Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/78718e56-794a-397d-80d6-334e9fd3e89d.roa
File: 78718e56-794a-397d-80d6-334e9fd3e89d.roa (raw, json)
Hash identifier: XoCR4Mjj/lXxuV/DLmngN2zwwXYzzm6FlvJaoRvMuZM=
Subject key identifier: CF:13:DE:3F:F6:A3:59:B7:0C:31:B4:9D:00:03:7F:6C:EB:98:06:6A
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F43285848E0069E37CF09AA9926130180
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/78718e56-794a-397d-80d6-334e9fd3e89d.roa
Signing time: Fri 14 Feb 2025 02:00:39 +0000
ROA not before: Fri 14 Feb 2025 02:00:39 +0000
ROA not after: Thu 15 May 2025 01:00:39 +0000
asID: 8069
IP address blocks: 20.33.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e0:06:9e:37:cf:09:aa:99:26:13:01:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Feb 14 02:00:39 2025 GMT
Not After : May 15 01:00:39 2025 GMT
Subject: CN=3e7a5257-ffd0-450f-881b-99a5a5fb3619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:05:b6:b7:dc:7b:9b:8f:e6:8c:56:a2:d8:b3:
c9:25:79:66:2e:6f:aa:c8:54:61:11:5d:97:df:93:
f9:ca:04:2a:07:f9:32:22:ed:51:de:cf:1a:d3:5c:
54:9d:46:f5:eb:58:47:1e:2e:e6:20:10:11:8e:2b:
96:19:44:75:42:f5:9c:6c:2a:82:66:f7:81:3c:2d:
2b:b5:fb:78:c7:12:e9:27:09:6a:5a:f8:11:fb:89:
9b:b6:e1:f7:9b:28:1b:2f:b6:62:f6:6f:1b:76:e4:
92:a3:a3:a1:9d:8a:4f:df:aa:64:8e:f0:6a:3b:25:
93:5f:b2:87:61:a2:4a:d9:00:95:94:a4:3b:6f:13:
c6:fb:9e:19:16:91:58:ce:79:c7:a1:d0:ee:08:93:
28:58:26:de:37:51:70:f7:4b:8f:99:1b:4a:c9:56:
8c:40:dd:61:cc:80:77:b9:5b:4a:65:fc:50:60:9b:
b9:31:44:d7:56:c6:f5:5f:a1:56:96:bb:a0:45:fc:
af:8e:9f:c3:cf:9f:c4:b8:02:2f:9c:5a:82:ba:29:
fa:9c:75:34:83:0c:22:f9:c0:fb:7b:e4:4a:ea:b2:
00:de:1f:93:40:d3:6a:f5:38:ab:70:84:b4:3c:32:
ec:48:c7:fe:14:6f:12:03:25:13:7c:9a:e9:8f:63:
9d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:13:DE:3F:F6:A3:59:B7:0C:31:B4:9D:00:03:7F:6C:EB:98:06:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/78718e56-794a-397d-80d6-334e9fd3e89d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.99.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:7e:c6:a1:d4:77:e5:92:21:7f:f5:6a:0e:91:8a:cc:e8:f7:
ef:53:fc:95:33:6d:d0:6c:60:31:27:15:fa:f6:86:f7:aa:99:
4a:fc:46:dd:9c:ec:93:b3:5d:f6:77:eb:61:46:64:45:21:43:
45:e6:78:31:e4:2f:da:35:6d:f2:f2:38:b6:04:97:8d:ee:25:
66:fd:a6:21:3c:ac:bc:7b:11:b2:08:d7:c0:d9:eb:f7:29:38:
58:55:6a:48:9c:84:f9:7e:46:99:29:67:4a:3b:f1:65:02:1d:
f0:2a:63:8a:a0:40:14:c1:62:83:a9:b7:92:c3:f1:b9:a9:93:
d3:77:26:73:4c:c1:a7:8f:3e:75:bc:db:72:09:19:0b:d7:f2:
11:e8:d9:22:91:17:a5:93:69:5b:34:f2:40:dc:8c:cf:f7:58:
99:d5:a4:65:1d:f1:43:5b:3a:4d:dc:d7:71:f7:c0:6e:6d:fd:
45:b2:4f:31:f9:f0:03:37:6b:8b:d1:93:57:52:60:fe:ca:91:
be:b0:b3:d8:ed:3d:02:93:53:60:11:a2:e2:19:3a:62:60:08:
3b:bf:c3:52:92:f7:f3:4f:b5:76:c3:e7:c6:25:48:97:28:85:
75:e6:e9:38:59:99:ac:c9:43:68:ab:1b:9b:07:58:66:86:2e:
02:a3:86:09
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjgBp43zwmqmSYTAYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1
ZWVhMB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk
M2U3YTUyNTctZmZkMC00NTBmLTg4MWItOTlhNWE1ZmIzNjE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQW2t9x7m4/mjFai2LPJJXlmLm+qyFRhEV2X
35P5ygQqB/kyIu1R3s8a01xUnUb161hHHi7mIBARjiuWGUR1QvWcbCqCZveBPC0r
tft4xxLpJwlqWvgR+4mbtuH3mygbL7Zi9m8bduSSo6OhnYpP36pkjvBqOyWTX7KH
YaJK2QCVlKQ7bxPG+54ZFpFYznnHodDuCJMoWCbeN1Fw90uPmRtKyVaMQN1hzIB3
uVtKZfxQYJu5MUTXVsb1X6FWlrugRfyvjp/Dz5/EuAIvnFqCuin6nHU0gwwi+cD7
e+RK6rIA3h+TQNNq9TircIS0PDLsSMf+FG8SAyUTfJrpj2OduwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM8T3j/2o1m3DDG0nQADf2zrmAZqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy
ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNzg3MThlNTYtNzk0YS0z
OTdkLTgwZDYtMzM0ZTlmZDNlODlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky
M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl
NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz
ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFh+xqHUd+WSIX/1ag6Riszo9+9T/JUzbdBsYDEnFfr2hveqmUr8Rt2c
7JOzXfZ362FGZEUhQ0XmeDHkL9o1bfLyOLYEl43uJWb9piE8rLx7EbII18DZ6/cp
OFhVakichPl+RpkpZ0o78WUCHfAqY4qgQBTBYoOpt5LD8bmpk9N3JnNMwaePPnW8
23IJGQvX8hHo2SKRF6WTaVs08kDcjM/3WJnVpGUd8UNbOk3c13H3wG5t/UWyTzH5
8AM3a4vRk1dSYP7Kkb6ws9jtPQKTU2ARouIZOmJgCDu/w1KS9/NPtXbD58YlSJco
hXXm6ThZmazJQ2irG5sHWGaGLgKjhgk=
-----END CERTIFICATE-----
Generated at Wed Apr 9 11:41:10 2025 by rpki-client