Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4d7491f4-0aa6-30a3-8f39-c09ded9b4443.roa
File: 4d7491f4-0aa6-30a3-8f39-c09ded9b4443.roa (raw, json)
Hash identifier: MoyoPuYlPySfJk/+sZhv7tao/qmR/1Jxt5Bs2ihryF8=
Subject key identifier: B6:6F:09:3E:8E:D8:E4:49:80:B2:48:85:9A:C4:10:1A:0A:E2:06:28
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F43285848A996356E8EE3C69DAA97E688
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4d7491f4-0aa6-30a3-8f39-c09ded9b4443.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 8069
IP address blocks: 20.33.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:35:6e:8e:e3:c6:9d:aa:97:e6:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=29e90cac-6dc5-488a-929c-fc69be18d92a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:91:c3:5b:b1:c9:d9:9c:01:50:f0:72:3e:cb:
ff:41:db:2d:45:08:fa:13:fa:d0:01:34:bf:38:f5:
a8:99:91:53:c9:84:1e:df:08:75:a3:75:b0:ec:d3:
e3:20:aa:2a:33:21:88:4e:7b:32:ce:01:5e:41:b2:
e2:77:42:8f:10:48:43:b9:a3:03:79:93:d4:36:ea:
f8:2f:06:a7:d2:e3:6b:ba:68:5d:e5:f1:23:cc:b6:
8d:cd:be:a0:37:d8:28:c7:6e:72:29:ab:47:e0:81:
be:51:e7:f3:ed:4b:18:b4:cc:3b:a0:8d:9d:5e:88:
64:63:54:da:b9:cf:88:39:e6:ca:77:8a:36:3e:25:
d4:12:19:35:bd:6e:a9:08:82:24:63:16:37:f6:4b:
4e:ee:61:6f:09:b6:ff:77:f9:ea:dc:29:14:a7:9e:
ed:4c:a5:3c:94:71:ba:8b:f4:01:28:af:41:e5:57:
d4:9e:75:9f:0b:ca:9d:5c:cb:a5:3c:c9:3b:80:7c:
57:e0:6a:17:19:3a:3a:9f:30:f4:30:0c:38:39:5e:
84:cf:a9:6a:21:09:80:85:9a:2d:cd:13:4f:13:2f:
89:76:62:6c:f3:f8:c1:b7:48:92:eb:03:ea:18:51:
41:7c:98:2f:a1:91:c7:fd:de:10:48:ba:21:72:e7:
2d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:6F:09:3E:8E:D8:E4:49:80:B2:48:85:9A:C4:10:1A:0A:E2:06:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4d7491f4-0aa6-30a3-8f39-c09ded9b4443.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.171.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:04:31:f5:50:88:f0:c1:ff:c2:f6:85:13:8e:53:41:6b:d0:
c0:8a:6c:aa:31:17:07:92:2a:62:8e:09:50:f4:db:ac:4b:77:
00:75:a2:1d:db:df:5d:1d:00:94:32:69:4c:b4:1e:4c:05:d5:
e7:12:10:8b:5b:cb:ec:58:49:00:80:03:5e:68:7a:60:5b:55:
8f:ef:8e:6e:4d:0b:d0:e6:e7:cc:3d:6d:34:a4:ab:f1:ec:c7:
b7:80:10:00:99:81:76:40:bf:d0:3b:5e:7b:93:72:82:12:5b:
8b:33:58:b2:43:78:df:0d:94:ce:e3:b7:a6:e7:79:f4:9c:a2:
be:b3:9f:d9:90:6d:66:3a:83:f4:b8:6d:bd:e5:7b:0c:60:63:
30:8a:ce:5d:6d:11:35:d0:c3:30:10:1b:f7:8c:4a:f6:91:c3:
97:7a:ef:02:86:80:a9:43:10:27:55:66:09:a3:bd:f3:5f:96:
ba:a6:16:17:cf:5e:32:6f:67:18:f7:02:85:9c:4b:92:7d:cd:
ea:da:53:e2:99:2f:f6:e3:4c:a9:6e:40:16:a7:ea:e7:4d:25:
e0:6c:7e:7c:3b:1e:86:06:54:1e:29:5a:4a:19:c3:ba:75:87:
55:55:06:4c:fe:f6:52:71:61:ca:d5:cf:0f:97:30:70:9d:51:
3a:b0:53:6e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEipljVujuPGnaqX5ogwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1
ZWVhMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk
MjllOTBjYWMtNmRjNS00ODhhLTkyOWMtZmM2OWJlMThkOTJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppHDW7HJ2ZwBUPByPsv/QdstRQj6E/rQATS/
OPWomZFTyYQe3wh1o3Ww7NPjIKoqMyGITnsyzgFeQbLid0KPEEhDuaMDeZPUNur4
Lwan0uNrumhd5fEjzLaNzb6gN9gox25yKatH4IG+Uefz7UsYtMw7oI2dXohkY1Ta
uc+IOebKd4o2PiXUEhk1vW6pCIIkYxY39ktO7mFvCbb/d/nq3CkUp57tTKU8lHG6
i/QBKK9B5VfUnnWfC8qdXMulPMk7gHxX4GoXGTo6nzD0MAw4OV6Ez6lqIQmAhZot
zRNPEy+JdmJs8/jBt0iS6wPqGFFBfJgvoZHH/d4QSLohcucteQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLZvCT6O2ORJgLJIhZrEEBoK4gYoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy
ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNGQ3NDkxZjQtMGFhNi0z
MGEzLThmMzktYzA5ZGVkOWI0NDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky
M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl
NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz
ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADsEMfVQiPDB/8L2hROOU0Fr0MCKbKoxFweSKmKOCVD026xLdwB1oh3b
310dAJQyaUy0HkwF1ecSEItby+xYSQCAA15oemBbVY/vjm5NC9Dm58w9bTSkq/Hs
x7eAEACZgXZAv9A7XnuTcoISW4szWLJDeN8NlM7jt6bnefScor6zn9mQbWY6g/S4
bb3lewxgYzCKzl1tETXQwzAQG/eMSvaRw5d67wKGgKlDECdVZgmjvfNflrqmFhfP
XjJvZxj3AoWcS5J9zeraU+KZL/bjTKluQBan6udNJeBsfnw7HoYGVB4pWkoZw7p1
h1VVBkz+9lJxYcrVzw+XMHCdUTqwU24=
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:37:08 2025 by rpki-client