Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e86bab7f-476b-3211-99b7-b56509930684.roa
File: e86bab7f-476b-3211-99b7-b56509930684.roa (raw, json)
Hash identifier: dduMbfXitJG6yD8QngOXwDAY1S2CFXGrtf3AjuDMsTE=
Subject key identifier: 1B:82:FC:90:68:92:8E:F8:49:B1:82:3F:90:EA:7D:AB:C1:38:72:8F
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F43285848A9963627FA90E4D1C1435FC0
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e86bab7f-476b-3211-99b7-b56509930684.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 8069
IP address blocks: 20.33.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:36:27:fa:90:e4:d1:c1:43:5f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=f6f15786-2bd1-4290-b9fd-2e10914dee6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e7:9c:2f:9a:96:46:33:17:7d:68:ba:b6:9f:
75:d3:ee:2c:a8:42:de:f3:01:cc:0c:6d:fa:ca:02:
c9:5b:cc:2d:26:79:a8:1d:c9:9c:9d:f2:5f:9d:c8:
98:51:28:ba:5d:1d:b1:c7:46:94:16:e7:41:0b:4e:
09:8d:bf:35:6f:18:b6:4d:f0:3c:77:72:93:e8:fd:
2d:98:41:42:7d:66:0b:0b:9a:c5:5c:d0:3c:76:44:
7e:72:46:b2:c1:97:45:20:ab:31:a5:ae:36:3c:b3:
66:ce:1a:24:0d:a1:0f:a3:e8:0f:36:04:de:ee:6c:
ca:27:77:26:28:9d:7c:53:7a:8e:19:71:14:c8:71:
71:7f:30:32:ec:ac:58:60:77:3e:bf:c9:ad:d3:d5:
4e:a9:cc:5a:00:15:57:55:e0:35:a2:be:95:d0:23:
8f:8f:0a:da:c0:ee:da:62:f4:d2:87:4c:df:7b:2e:
3f:e0:07:91:db:d9:d2:af:6d:8a:ce:06:19:ec:b5:
b1:a3:a0:47:7e:ef:61:4a:e0:43:bd:2e:46:dc:bb:
4c:03:84:81:8d:5f:7a:48:db:ad:63:8e:20:db:6f:
23:ec:cb:19:16:8b:01:62:bf:e5:53:7e:1b:43:b7:
f1:17:be:59:1e:1c:7c:a7:6d:d2:14:0b:45:22:84:
0f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:82:FC:90:68:92:8E:F8:49:B1:82:3F:90:EA:7D:AB:C1:38:72:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e86bab7f-476b-3211-99b7-b56509930684.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.177.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:d0:e3:f4:7a:dd:31:48:ea:d0:c7:41:4f:4f:5d:ba:05:51:
98:c8:02:1c:d9:de:7a:cb:d8:df:57:cc:9d:dc:36:c6:d6:f8:
48:f0:3f:ee:b2:26:0c:27:4c:8b:92:1e:2e:b4:49:ec:d6:1a:
08:50:92:8b:1f:be:06:3f:3f:6d:e4:c3:9d:ce:12:51:15:96:
9a:f3:9a:6f:81:9c:cd:6e:6e:46:b9:99:d7:8a:5c:26:a7:55:
d4:d7:cb:06:c3:82:99:a3:8c:a3:94:8d:71:e0:67:f3:c9:ea:
72:be:87:4f:09:bc:e5:7c:54:36:00:98:c1:db:41:5f:af:d9:
53:01:af:ea:a5:3d:f1:ad:0f:04:b5:f6:a3:c6:7b:8a:66:52:
1b:af:1e:cf:5e:07:81:dc:ec:ab:74:10:ef:0b:4f:62:6c:94:
76:b8:ab:f7:87:fd:74:3c:66:a4:49:48:e8:81:ce:63:4a:69:
4a:19:c6:92:0c:3f:3e:13:e8:b1:65:33:eb:6e:05:85:bf:7e:
0a:1a:aa:bf:43:fc:cd:bf:5b:6a:14:15:8c:ce:65:46:6a:d2:
a7:4c:46:1b:cd:12:9f:14:38:dc:95:3e:b4:c4:9e:54:26:b1:
15:dd:ce:f3:a9:3d:42:a8:5d:3e:b0:ef:75:71:4e:e6:d1:44:
c0:cf:a4:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:50:05 2025 by rpki-client