Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/19eeb1b8-4ee6-3a5a-8669-0ec5d5e20141.roa
File: 19eeb1b8-4ee6-3a5a-8669-0ec5d5e20141.roa (raw, json)
Hash identifier: 7u35ljfO4xprI64+KPO2k3+d6Mgdqp/qDTT56TxQYLk=
Subject key identifier: 55:18:E2:7E:1A:D0:EE:60:55:B3:B6:4F:55:0C:E5:56:18:7D:91:0E
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F432858493AA3E5B206A0D4668910DD80
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/19eeb1b8-4ee6-3a5a-8669-0ec5d5e20141.roa
Signing time: Tue 18 Mar 2025 13:00:50 +0000
ROA not before: Tue 18 Mar 2025 13:00:50 +0000
ROA not after: Mon 16 Jun 2025 13:00:50 +0000
asID: 8069
IP address blocks: 20.33.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3a:a3:e5:b2:06:a0:d4:66:89:10:dd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Mar 18 13:00:50 2025 GMT
Not After : Jun 16 13:00:50 2025 GMT
Subject: CN=f3fe5433-86fb-45e4-88c3-6cd0a8168f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c8:41:37:7e:8d:bf:38:85:74:fd:4a:33:43:
6b:fd:43:1b:bd:51:bc:db:c7:aa:b5:48:58:a3:65:
ab:0a:18:8f:0a:bd:0d:96:c6:d6:98:95:5c:e8:9e:
a5:cc:cc:c2:9f:98:8d:21:7f:50:4e:d2:f3:62:69:
77:ce:9b:db:d2:bf:1c:c2:a1:7c:b6:07:33:f6:da:
d3:f0:cb:dd:27:ac:ae:5d:e0:3b:b0:64:5c:0d:ec:
3d:8a:cf:b1:6b:99:00:9a:09:8a:aa:84:02:55:84:
fd:1d:82:a6:bb:ba:d3:79:0a:e9:78:7a:fd:d4:f5:
f0:d4:39:7e:41:95:58:98:b1:77:32:32:45:c9:d2:
4f:ae:3f:d7:1f:ba:f5:e6:37:25:31:be:a5:ec:9f:
2a:df:a8:f2:0b:7f:3d:5f:bd:60:e7:b8:aa:10:be:
e3:1b:d8:2e:2c:5c:ae:f6:c7:27:36:2b:50:2a:d9:
c9:ad:f4:4c:40:68:b6:62:10:3e:33:8e:6f:c8:e4:
37:9f:b5:65:48:ab:01:7f:ff:be:70:00:2a:cb:b4:
f9:36:0d:52:dc:ff:29:19:3d:29:30:46:f9:8f:e1:
dd:47:d5:3b:2f:bb:bd:6c:3f:34:21:3e:1e:79:96:
73:5a:f8:de:a9:cc:f1:5d:bc:a6:dd:67:7f:6f:ec:
58:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:18:E2:7E:1A:D0:EE:60:55:B3:B6:4F:55:0C:E5:56:18:7D:91:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/19eeb1b8-4ee6-3a5a-8669-0ec5d5e20141.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:73:b2:d7:c7:4c:68:16:85:10:f5:b5:5a:03:a9:9a:97:ad:
e6:07:f0:5d:b2:fe:6a:f3:65:39:6e:74:5c:4d:49:87:0a:c2:
12:68:61:30:fc:bb:32:7f:c5:c8:43:95:a9:aa:22:34:98:17:
c8:d1:0f:ab:9b:db:0a:96:8d:f2:aa:68:fe:16:15:08:4e:2b:
2c:ab:76:c6:62:80:cf:e5:d3:69:d3:b2:30:24:2a:c4:3e:70:
f0:e4:c3:f9:02:7c:c6:06:b7:a0:2a:19:b7:58:89:14:36:52:
d9:dc:67:bf:08:1d:cb:f0:e7:59:b2:68:0b:23:bd:d0:97:01:
82:ad:b6:80:02:71:06:79:27:c4:cf:e3:09:64:27:9c:81:51:
0c:91:8f:a4:19:0c:94:01:4b:e4:57:db:3e:6b:a7:3c:7d:97:
77:1e:29:f3:53:0d:2f:ce:26:f5:29:91:9b:7d:72:d1:67:53:
71:e7:89:b6:66:5f:da:42:d7:bf:51:60:b5:6e:ae:cf:06:5d:
d7:f5:6d:38:57:b0:09:56:0c:3c:a9:c4:e3:82:0b:8f:33:9c:
37:ab:8c:70:73:47:ae:dd:f9:3a:fa:0a:c4:33:6e:81:d9:2c:
89:cd:7b:65:8e:ed:93:73:24:ea:c1:42:03:30:04:d9:ba:05:
0a:d6:7b:bc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk6o+WyBqDUZokQ3YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1
ZWVhMB4XDTI1MDMxODEzMDA1MFoXDTI1MDYxNjEzMDA1MFowLzEtMCsGA1UEAxMk
ZjNmZTU0MzMtODZmYi00NWU0LTg4YzMtNmNkMGE4MTY4ZjEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhshBN36NvziFdP1KM0Nr/UMbvVG828eqtUhY
o2WrChiPCr0NlsbWmJVc6J6lzMzCn5iNIX9QTtLzYml3zpvb0r8cwqF8tgcz9trT
8MvdJ6yuXeA7sGRcDew9is+xa5kAmgmKqoQCVYT9HYKmu7rTeQrpeHr91PXw1Dl+
QZVYmLF3MjJFydJPrj/XH7r15jclMb6l7J8q36jyC389X71g57iqEL7jG9guLFyu
9scnNitQKtnJrfRMQGi2YhA+M45vyOQ3n7VlSKsBf/++cAAqy7T5Ng1S3P8pGT0p
MEb5j+HdR9U7L7u9bD80IT4eeZZzWvjeqczxXbym3Wd/b+xYlQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFUY4n4a0O5gVbO2T1UM5VYYfZEOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy
ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMTllZWIxYjgtNGVlNi0z
YTVhLTg2NjktMGVjNWQ1ZTIwMTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky
M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl
NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz
ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAVzstfHTGgWhRD1tVoDqZqXreYH8F2y/mrzZTludFxNSYcKwhJoYTD8
uzJ/xchDlamqIjSYF8jRD6ub2wqWjfKqaP4WFQhOKyyrdsZigM/l02nTsjAkKsQ+
cPDkw/kCfMYGt6AqGbdYiRQ2UtncZ78IHcvw51myaAsjvdCXAYKttoACcQZ5J8TP
4wlkJ5yBUQyRj6QZDJQBS+RX2z5rpzx9l3ceKfNTDS/OJvUpkZt9ctFnU3HnibZm
X9pC179RYLVurs8GXdf1bThXsAlWDDypxOOCC48znDerjHBzR67d+Tr6CsQzboHZ
LInNe2WO7ZNzJOrBQgMwBNm6BQrWe7w=
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:45:03 2025 by rpki-client