Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6e5a45b9-c391-3cb7-bd4d-c9ab44dcbe4d.roa
File: 6e5a45b9-c391-3cb7-bd4d-c9ab44dcbe4d.roa (raw, json)
Hash identifier: TSNHaz+yYtLTuEg6l9zY82+6ptl6x5tumEBxMgszYGQ=
Subject key identifier: 05:88:C9:41:7D:C6:A1:59:B2:6E:8E:31:BD:77:4E:CE:52:F0:1E:0D
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F432858489D05ED5D046980E0F37EEA20
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6e5a45b9-c391-3cb7-bd4d-c9ab44dcbe4d.roa
Signing time: Tue 21 Jan 2025 02:00:39 +0000
ROA not before: Tue 21 Jan 2025 02:00:39 +0000
ROA not after: Mon 21 Apr 2025 01:00:39 +0000
asID: 8069
IP address blocks: 20.33.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9d:05:ed:5d:04:69:80:e0:f3:7e:ea:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Jan 21 02:00:39 2025 GMT
Not After : Apr 21 01:00:39 2025 GMT
Subject: CN=8a973434-3479-4173-b7f0-c11f393994e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a0:52:00:47:d2:fb:01:03:ba:dd:0c:0c:9f:
3b:49:2b:64:b8:3e:ae:29:cb:19:ba:57:68:6b:5a:
ab:af:59:36:a8:47:ed:2d:30:56:e3:ce:80:6c:79:
34:ca:cf:01:27:48:f5:10:2d:63:ba:eb:18:7a:b9:
16:a3:d2:a6:75:de:ff:92:d2:00:70:0b:7b:a4:d4:
f3:ab:78:bb:5f:5d:e4:fe:80:ec:99:81:30:88:2c:
cb:a6:28:d4:4b:14:40:d5:a0:fb:48:ae:8a:b4:1b:
9a:be:71:3d:1e:95:5b:54:2b:1a:84:82:64:79:af:
90:9a:70:2b:d6:14:8a:14:bb:cc:c4:33:bf:5f:80:
33:0c:e5:d0:b4:0a:34:45:b9:56:6b:8b:c4:1c:f9:
b2:38:1c:fd:92:b6:3a:8a:a7:2b:a3:e6:7e:17:3a:
34:d9:aa:41:ca:c4:f4:30:d8:49:c4:18:a8:90:24:
67:14:86:b6:77:b3:ff:b5:24:23:1c:15:73:91:9d:
0d:43:46:f0:1e:ac:b5:a3:7c:fa:91:d1:5f:34:d0:
81:b7:cd:a0:8c:3c:b9:97:5d:2a:f3:4b:6e:d5:7d:
84:a5:4b:23:65:ee:a2:7d:7e:4b:9c:59:47:9f:55:
b9:9b:81:84:28:2e:78:24:d4:9f:3f:41:18:e5:49:
8e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:88:C9:41:7D:C6:A1:59:B2:6E:8E:31:BD:77:4E:CE:52:F0:1E:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6e5a45b9-c391-3cb7-bd4d-c9ab44dcbe4d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.89.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:80:9b:bf:b3:d5:78:97:dd:76:f4:a4:2b:04:b8:fe:69:09:
71:59:5a:a9:dc:7f:6b:9b:34:eb:76:9b:cb:d9:f2:9b:06:83:
3a:75:76:f7:48:3f:0d:7f:bd:a7:81:cb:82:21:7c:8e:18:71:
d9:24:d2:cf:2e:03:67:bd:1a:28:08:78:70:e6:64:c4:d2:03:
d6:0e:88:9e:c8:04:90:45:65:cd:53:79:36:9d:8f:4e:74:3e:
fe:5c:97:e3:c6:00:83:2e:bb:f7:63:f2:fc:fb:90:2e:2d:6e:
6f:72:5e:e3:f8:4f:12:d3:83:1a:af:f4:06:6f:01:db:6a:90:
ad:15:a8:7f:cf:fb:9d:c9:1a:99:3a:d6:4e:f1:38:ee:ec:6e:
f3:43:99:f0:36:16:08:47:f9:9a:c4:77:c2:52:93:29:f1:c8:
b3:80:44:7f:88:c5:f5:8f:91:b2:60:ad:77:90:7a:52:ff:d8:
8b:5d:37:8b:1a:64:81:82:ef:de:3d:55:4f:70:df:33:a7:4a:
fb:8b:61:35:22:7c:3e:71:42:f1:db:b0:39:c1:44:e5:c7:47:
d2:84:20:8a:24:6d:74:8c:95:c5:4c:69:22:9f:f8:be:cb:e1:
49:37:df:a0:9b:a4:4e:34:bc:c2:88:ba:a6:e8:29:48:17:c5:
ad:f8:af:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:37:16 2025 by rpki-client