Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/fee36d8c-ea50-3844-9ead-d050392cf847.roa
File: fee36d8c-ea50-3844-9ead-d050392cf847.roa (raw, json)
Hash identifier: XjQr3PgpwCoeXZTjm1l+xRfpAUbPeZPOIdBIg/Sovw0=
Subject key identifier: 3A:F4:0D:9D:18:D0:A8:CF:A2:97:58:C5:D8:18:BB:81:C6:6A:D1:80
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584900216AEBD7047B83D8FEB500
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/fee36d8c-ea50-3844-9ead-d050392cf847.roa
Signing time: Tue 25 Feb 2025 14:00:52 +0000
ROA not before: Tue 25 Feb 2025 14:00:52 +0000
ROA not after: Mon 26 May 2025 13:00:52 +0000
asID: 8069
IP address blocks: 20.33.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:00:21:6a:eb:d7:04:7b:83:d8:fe:b5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Feb 25 14:00:52 2025 GMT
Not After : May 26 13:00:52 2025 GMT
Subject: CN=4add2e39-134d-4b1c-9624-260c98cf91fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:2b:5f:5b:a7:a8:fc:ad:4d:ee:fb:11:92:64:
43:32:13:2f:a3:6e:39:52:46:2b:03:af:26:80:50:
0f:ad:ca:cc:e5:f1:8c:38:30:fd:f2:48:6d:f1:55:
da:d3:8e:7e:d5:28:21:a8:39:0a:cf:28:c9:a6:52:
e3:65:cb:d3:fc:11:54:de:47:33:b7:c0:ed:f8:a6:
bb:e0:21:d0:22:02:b5:51:57:51:eb:7a:28:e6:21:
68:a6:68:a6:51:52:8b:cc:4c:82:15:80:d2:27:7f:
07:d5:a8:7c:25:7d:0b:02:46:63:84:60:07:16:84:
8b:f0:17:9e:e5:ed:ce:0e:ef:a6:e1:d6:9d:86:0d:
b7:fe:07:47:62:d6:65:0d:32:8a:b4:46:34:3d:c0:
e8:23:b3:60:5b:02:ef:1a:5e:b6:2b:5c:6d:6a:a7:
e6:00:a7:0f:a8:24:0e:15:32:03:27:f5:d2:69:72:
30:1b:51:1f:65:b4:b1:6b:d6:bf:50:ea:e1:07:89:
c2:83:47:bb:62:5e:26:38:f5:1a:0a:c6:fe:1c:c3:
47:93:f4:92:62:f5:e6:39:27:36:3c:74:fb:93:0b:
7f:8c:36:1e:8b:ae:f0:31:af:b2:6e:ec:1a:8d:cd:
5a:15:c3:6d:79:cb:65:94:64:47:6c:ab:24:3c:73:
5a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F4:0D:9D:18:D0:A8:CF:A2:97:58:C5:D8:18:BB:81:C6:6A:D1:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/fee36d8c-ea50-3844-9ead-d050392cf847.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.31.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:ea:76:fc:28:94:0f:23:a7:4e:dc:97:7e:bb:4c:b0:93:f2:
9b:9f:d7:96:4f:0f:bb:b5:83:63:78:ab:4d:fc:01:1f:c9:6d:
dd:5d:5a:91:73:b0:ce:ed:57:33:1b:ce:ea:29:0a:33:c9:e1:
14:75:ba:27:b6:9d:87:29:69:51:62:ee:27:d4:ad:35:30:39:
54:7e:09:4e:a4:3a:a2:34:af:2e:f7:51:18:dd:ba:ff:ed:b7:
e2:66:06:94:a2:56:96:54:fe:c7:82:85:6b:12:17:c7:9e:f8:
01:13:6f:91:b5:61:15:63:81:1a:52:1d:d7:fd:aa:f3:fb:dc:
1f:c4:52:49:72:e5:1c:56:86:86:f0:75:3c:0f:f8:cb:e0:5e:
ac:f6:38:70:94:fd:c8:bd:f8:9e:d7:79:c5:78:1c:48:b4:e5:
54:02:3c:d2:fa:aa:60:ae:07:86:7e:5c:ad:44:94:5a:8f:26:
8d:3e:90:5e:7b:2f:91:f2:f4:f9:b3:be:96:71:d5:02:9d:9f:
83:4c:7b:76:cb:50:4e:67:4d:bb:52:73:60:13:2e:f3:c8:64:
82:c4:de:18:64:44:b5:e0:66:14:39:99:9a:74:38:ac:21:e7:
f9:77:4d:c2:3f:a8:73:28:a5:26:8a:86:b9:dc:5e:43:97:1c:
79:9e:10:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:44:51 2025 by rpki-client