Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/795156b6-7498-321b-9c02-ae19435bf64a.roa
File: 795156b6-7498-321b-9c02-ae19435bf64a.roa (raw, json)
Hash identifier: Cdt9NlgREwx+wrZNpeeAN6rkauFTPpyo/yZaVxuGMwE=
Subject key identifier: B0:C7:CB:7E:55:A0:1C:D4:3D:87:9D:3C:6A:70:9B:68:6C:72:B0:25
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F43285848B35B70C3FD3FD3F65F8E6440
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/795156b6-7498-321b-9c02-ae19435bf64a.roa
Signing time: Wed 29 Jan 2025 02:00:39 +0000
ROA not before: Wed 29 Jan 2025 02:00:39 +0000
ROA not after: Tue 29 Apr 2025 01:00:39 +0000
asID: 8069
IP address blocks: 20.33.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b3:5b:70:c3:fd:3f:d3:f6:5f:8e:64:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Jan 29 02:00:39 2025 GMT
Not After : Apr 29 01:00:39 2025 GMT
Subject: CN=7b48058c-1420-4054-8768-997d929eba09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b2:31:2a:db:f7:b5:59:16:4f:a7:44:e3:5c:
7a:91:fe:0d:55:5d:4c:12:2d:77:cd:5f:e8:7a:ce:
49:0c:ea:e3:18:dc:20:d8:88:c8:8e:9a:95:24:11:
6a:dc:54:55:12:dc:60:2f:4b:4b:55:6b:ab:7c:94:
0c:88:f8:db:eb:4c:9b:45:5c:98:a7:e2:d9:b3:e1:
c3:cb:44:26:a3:c9:32:f8:36:51:4d:47:40:43:50:
98:9c:ff:dc:e9:00:23:ad:d1:dd:bb:6d:88:9e:d1:
4b:36:81:7a:1b:15:67:e8:af:48:ae:34:52:86:71:
b8:6e:40:76:2e:e2:47:9a:20:8c:32:b0:06:ff:a0:
c2:d2:c4:58:ce:76:f0:2c:84:8f:0f:a4:49:6b:ee:
11:2e:25:ce:0d:19:8c:34:4b:b7:46:84:76:8d:be:
5e:e0:05:dc:14:86:cd:c9:93:08:7f:df:2c:5c:d2:
48:8a:37:ca:38:5d:a7:0a:65:48:98:e7:42:f3:98:
3a:2b:45:ed:47:e9:c0:be:3a:da:66:15:dc:11:e4:
bc:62:c2:07:58:4e:b1:f5:b2:44:0f:72:4b:78:1a:
ab:34:96:3c:23:66:71:f9:da:8c:e4:21:0e:a2:f7:
f4:1d:24:9d:45:38:57:9c:44:5b:83:89:50:e8:41:
fd:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C7:CB:7E:55:A0:1C:D4:3D:87:9D:3C:6A:70:9B:68:6C:72:B0:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/795156b6-7498-321b-9c02-ae19435bf64a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.137.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:6d:31:f2:e6:5c:b3:37:bb:22:7e:a6:7e:98:ec:69:c0:27:
f4:e2:34:7c:54:e9:29:40:32:60:06:db:5e:d7:df:74:b4:ce:
7a:ea:92:7a:6e:8b:03:43:25:d9:4c:40:c6:84:68:8d:e8:52:
90:00:29:49:ac:da:36:d2:59:e7:79:c0:84:af:7d:69:fd:9d:
02:c7:1c:a2:8c:5e:5f:87:fb:49:60:df:da:f1:5d:13:c4:fe:
67:2a:9f:48:14:9d:fb:2a:0e:c1:18:da:76:a8:9d:2d:e1:ae:
90:82:48:67:6f:ff:64:9e:7f:75:a5:b1:ff:a2:00:ed:ff:0a:
41:e7:11:d7:39:db:4f:9b:5c:95:76:d1:23:51:45:5d:df:3a:
f5:43:aa:e3:e4:70:0f:a7:44:45:28:25:bf:7f:05:d2:c4:2c:
8f:06:31:2f:15:ca:c6:ca:62:61:a9:c9:19:dc:5c:d7:0f:50:
2a:cd:f5:e6:cc:32:43:af:92:33:a8:de:fe:48:da:04:b5:3f:
67:48:30:73:ac:9d:b2:9f:d9:74:3c:c2:c0:08:a8:f8:55:91:
0d:5d:2f:43:aa:f3:67:06:ec:b2:64:d5:0f:46:96:13:83:b7:
c3:da:1b:09:a1:c0:1e:8d:33:f2:f6:be:fa:58:c6:d2:ff:67:
2d:3f:39:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:47:48 2025 by rpki-client