Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9b153f48-fda1-3324-9da3-41ec104e3952.roa
File: 9b153f48-fda1-3324-9da3-41ec104e3952.roa (raw, json)
Hash identifier: kbxZSze7q375+Z2dNQxNGfPEokO65CtR/qnDeSg3lro=
Subject key identifier: 28:78:31:A8:77:50:8D:CC:A3:04:D1:D7:BE:8C:2C:F1:A4:6C:B8:EB
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F432858494CC954ED60138FC3B7578C80
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9b153f48-fda1-3324-9da3-41ec104e3952.roa
Signing time: Tue 25 Mar 2025 01:00:40 +0000
ROA not before: Tue 25 Mar 2025 01:00:40 +0000
ROA not after: Mon 23 Jun 2025 01:00:40 +0000
asID: 8069
IP address blocks: 20.33.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4c:c9:54:ed:60:13:8f:c3:b7:57:8c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Mar 25 01:00:40 2025 GMT
Not After : Jun 23 01:00:40 2025 GMT
Subject: CN=3bd89b9b-3506-4ad2-a607-e568bb4a4a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:90:37:d8:c9:e1:3c:ff:31:05:52:e4:4b:04:
62:12:ac:95:9b:59:d9:77:53:ff:36:59:f3:29:34:
83:3e:f4:a3:d3:97:f2:93:e0:47:b8:45:65:00:33:
81:93:18:36:19:65:f7:89:2e:47:9e:f6:14:df:aa:
81:c6:24:92:56:d9:94:30:39:c6:00:13:db:2f:9d:
ea:96:de:42:68:99:ee:4c:4d:a8:a5:bd:1e:72:ce:
39:c5:1d:bb:80:b7:49:8a:4f:c8:4e:77:95:38:db:
1e:d5:01:14:5a:2c:f2:08:83:4f:60:7e:c9:41:13:
13:98:ba:5b:c7:90:94:04:27:c1:bb:2d:7e:c0:10:
62:cd:bd:2a:df:47:f2:00:dc:5e:42:2f:85:b3:d3:
ed:af:0e:45:69:bd:0a:c5:10:5f:a6:79:4a:bf:85:
0c:62:98:87:15:e0:61:09:e6:d1:59:45:0f:e6:46:
66:44:c6:0b:60:6b:cb:a2:78:80:bf:32:84:d7:14:
6f:a0:c8:37:c1:71:64:a5:ef:67:0f:52:65:01:49:
5e:7a:6c:49:b1:e2:09:3d:fe:50:14:5d:85:7a:b9:
4b:aa:62:62:44:f3:0d:37:28:13:a2:15:05:e0:c2:
e9:10:09:de:63:35:63:9f:d0:84:a5:bb:01:e8:cd:
98:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:78:31:A8:77:50:8D:CC:A3:04:D1:D7:BE:8C:2C:F1:A4:6C:B8:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9b153f48-fda1-3324-9da3-41ec104e3952.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:40:05:7d:01:be:ba:24:03:f0:26:cf:6f:e6:2a:5b:22:9b:
15:b2:b5:bf:d0:eb:f6:f6:bc:5e:f3:68:c6:1b:89:0c:59:7b:
69:f6:1a:2d:5e:62:ee:12:f2:64:7b:86:c0:de:70:32:6e:27:
26:59:ed:48:eb:43:ec:41:19:89:15:98:3f:36:fb:25:bc:60:
2a:03:aa:c1:2e:cc:51:24:6d:c3:8e:0f:4b:3e:51:bd:f0:fe:
7c:5b:0c:7d:c1:a9:c8:eb:ba:3d:b7:dc:7d:ce:06:1e:db:90:
0e:55:ce:13:c9:bc:cb:9f:9e:e2:88:7d:4e:0d:9f:f8:45:54:
08:0e:8a:b9:9f:49:59:e1:f1:0e:c9:ea:c0:69:83:51:2c:e5:
9b:51:80:ce:e7:74:d7:4f:26:87:8e:42:67:e8:12:bc:60:03:
8d:3c:0a:ed:8a:8e:3d:84:6b:66:c3:38:67:30:87:18:ac:82:
0e:b4:19:8a:12:8c:34:65:83:b5:fe:7c:3f:e7:83:f4:b5:88:
a6:80:cb:dd:99:ba:af:98:17:b4:f3:bc:8d:37:e0:47:1d:a4:
25:5e:f3:ac:ce:0f:ae:65:53:44:72:23:47:91:a9:93:6f:12:
ee:76:d6:60:13:67:7a:b0:45:22:17:f7:84:40:d7:3b:52:fe:
8b:2e:40:27
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyVTtYBOPw7dXjIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1
ZWVhMB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk
M2JkODliOWItMzUwNi00YWQyLWE2MDctZTU2OGJiNGE0YTdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5A32MnhPP8xBVLkSwRiEqyVm1nZd1P/Nlnz
KTSDPvSj05fyk+BHuEVlADOBkxg2GWX3iS5HnvYU36qBxiSSVtmUMDnGABPbL53q
lt5CaJnuTE2opb0ecs45xR27gLdJik/ITneVONse1QEUWizyCINPYH7JQRMTmLpb
x5CUBCfBuy1+wBBizb0q30fyANxeQi+Fs9Ptrw5Fab0KxRBfpnlKv4UMYpiHFeBh
CebRWUUP5kZmRMYLYGvLoniAvzKE1xRvoMg3wXFkpe9nD1JlAUleemxJseIJPf5Q
FF2FerlLqmJiRPMNNygTohUF4MLpEAneYzVjn9CEpbsB6M2YkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCh4Mah3UI3MowTR176MLPGkbLjrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy
ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOWIxNTNmNDgtZmRhMS0z
MzI0LTlkYTMtNDFlYzEwNGUzOTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky
M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl
NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz
ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIlABX0BvrokA/Amz2/mKlsimxWytb/Q6/b2vF7zaMYbiQxZe2n2Gi1e
Yu4S8mR7hsDecDJuJyZZ7UjrQ+xBGYkVmD82+yW8YCoDqsEuzFEkbcOOD0s+Ub3w
/nxbDH3Bqcjruj233H3OBh7bkA5VzhPJvMufnuKIfU4Nn/hFVAgOirmfSVnh8Q7J
6sBpg1Es5ZtRgM7ndNdPJoeOQmfoErxgA408Cu2Kjj2Ea2bDOGcwhxisgg60GYoS
jDRlg7X+fD/ng/S1iKaAy92Zuq+YF7TzvI034EcdpCVe86zOD65lU0RyI0eRqZNv
Eu521mATZ3qwRSIX94RA1ztS/osuQCc=
-----END CERTIFICATE-----
Generated at Wed Apr 9 01:47:52 2025 by rpki-client