Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4f65d6db-ce85-3b40-86e0-1e33116c9e73.roa
File: 4f65d6db-ce85-3b40-86e0-1e33116c9e73.roa (raw, json)
Hash identifier: 22KULsJT1OBp4YY7MepY5W5BU/uHUzaoZFHSdFBCjb4=
Subject key identifier: 77:34:E1:E3:67:C6:3B:6B:9D:1D:85:9F:B5:4F:5A:F1:14:2B:27:15
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F43285848A99635FECB4B114A73989180
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4f65d6db-ce85-3b40-86e0-1e33116c9e73.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 8069
IP address blocks: 20.157.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:35:fe:cb:4b:11:4a:73:98:91:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=a5c96423-8d38-4d44-a11e-8039571647a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4f:4a:f3:d4:f2:75:7e:3b:24:8e:7f:67:76:
98:16:7e:ea:e2:8e:ec:de:5a:e9:b9:d7:b8:4f:59:
ad:f4:ee:aa:6b:3d:4d:a1:45:a3:6a:0e:a0:af:eb:
79:4f:14:be:cd:c8:94:58:f6:a9:11:20:5b:27:5b:
64:c1:17:24:31:dd:33:64:6f:5c:e4:74:79:70:49:
15:31:e0:7c:27:c8:96:09:bf:18:84:37:e9:d6:ef:
ed:af:8e:8e:33:53:2d:08:23:f7:32:6f:36:67:13:
82:a5:4d:99:fa:fb:29:90:89:bf:91:f5:ae:bf:9c:
00:f1:3c:dd:bb:b3:30:13:ca:70:53:34:55:d6:ed:
4c:07:3d:62:41:7c:18:e2:d5:b9:b0:97:4c:e9:b0:
08:c6:25:21:51:fc:25:3e:b7:cf:ff:55:b2:f4:59:
6f:1d:8c:98:86:de:26:7b:c0:81:43:c8:3b:85:11:
d6:e7:e6:b6:6b:46:72:2a:82:55:d3:55:d0:a9:0e:
e0:4b:3f:f6:c1:b7:5c:2c:22:6b:e2:7b:10:eb:c3:
03:77:6b:c5:dd:a9:ac:5f:2b:73:a7:66:70:0d:b3:
c9:9a:6a:4a:7b:09:87:be:dd:52:84:ab:6d:5a:8c:
1e:ac:71:f7:63:5e:2e:e5:d2:a5:83:b2:21:2a:9d:
47:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:34:E1:E3:67:C6:3B:6B:9D:1D:85:9F:B5:4F:5A:F1:14:2B:27:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4f65d6db-ce85-3b40-86e0-1e33116c9e73.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.157.229.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:68:4c:8d:4b:a4:8f:ac:7f:f7:5e:64:cc:dd:e5:ce:1b:7b:
0f:4f:fd:43:0b:a8:4f:16:d2:3f:10:86:b4:8a:0e:d7:49:8a:
91:cc:12:71:47:3e:61:73:84:9f:92:7d:f9:f6:ba:d0:7e:b5:
15:49:5d:34:1c:77:50:da:9b:d4:25:91:05:2a:e4:c7:94:d6:
3a:b3:02:d0:45:32:c6:27:c4:41:3a:37:cc:94:4e:6b:22:9e:
f3:00:d7:d8:ca:5f:31:a1:70:f3:a4:ee:d8:77:16:c4:8a:83:
c3:ef:60:9e:86:5c:1e:74:a0:67:ba:dc:b8:74:f2:1a:aa:ec:
16:fc:ed:35:a4:b7:54:2d:4e:42:af:9a:e3:9b:7e:88:a2:9e:
fd:86:c5:f4:a5:ce:cb:65:ef:d2:df:8f:14:5c:cc:39:ea:99:
12:c1:7e:e2:33:03:3d:cc:5c:2c:8a:fb:19:9d:e4:e4:07:1e:
07:a4:79:b1:b5:e7:39:cb:43:2d:e6:b8:e4:a5:18:63:40:00:
87:c5:d2:e6:a0:c6:f4:08:a2:b9:5f:79:36:30:22:ee:ed:64:
99:ee:73:b9:29:b4:17:b5:4c:6e:2b:22:aa:70:2f:9e:0b:21:
ba:57:18:b4:13:26:14:ec:a5:f0:06:3d:c4:bf:56:fb:e6:24:
3d:f0:ab:6b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEipljX+y0sRSnOYkYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1
ZWVhMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk
YTVjOTY0MjMtOGQzOC00ZDQ0LWExMWUtODAzOTU3MTY0N2E4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsU9K89TydX47JI5/Z3aYFn7q4o7s3lrpude4
T1mt9O6qaz1NoUWjag6gr+t5TxS+zciUWPapESBbJ1tkwRckMd0zZG9c5HR5cEkV
MeB8J8iWCb8YhDfp1u/tr46OM1MtCCP3Mm82ZxOCpU2Z+vspkIm/kfWuv5wA8Tzd
u7MwE8pwUzRV1u1MBz1iQXwY4tW5sJdM6bAIxiUhUfwlPrfP/1Wy9FlvHYyYht4m
e8CBQ8g7hRHW5+a2a0ZyKoJV01XQqQ7gSz/2wbdcLCJr4nsQ68MDd2vF3amsXytz
p2ZwDbPJmmpKewmHvt1ShKttWowerHH3Y14u5dKlg7IhKp1HGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHc04eNnxjtrnR2Fn7VPWvEUKycVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy
ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNGY2NWQ2ZGItY2U4NS0z
YjQwLTg2ZTAtMWUzMzExNmM5ZTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky
M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl
NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz
ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ3lMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI9oTI1LpI+sf/deZMzd5c4bew9P/UMLqE8W0j8QhrSKDtdJipHMEnFH
PmFzhJ+Sffn2utB+tRVJXTQcd1Dam9QlkQUq5MeU1jqzAtBFMsYnxEE6N8yUTmsi
nvMA19jKXzGhcPOk7th3FsSKg8PvYJ6GXB50oGe63Lh08hqq7Bb87TWkt1QtTkKv
muObfoiinv2GxfSlzstl79LfjxRczDnqmRLBfuIzAz3MXCyK+xmd5OQHHgekebG1
5znLQy3muOSlGGNAAIfF0uagxvQIorlfeTYwIu7tZJnuc7kptBe1TG4rIqpwL54L
IbpXGLQTJhTspfAGPcS/VvvmJD3wq2s=
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:40:01 2025 by rpki-client