Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3b5b3fdc-610d-3634-aa1a-6f5752624bda.roa
File: 3b5b3fdc-610d-3634-aa1a-6f5752624bda.roa (raw, json)
Hash identifier: 1D5T2SdCffz1NceoIHtLPWG4Ulut/pyUorC5j+ffSIo=
Subject key identifier: 65:26:B7:BD:3E:CA:C8:C6:74:45:BF:1F:9C:20:CD:71:D9:F1:1F:F7
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F432858488AE0A9C54C9BB01100A45680
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3b5b3fdc-610d-3634-aa1a-6f5752624bda.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 8069
IP address blocks: 20.157.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:a9:c5:4c:9b:b0:11:00:a4:56:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=659e3104-4570-49b4-be1e-7d8ce8df9b83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ec:6a:3d:54:30:f4:77:61:3c:45:fc:e9:20:
49:2c:c6:29:bc:da:51:12:16:2b:cc:f6:f3:d8:c4:
a8:9a:6c:c4:65:fa:b0:09:fe:4f:4b:79:75:7f:a2:
75:b3:82:e6:79:b7:0a:f0:51:4a:ec:21:0f:93:3f:
b8:65:8f:68:1f:00:50:75:5b:b0:36:b6:f4:fc:e1:
db:b0:b6:4e:b3:25:69:7e:9d:03:32:a9:70:37:8a:
8f:60:b8:70:79:1b:46:de:40:71:f3:2c:88:41:cd:
24:dd:c6:7b:2c:4a:52:91:37:37:47:a7:13:b3:74:
ce:2e:1a:81:b2:29:eb:8f:09:a4:ee:b5:b2:9d:9b:
f9:43:f1:16:de:14:9a:18:f3:66:d9:c8:35:a3:22:
73:d9:3a:e6:49:78:7d:64:9e:21:9b:42:c2:90:54:
95:66:67:e9:34:c9:ae:64:a7:4f:1c:72:a8:12:09:
75:09:30:81:26:ec:01:5f:a4:19:f4:63:a5:af:c1:
ec:27:42:58:9d:00:69:14:4f:d6:f2:87:72:6c:ea:
70:d1:02:50:ec:e6:30:56:52:c8:ad:50:4d:86:2d:
5e:88:51:e5:85:6b:a0:c4:2a:1e:63:57:8b:3d:e4:
5f:26:2b:d8:5c:56:10:43:be:18:9c:76:58:5f:a3:
0c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:26:B7:BD:3E:CA:C8:C6:74:45:BF:1F:9C:20:CD:71:D9:F1:1F:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3b5b3fdc-610d-3634-aa1a-6f5752624bda.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.157.178.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:46:cf:34:2e:f5:d7:f8:69:10:55:51:2e:aa:48:30:4e:41:
21:16:5f:27:3d:ff:8f:0f:f7:a6:67:bc:a3:27:36:1c:f6:e2:
47:c6:95:e8:6b:0d:38:df:f8:bd:2b:ea:da:27:17:bf:e0:b3:
f3:a1:78:7d:48:8f:55:11:18:ca:8b:56:4c:3c:8d:cb:8a:2f:
fd:88:16:75:ce:3c:20:84:9f:80:f2:5d:9a:57:52:ae:3e:a3:
4b:cb:80:4f:6b:83:16:7a:97:f1:3a:8b:ee:62:c1:7f:fc:de:
f4:bd:42:3f:b2:3e:71:19:56:34:7a:fa:c7:f1:92:5f:fb:ef:
4d:f3:66:80:40:15:89:12:5b:94:a0:2c:68:24:4e:be:2f:19:
95:b8:8a:a8:65:ce:67:0a:c9:99:2b:f6:12:9e:49:a1:2f:f7:
e4:71:b4:5e:93:8f:4f:09:98:b8:ec:bf:61:60:a6:da:ed:f3:
0c:6b:90:d7:e4:68:32:56:ec:20:d7:e8:88:fe:29:db:36:6d:
ad:fc:ed:7e:1c:57:1d:e7:da:8b:64:ee:03:80:77:2c:e4:9d:
81:ac:6e:12:6d:44:ad:96:f1:14:cb:ca:5b:85:93:ad:ca:19:
03:ea:45:cf:66:6c:cd:e9:97:cf:bc:bf:df:65:f8:be:20:7e:
f4:24:20:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:42:32 2025 by rpki-client