Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/74b8f18a-03af-3efd-855d-08cd5d5beccf.roa
File: 74b8f18a-03af-3efd-855d-08cd5d5beccf.roa (raw, json)
Hash identifier: zLnMXBx3FK/EpVmI+eRrte85UFYzGfcGdxbLy6KSUqs=
Subject key identifier: 85:E4:79:24:76:3D:E7:FA:92:8F:17:1D:EE:5D:D0:51:16:B1:5B:DA
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584954477307363ED58B2CD01640
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/74b8f18a-03af-3efd-855d-08cd5d5beccf.roa
Signing time: Thu 27 Mar 2025 17:25:41 +0000
ROA not before: Thu 27 Mar 2025 17:25:41 +0000
ROA not after: Wed 25 Jun 2025 17:25:41 +0000
asID: 8069
IP address blocks: 20.153.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:54:47:73:07:36:3e:d5:8b:2c:d0:16:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Mar 27 17:25:41 2025 GMT
Not After : Jun 25 17:25:41 2025 GMT
Subject: CN=87f81009-4edc-4e18-acc4-ad4347552855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:9a:e1:54:bb:11:68:25:5e:8e:8e:fc:75:40:
e4:63:ba:95:20:68:64:19:bf:bf:93:a7:a3:da:98:
f1:0b:6d:e2:12:96:b1:7d:7d:54:71:cb:31:dd:e5:
ee:b9:b2:40:15:50:8c:23:15:7f:94:1b:f3:0b:b5:
0d:0f:d5:fb:08:42:92:3e:c5:7d:3e:cf:f0:9a:2c:
ae:ad:f8:8e:b4:bd:d2:4f:be:17:9f:e1:c2:b9:ba:
58:fc:4f:88:94:8c:c0:38:1f:33:17:72:82:35:10:
a2:ba:ea:38:62:93:06:a2:31:99:c4:1a:e3:93:f1:
4d:8d:6f:69:69:c9:0b:97:d2:77:14:66:ba:6f:c2:
15:66:5f:f4:8a:d8:81:ab:51:b4:f0:31:0a:b1:0e:
e3:ce:13:4a:21:12:2f:96:de:24:81:04:35:a9:d5:
a9:4e:47:91:47:48:84:a1:da:ba:2b:e0:8a:7f:9d:
1a:04:bb:13:c9:e9:42:63:c0:80:00:85:fe:bf:ed:
8b:11:69:23:9d:07:2c:26:44:e0:f0:5f:16:e9:74:
9c:64:4b:eb:b4:d7:ac:23:c2:d5:7c:97:b3:17:98:
92:30:29:24:c1:c0:88:fe:94:4d:77:c3:c9:40:d0:
db:95:c1:7b:0d:0a:cd:03:ca:d2:19:0c:75:8d:d1:
7d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E4:79:24:76:3D:E7:FA:92:8F:17:1D:EE:5D:D0:51:16:B1:5B:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/74b8f18a-03af-3efd-855d-08cd5d5beccf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.153.145.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:9b:f8:08:f6:b2:36:64:f2:5a:a2:7c:8e:ad:4a:9f:29:08:
16:62:21:a2:ed:bb:97:f5:38:27:23:dd:ea:24:5e:2c:a5:92:
b2:5a:f5:05:b6:c5:a7:0d:a1:4f:1e:35:2f:c9:96:80:2d:4c:
0f:20:ed:2b:e4:68:1d:72:db:5d:75:da:87:3c:96:1a:a7:d0:
c1:b3:fd:10:5f:53:94:43:c3:3f:d0:82:4f:a3:dc:c7:cb:53:
57:c6:af:a2:9f:db:d6:96:b3:ed:6c:ba:b0:a1:83:e6:fd:a8:
1e:ad:b2:ff:c1:af:16:b5:80:27:d5:01:e8:f7:99:0d:90:56:
ee:89:52:c9:b9:ab:38:d2:86:7e:f3:79:e8:62:67:bd:c2:7c:
d9:15:dc:b7:70:a3:cc:7b:a7:52:11:53:d4:35:b3:cf:2e:12:
f6:72:cb:62:a0:e2:f9:19:0a:14:44:01:81:a2:97:91:82:75:
3c:7a:a7:37:a9:e1:3e:fe:43:64:6a:6b:69:65:85:e8:88:01:
27:0f:f1:f1:31:ec:bc:25:3b:2b:d3:a9:94:58:1b:17:17:44:
97:2c:5b:c2:89:1b:a2:f9:a8:b7:98:ff:db:e7:b8:b5:74:97:
72:31:c7:ef:f1:44:f4:c7:a9:6a:11:1e:72:02:31:26:7b:a0:
65:65:f9:12
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElUR3MHNj7ViyzQFkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1
ZWVhMB4XDTI1MDMyNzE3MjU0MVoXDTI1MDYyNTE3MjU0MVowLzEtMCsGA1UEAxMk
ODdmODEwMDktNGVkYy00ZTE4LWFjYzQtYWQ0MzQ3NTUyODU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5rhVLsRaCVejo78dUDkY7qVIGhkGb+/k6ej
2pjxC23iEpaxfX1Uccsx3eXuubJAFVCMIxV/lBvzC7UND9X7CEKSPsV9Ps/wmiyu
rfiOtL3ST74Xn+HCubpY/E+IlIzAOB8zF3KCNRCiuuo4YpMGojGZxBrjk/FNjW9p
ackLl9J3FGa6b8IVZl/0itiBq1G08DEKsQ7jzhNKIRIvlt4kgQQ1qdWpTkeRR0iE
odq6K+CKf50aBLsTyelCY8CAAIX+v+2LEWkjnQcsJkTg8F8W6XScZEvrtNesI8LV
fJezF5iSMCkkwcCI/pRNd8PJQNDblcF7DQrNA8rSGQx1jdF93QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIXkeSR2Pef6ko8XHe5d0FEWsVvaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy
ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNzRiOGYxOGEtMDNhZi0z
ZWZkLTg1NWQtMDhjZDVkNWJlY2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky
M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl
NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz
ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFGb+Aj2sjZk8lqifI6tSp8pCBZiIaLtu5f1OCcj3eokXiylkrJa9QW2
xacNoU8eNS/JloAtTA8g7SvkaB1y21112oc8lhqn0MGz/RBfU5RDwz/Qgk+j3MfL
U1fGr6Kf29aWs+1surChg+b9qB6tsv/Brxa1gCfVAej3mQ2QVu6JUsm5qzjShn7z
eehiZ73CfNkV3Ldwo8x7p1IRU9Q1s88uEvZyy2Kg4vkZChREAYGil5GCdTx6pzep
4T7+Q2Rqa2llheiIAScP8fEx7LwlOyvTqZRYGxcXRJcsW8KJG6L5qLeY/9vnuLV0
l3Ixx+/xRPTHqWoRHnICMSZ7oGVl+RI=
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:47:48 2025 by rpki-client