Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/340d45d4-1749-34e3-acea-4c5b2cb6d8ee.roa
File: 340d45d4-1749-34e3-acea-4c5b2cb6d8ee.roa (raw, json)
Hash identifier: 4pZvEaP2BdjVSJDDYGhHa+NV5373subf81FpG2fwhsQ=
Subject key identifier: F7:81:28:2F:D4:B2:A0:32:FF:DE:69:5E:D6:DD:42:C5:74:20:85:39
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F432858488AE0AA523CBF458C6A694B80
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/340d45d4-1749-34e3-acea-4c5b2cb6d8ee.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 8069
IP address blocks: 20.33.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:aa:52:3c:bf:45:8c:6a:69:4b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=af51dd77-597b-44fe-983e-eb3dbfaaa35e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:48:4f:3e:b4:24:97:8d:49:ca:91:51:01:3d:
dc:15:bc:8d:80:41:3f:7f:50:d9:5c:eb:e7:02:b0:
fa:57:f2:e5:fd:78:d8:f0:44:a8:a3:e9:cd:d3:e1:
ce:24:28:96:81:77:59:c9:5e:d8:97:c4:52:50:65:
f4:38:8f:d3:90:2f:ec:ea:7a:d6:00:cb:ed:27:9e:
e6:1d:c3:38:18:31:88:d7:b0:ac:08:1d:55:bf:f3:
71:e9:53:7d:7b:e7:28:c3:d3:80:db:05:0e:fd:10:
df:b6:18:53:8c:8d:68:71:37:1d:56:6b:f5:41:a9:
52:4a:98:8e:bd:59:2c:77:4c:32:f9:fc:3a:46:45:
e8:47:dc:ad:a0:64:8b:67:f7:2f:ae:b4:52:e0:95:
8f:0a:bd:e3:62:cd:4e:db:15:fd:26:6c:3b:5d:17:
19:66:ba:7e:7a:a2:ef:8c:f5:a8:7a:fb:fa:f0:a8:
cd:e5:4f:4f:a2:f8:03:99:0c:00:a5:3a:3d:3d:16:
93:0c:4c:eb:28:99:3e:a0:a5:94:99:c1:f7:f1:5e:
13:c3:56:b5:8e:5a:7c:fa:84:c6:7e:4d:3a:77:d2:
09:49:10:a0:1b:81:50:5f:f7:9d:2e:21:18:ba:90:
8a:4f:40:63:13:11:38:13:17:45:da:e5:51:23:7b:
5a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:81:28:2F:D4:B2:A0:32:FF:DE:69:5E:D6:DD:42:C5:74:20:85:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/340d45d4-1749-34e3-acea-4c5b2cb6d8ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.145.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:34:66:00:18:ba:08:35:42:8b:42:02:14:30:fc:27:83:6f:
3c:2f:0e:0a:aa:73:6f:57:69:db:fd:7b:e5:d6:7e:51:2d:47:
1a:d8:a1:3b:e1:fe:37:b0:5e:92:b6:7c:42:3a:0d:ac:0d:5d:
20:7b:6e:55:46:dd:c2:60:71:71:d7:b0:e3:f1:c8:91:3f:a7:
9a:12:cc:ce:39:bb:b0:32:7c:42:57:cb:a2:ca:a9:60:57:dc:
50:ca:50:36:e5:b1:d7:81:f6:d4:34:3a:87:41:f5:d3:e9:3e:
78:a6:42:0d:0e:50:83:06:8e:b6:73:d8:63:56:66:6a:ec:b7:
d8:04:9e:00:60:48:5a:39:78:2e:58:dd:20:e0:71:74:2b:59:
0b:8f:a4:cc:07:ba:81:ca:8e:c3:cd:41:b6:36:47:d0:4d:dc:
b1:d9:c6:74:f4:17:5f:e4:b8:86:d3:d8:2f:bb:66:37:a6:7f:
25:67:28:c8:07:c5:1f:6a:f0:bf:47:d5:35:0d:d1:f3:b8:c5:
f2:42:96:a1:d4:68:fc:f0:11:49:e3:4b:94:26:c7:9c:13:a1:
ff:6d:de:41:52:5a:00:78:1a:0c:69:e9:6f:14:68:9b:01:44:
98:22:2b:3c:42:a8:b0:db:7b:aa:d0:b6:69:8d:bd:b6:de:78:
39:b8:46:77
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiK4KpSPL9FjGppS4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1
ZWVhMB4XDTI1MDExNDE0MDA1MVoXDTI1MDQxNDEzMDA1MVowLzEtMCsGA1UEAxMk
YWY1MWRkNzctNTk3Yi00NGZlLTk4M2UtZWIzZGJmYWFhMzVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykhPPrQkl41JypFRAT3cFbyNgEE/f1DZXOvn
ArD6V/Ll/XjY8ESoo+nN0+HOJCiWgXdZyV7Yl8RSUGX0OI/TkC/s6nrWAMvtJ57m
HcM4GDGI17CsCB1Vv/Nx6VN9e+cow9OA2wUO/RDfthhTjI1ocTcdVmv1QalSSpiO
vVksd0wy+fw6RkXoR9ytoGSLZ/cvrrRS4JWPCr3jYs1O2xX9Jmw7XRcZZrp+eqLv
jPWoevv68KjN5U9PovgDmQwApTo9PRaTDEzrKJk+oKWUmcH38V4Tw1a1jlp8+oTG
fk06d9IJSRCgG4FQX/edLiEYupCKT0BjExE4ExdF2uVRI3taqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPeBKC/UsqAy/95pXtbdQsV0IIU5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy
ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzQwZDQ1ZDQtMTc0OS0z
NGUzLWFjZWEtNGM1YjJjYjZkOGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky
M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl
NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz
ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKE0ZgAYugg1QotCAhQw/CeDbzwvDgqqc29Xadv9e+XWflEtRxrYoTvh
/jewXpK2fEI6DawNXSB7blVG3cJgcXHXsOPxyJE/p5oSzM45u7AyfEJXy6LKqWBX
3FDKUDblsdeB9tQ0OodB9dPpPnimQg0OUIMGjrZz2GNWZmrst9gEngBgSFo5eC5Y
3SDgcXQrWQuPpMwHuoHKjsPNQbY2R9BN3LHZxnT0F1/kuIbT2C+7ZjemfyVnKMgH
xR9q8L9H1TUN0fO4xfJClqHUaPzwEUnjS5Qmx5wTof9t3kFSWgB4Ggxp6W8UaJsB
RJgiKzxCqLDbe6rQtmmNvbbeeDm4Rnc=
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:40:16 2025 by rpki-client