794736c-e567-3e33-9613-3ca6fdffe5e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.92.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:2d:da:0b:c4:97:6c:8b:ed:1e:4a:30:5f:df:4d:e3:1d:02:
2b:d7:9c:05:d0:2d:07:80:f6:fd:49:0d:38:af:c6:7d:53:a0:
d4:34:5a:89:55:6b:70:f6:f6:b3:8d:77:0e:5c:aa:90:71:39:
c4:bb:03:80:aa:e0:30:84:b7:88:69:6d:b0:48:74:33:ab:94:
a9:80:57:78:a2:3b:19:6a:69:55:5b:f9:49:bd:6a:3f:4b:25:
3a:00:d9:5c:e3:a4:12:da:34:24:72:7b:73:7b:db:9b:13:71:
0d:18:00:d2:82:83:a2:c9:f0:a1:b4:26:a0:32:28:9f:16:f5:
77:22:c3:9f:a0:c6:9f:69:aa:2b:bd:05:8d:bb:dc:86:1a:62:
80:5f:00:13:fc:69:cf:59:6f:f1:55:c7:b7:45:df:bd:e0:af:
e4:ed:18:87:4b:74:34:23:2a:5f:86:d0:c2:f2:4c:43:1b:06:
c1:a9:fe:7d:88:86:12:e6:e5:c2:8e:6c:bf:d8:2f:ed:63:53:
95:20:ec:a5:e5:1d:1c:dd:f4:c8:34:9f:a3:eb:3a:8d:c4:3b:
c7:41:bf:76:54:8d:18:a1:4f:f6:74:2a:71:d6:5a:4c:12:87:
85:14:a8:e7:62:9c:52:7f:1d:bd:d6:6d:61:4f:27:8b:f6:0d:
1e:59:b2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:37:08 2025 by rpki-client