Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/343b56e4-2785-3758-8b98-7b8ee4b8652f.roa
File: 343b56e4-2785-3758-8b98-7b8ee4b8652f.roa (raw, json)
Hash identifier: SGcVd9EaROxLLqwbzJd+xBqxPwbQ7zAtQHmggv6+MKE=
Subject key identifier: 3E:6E:D9:49:E8:E8:45:D1:F1:8D:7C:BD:C1:2B:C6:A1:11:F7:78:56
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584944694E0D03C05A4FAA29AF00
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/343b56e4-2785-3758-8b98-7b8ee4b8652f.roa
Signing time: Sat 22 Mar 2025 01:00:40 +0000
ROA not before: Sat 22 Mar 2025 01:00:40 +0000
ROA not after: Fri 20 Jun 2025 01:00:40 +0000
asID: 8069
IP address blocks: 20.33.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:44:69:4e:0d:03:c0:5a:4f:aa:29:af:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Mar 22 01:00:40 2025 GMT
Not After : Jun 20 01:00:40 2025 GMT
Subject: CN=6662b6f1-ae90-4075-9b97-c0c3d4dad462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:22:c8:cd:6e:1c:74:42:d8:e7:4c:70:fa:30:
3e:85:6f:28:82:7a:45:72:f3:d9:8c:a9:92:4f:4a:
f7:6b:cf:91:76:dd:99:45:70:43:d5:c6:f3:80:80:
78:8c:62:49:f7:78:25:2a:67:e7:af:5c:04:3f:e4:
79:73:07:7f:66:74:7c:af:41:19:0c:58:a6:06:0c:
d8:4e:f1:df:80:e7:06:fa:48:65:c9:20:16:99:b2:
0f:92:47:a7:a6:cb:d8:f9:b7:37:91:59:a2:e5:13:
b8:5d:35:e8:5c:f8:37:23:0e:4b:cf:13:9d:01:d6:
77:3f:22:94:e7:7b:2c:9f:10:60:bb:21:4e:e0:e2:
aa:b5:15:8d:b1:ed:65:c7:cd:50:f9:1d:6e:21:b0:
12:09:01:16:29:6c:7b:89:f0:1b:46:8a:fd:ba:ee:
13:02:74:d4:c4:49:c1:97:1a:a6:22:64:33:ba:ca:
05:ec:cf:a7:c9:ae:32:07:f9:49:3a:a2:e9:d8:e4:
22:bb:85:35:e5:7f:00:c8:99:d9:25:ee:de:70:7b:
03:96:a2:bf:1c:11:ca:3e:cf:87:8c:41:1e:7d:58:
1a:e4:a3:6f:3d:05:96:fd:ed:17:ba:e4:02:1c:71:
57:f2:5f:c6:cc:49:bf:dd:83:2b:a9:27:97:85:bd:
97:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:6E:D9:49:E8:E8:45:D1:F1:8D:7C:BD:C1:2B:C6:A1:11:F7:78:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/343b56e4-2785-3758-8b98-7b8ee4b8652f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.185.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:5f:4f:91:7b:b1:83:2e:b3:c6:de:dd:64:9b:78:dd:64:1f:
30:77:e4:b0:7c:ca:3b:30:75:3b:45:70:c6:b2:36:f9:26:3a:
30:08:0d:e1:d9:12:68:bb:dc:8c:55:af:14:fe:68:ab:17:e2:
c2:e4:fc:d6:47:8c:0f:44:f4:a4:95:85:5c:db:10:f7:fb:78:
cf:4a:a5:21:c5:06:70:53:dd:6d:fc:e2:c0:b6:b9:3c:69:44:
5e:db:35:c8:0f:82:67:d6:ca:fc:78:58:ef:5d:ba:98:97:d3:
d7:59:26:6f:df:9e:52:38:1e:52:15:26:a0:f5:b9:5e:14:08:
b0:6c:dc:6f:b6:7c:37:42:a1:48:79:cb:9a:e3:6a:03:d1:81:
97:21:af:52:2f:a8:b6:79:5a:44:59:e0:cd:d4:15:20:de:89:
c5:30:cf:9d:a3:01:c9:8d:fb:ed:38:1a:a5:46:3e:96:49:63:
09:b5:95:ab:82:3a:d6:99:8f:6d:16:05:5d:fe:02:88:71:22:
1e:91:f5:41:5c:27:3f:2f:fb:bc:7f:e1:8f:28:ca:1e:ed:d2:
98:65:de:42:27:fa:e4:76:a6:c8:57:27:41:c8:c3:fd:a5:5b:
42:05:eb:5b:e6:e6:04:7f:47:d8:45:bc:10:61:1d:dc:78:9e:
cf:ba:f3:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:45:05 2025 by rpki-client