Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/437bc310-8748-3d28-b170-0b50da76f3c2.roa
File: 437bc310-8748-3d28-b170-0b50da76f3c2.roa (raw, json)
Hash identifier: //XvDJVTjZqIh2IXY42uam5Qmq2Io5hmZN17FrhaZlc=
Subject key identifier: 94:1B:02:DB:07:65:5F:05:DA:1E:A0:57:1D:3B:AE:77:AA:8F:9D:97
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F432858489D05EDA157A1DF8267F4E380
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/437bc310-8748-3d28-b170-0b50da76f3c2.roa
Signing time: Tue 21 Jan 2025 02:00:39 +0000
ROA not before: Tue 21 Jan 2025 02:00:39 +0000
ROA not after: Mon 21 Apr 2025 01:00:39 +0000
asID: 8069
IP address blocks: 20.33.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9d:05:ed:a1:57:a1:df:82:67:f4:e3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Jan 21 02:00:39 2025 GMT
Not After : Apr 21 01:00:39 2025 GMT
Subject: CN=8a014f03-3cee-429b-8a7a-c9034778e58f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2e:8b:fc:e6:63:56:71:86:94:5f:5e:66:57:
36:19:70:75:60:bb:98:37:09:a6:7e:59:86:48:ae:
fd:98:50:45:db:41:7b:3c:40:1c:06:02:e6:41:e6:
9a:ac:47:7a:9f:81:ca:2d:a2:70:cf:6d:4b:45:6f:
ee:bf:2c:01:33:36:5d:2b:41:10:2c:b7:06:ce:0e:
54:ee:f6:5a:8b:4e:73:70:93:81:5d:ae:2d:b5:bd:
55:c5:a0:bb:e5:eb:0d:3f:21:b9:1e:18:10:4f:98:
fd:73:9f:65:15:49:b0:34:0d:8f:21:0c:a5:52:86:
7a:d5:d2:5e:b6:6b:98:3d:57:1f:96:3e:2d:a2:f6:
39:1c:08:3e:40:8a:d8:5e:bd:1b:d4:56:1b:5a:25:
84:92:17:1e:1c:ab:b8:3e:2d:1b:2a:39:cf:6d:ce:
3a:cf:df:d7:f0:6c:55:fd:67:6c:02:26:b9:bf:e0:
62:0d:f3:76:ff:29:dc:33:3d:64:af:04:2b:97:4b:
79:08:53:1c:67:d5:c3:20:d5:be:5c:3f:d3:ae:35:
66:d2:e7:b1:6e:35:07:a9:d8:f5:22:c0:97:c3:be:
45:39:b7:0c:47:9b:ad:ee:81:86:25:a1:2e:4c:f0:
08:86:65:78:e3:dd:cc:ca:8f:08:51:28:52:73:78:
a9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:1B:02:DB:07:65:5F:05:DA:1E:A0:57:1D:3B:AE:77:AA:8F:9D:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/437bc310-8748-3d28-b170-0b50da76f3c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.93.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:26:a1:4b:6e:17:d0:83:b8:f5:c0:35:14:39:45:40:27:57:
25:85:06:0d:c0:82:27:38:6b:8a:af:91:c6:60:1f:8c:68:3a:
4b:82:af:a5:b9:4a:eb:d0:18:7c:ed:36:a1:92:93:99:5b:9e:
b1:02:e4:6f:d4:42:df:c6:c2:98:f6:3c:02:f5:d6:87:9b:fb:
d7:dc:84:58:a9:cd:c6:2c:c4:aa:84:eb:22:9e:c8:af:2e:12:
b4:25:1a:e5:27:18:c1:75:da:93:b8:18:00:84:d1:41:b6:89:
30:e7:43:74:16:75:e3:09:82:06:a1:b7:c4:b6:3c:b1:d6:6d:
14:ee:f9:43:57:7b:54:9d:bf:3f:a0:8b:3c:1f:99:6a:5e:9e:
4b:c2:7a:ad:dc:da:28:a2:40:26:51:6b:a4:9e:60:24:1e:b6:
c8:06:86:4b:d8:9c:ab:a9:b0:fd:0c:9e:28:5d:fa:1e:55:68:
60:fc:7b:06:bf:70:29:a7:53:c7:98:9d:0d:aa:c0:fc:71:81:
c9:af:e7:fb:b2:8a:9d:6f:38:47:61:e8:59:79:ac:c8:14:8f:
73:ed:e0:0e:c8:ad:da:64:91:cd:55:e9:fc:63:8c:80:c0:d2:
1e:3c:21:7d:da:4f:af:7b:c2:58:67:ee:a5:e0:6a:28:70:44:
69:e7:2c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:45:06 2025 by rpki-client