Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/250542c4-d296-36c5-89dd-5586e9f13223.roa
File: 250542c4-d296-36c5-89dd-5586e9f13223.roa (raw, json)
Hash identifier: pefVaqGH2yMnGXg+wQ5xT9HqRf9HHEvnmYhF/7GUseQ=
Subject key identifier: C8:44:74:DC:A8:6F:FD:B8:81:F1:61:CA:34:46:B9:44:C4:66:95:6E
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F43285848A99635CC6300A4EEEEB7AE80
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/250542c4-d296-36c5-89dd-5586e9f13223.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 8069
IP address blocks: 20.33.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:35:cc:63:00:a4:ee:ee:b7:ae:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=7e8a6f25-1c9d-4583-b91e-b66613f5b99a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:78:fc:46:2a:e2:73:00:f0:c2:29:9e:83:2f:
b5:3e:33:82:22:85:49:c9:81:a0:37:c8:5a:a9:40:
7a:38:a6:4a:43:57:08:6b:11:28:10:f1:42:48:22:
92:9c:b4:67:ec:f5:b5:ac:93:82:70:d2:0c:7e:c8:
10:89:96:8a:9e:a3:56:9c:fc:87:a2:b5:8f:ff:65:
89:49:9b:9f:f1:69:24:4a:85:d7:02:92:ba:c1:86:
20:11:23:56:30:36:4c:4b:28:c1:dd:2f:df:16:a0:
1d:ca:ea:27:ca:b6:af:b6:eb:07:84:cb:a7:fe:4f:
db:43:cc:97:31:7f:f2:e5:aa:09:2d:dd:6c:a1:b0:
22:34:e9:71:a7:51:06:0f:47:b4:a2:86:b5:ae:30:
ea:2f:66:a4:bf:2e:02:6a:0f:ec:42:ac:75:55:32:
ee:49:5d:02:23:84:dd:24:fb:df:2d:da:74:5b:47:
e1:c0:f3:fb:00:92:fe:f3:f6:7d:3b:1a:18:7b:d5:
bb:21:c1:23:65:bb:72:e0:3f:dd:8f:b7:cd:0a:23:
2a:e3:54:f9:52:8a:01:65:b8:c7:a3:df:03:26:33:
01:f4:a9:a7:5c:f5:80:24:c6:42:9a:13:90:cb:95:
6b:e0:a1:d0:63:61:a8:35:ce:82:18:2c:1f:75:aa:
cf:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:44:74:DC:A8:6F:FD:B8:81:F1:61:CA:34:46:B9:44:C4:66:95:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/250542c4-d296-36c5-89dd-5586e9f13223.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.170.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:bf:29:4d:90:3c:a9:bf:f1:15:6d:f6:81:8a:04:5c:80:6c:
8a:b9:69:3e:f4:b4:1c:c3:db:07:60:73:5f:59:b4:eb:a8:a4:
0a:69:ca:62:fe:68:23:2c:12:2d:94:3f:84:24:2d:34:9d:71:
19:29:bb:9d:fc:dc:55:b5:4c:6a:4b:40:dd:28:6f:99:99:7c:
e3:f0:30:fd:8e:2a:49:5c:e0:6f:d7:89:b5:da:57:42:49:7a:
79:32:cd:a8:f4:16:95:2e:28:98:c8:ca:08:91:02:54:d2:26:
b9:78:76:b8:53:2f:a2:ad:ef:65:db:fa:c0:89:0f:d4:66:3c:
b7:22:6f:f9:35:5e:c2:8b:4c:58:30:7f:9f:d8:55:de:29:a2:
1b:ed:b5:4c:e6:0c:f6:fa:2b:bd:07:8d:7f:2c:0c:7e:14:dc:
69:20:00:d1:8e:64:4d:08:31:cd:52:97:f3:3d:10:52:66:6f:
1c:c0:e9:6c:51:58:3b:ca:0c:30:c8:fa:35:ea:c8:43:e1:0c:
c2:2e:91:e1:48:82:44:54:73:fe:56:8d:1d:81:e8:1d:f3:7d:
41:7a:ee:92:0b:bf:26:4b:fb:86:97:53:84:e1:5e:cf:f1:6a:
07:bb:54:d8:dc:e4:a5:2d:cb:cd:e3:14:2b:02:77:9e:af:f9:
1f:35:19:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:44:52 2025 by rpki-client