Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/063f2ce7-3b3d-348c-89ff-ee5a805a81f4.roa
File: 063f2ce7-3b3d-348c-89ff-ee5a805a81f4.roa (raw, json)
Hash identifier: kVOnyXtLb7f7RvUe76So4EJCv1S8gVTXjkyFyniDADI=
Subject key identifier: 4E:F0:9F:28:9A:90:B9:40:E1:AD:52:E0:D6:FA:A4:34:52:03:C6:68
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F432858493673BAF882CAE4486495A500
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/063f2ce7-3b3d-348c-89ff-ee5a805a81f4.roa
Signing time: Mon 17 Mar 2025 01:00:37 +0000
ROA not before: Mon 17 Mar 2025 01:00:37 +0000
ROA not after: Sun 15 Jun 2025 01:00:37 +0000
asID: 8069
IP address blocks: 20.153.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:36:73:ba:f8:82:ca:e4:48:64:95:a5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Mar 17 01:00:37 2025 GMT
Not After : Jun 15 01:00:37 2025 GMT
Subject: CN=df00bedc-e409-4533-b9d3-a6356f211e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:7b:b4:86:ac:01:e3:c7:2e:f5:31:69:bc:06:
87:95:fa:f6:36:63:39:fd:da:86:66:b5:5a:f2:ff:
c7:da:e7:ff:24:4a:14:3a:3f:7a:84:7d:e7:bb:e7:
76:75:d9:88:30:43:6d:1b:aa:77:9f:e1:8a:26:4f:
3d:eb:84:14:47:d6:92:73:f3:51:5f:59:09:67:ec:
ab:ac:4e:30:63:19:38:90:53:b7:eb:b3:04:e2:31:
6e:0b:3b:cc:bd:81:bb:6e:b2:b6:6c:61:48:45:0b:
48:37:40:3b:69:ac:9d:b3:56:a8:b4:98:b3:1b:36:
99:54:16:e2:83:45:57:02:79:3f:eb:35:c8:01:1e:
f8:71:df:49:64:ad:b9:01:6a:06:65:c2:8e:13:d2:
c9:5c:27:8d:39:46:9c:cd:93:93:0e:7a:8a:cc:5d:
73:80:f3:8e:8b:17:3b:ba:7a:1d:da:36:79:a9:d0:
ef:4a:f5:cb:37:50:61:1c:cf:03:ae:10:19:3c:ae:
8f:4b:11:e3:5f:28:1c:c4:a5:47:aa:08:f9:01:a7:
64:60:c6:6b:36:29:8d:ac:e5:0f:5e:8a:cb:e6:ac:
5f:d0:d0:2b:81:a0:55:5e:cb:7b:89:24:e0:7e:ca:
2c:3b:7c:0c:7a:69:ef:e9:73:c3:64:28:10:57:7a:
68:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F0:9F:28:9A:90:B9:40:E1:AD:52:E0:D6:FA:A4:34:52:03:C6:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/063f2ce7-3b3d-348c-89ff-ee5a805a81f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.153.16.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:d0:25:c0:4e:9e:a1:1c:a7:e4:1e:13:67:5d:b5:96:ac:30:
89:b8:30:69:91:80:31:41:00:1d:94:e4:ea:0e:4b:f1:64:c8:
35:21:f2:29:7a:06:90:2e:37:ea:9f:af:a0:e6:2c:1a:10:b8:
b2:c9:34:2f:d7:e9:2b:f8:7c:9c:7e:64:cc:f7:94:4f:a6:2f:
9f:b5:8f:58:7c:42:1f:be:0e:67:b4:00:a7:79:be:4f:68:6f:
9f:3d:8b:42:5a:cd:4b:98:71:7a:93:6c:cc:6f:cb:27:10:32:
47:50:b5:37:e9:c3:1d:6c:cd:0e:4e:36:5c:eb:df:1e:5f:dd:
f1:80:17:7d:76:c5:73:7f:74:96:f2:c7:8b:f4:5c:c7:3f:58:
16:27:ad:cc:99:23:22:9b:71:f8:c3:3b:af:fd:35:6e:8f:3d:
13:4c:a9:02:63:c4:f0:ea:64:c6:d0:31:da:41:ac:0e:a5:86:
ee:82:22:79:4e:15:2a:3d:47:fd:11:0d:b6:9b:0d:5d:9a:ad:
9f:f5:fc:a8:b0:7b:f6:4d:33:46:a8:6f:09:d0:8d:6f:cd:35:
43:eb:59:c1:dc:e6:f6:2c:29:d2:f8:17:ef:e9:5d:11:66:66:
29:c6:08:b1:f4:fe:86:a7:d5:88:98:99:50:de:9c:c3:2c:9a:
e1:06:b8:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:37:05 2025 by rpki-client