Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/abad3fc4-19f2-378b-b7e4-8ec84d750389.roa
File: abad3fc4-19f2-378b-b7e4-8ec84d750389.roa (raw, json)
Hash identifier: n1m8UdgxKmtudxxljbO/dfPI9cbzdGThGnYn7TXY/s4=
Subject key identifier: 8E:A6:ED:DE:BA:DF:0E:E5:A0:46:ED:67:5F:0E:E6:DF:9A:19:E0:4A
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F43285848E0069E2B53039A2EB18B04C0
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/abad3fc4-19f2-378b-b7e4-8ec84d750389.roa
Signing time: Fri 14 Feb 2025 02:00:39 +0000
ROA not before: Fri 14 Feb 2025 02:00:39 +0000
ROA not after: Thu 15 May 2025 01:00:39 +0000
asID: 8069
IP address blocks: 20.33.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e0:06:9e:2b:53:03:9a:2e:b1:8b:04:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Feb 14 02:00:39 2025 GMT
Not After : May 15 01:00:39 2025 GMT
Subject: CN=697318e0-00d4-4abc-b16f-fb5b848e16b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:93:87:40:e6:97:2d:36:67:6e:b8:a9:06:db:
0f:f6:aa:8b:56:a4:20:9e:66:91:82:78:42:a8:54:
47:b8:24:c5:86:b9:ef:75:6f:8d:3a:73:ef:6c:99:
e3:a8:cc:5e:db:c5:7b:79:47:94:1d:fe:5c:d1:d2:
36:ea:8d:30:41:55:16:20:5b:c0:f3:f6:97:00:17:
51:3a:34:2f:85:9c:d1:63:f7:74:02:70:29:14:ab:
d8:c8:50:2f:5a:7e:6c:ee:23:36:0f:72:7a:80:4a:
e5:d5:82:d2:9c:6c:bd:86:e8:13:bb:01:b4:9f:7a:
9e:e1:2b:a0:d8:b2:a2:01:80:e2:d6:ed:07:d0:59:
5b:b1:7c:1a:92:e6:9b:25:bd:6b:67:e8:00:b6:ad:
c3:53:5e:ed:56:de:a6:ea:8b:4b:e9:47:49:ad:75:
8f:91:c9:2a:f3:7b:ae:3a:8b:7c:4a:63:5e:1f:a5:
c7:44:54:9d:d2:7a:bf:9a:fa:64:1f:ad:2f:27:8f:
5f:20:63:3e:c9:f6:d7:32:b6:65:d0:01:3f:65:1b:
fa:46:06:0e:b0:64:fa:58:c5:5b:e0:67:07:58:ad:
5b:be:5b:db:5a:5c:ba:ac:49:51:6a:93:fa:8a:a9:
cd:88:cb:b5:a7:96:63:b4:11:bf:7f:9f:33:d8:d6:
b6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A6:ED:DE:BA:DF:0E:E5:A0:46:ED:67:5F:0E:E6:DF:9A:19:E0:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/abad3fc4-19f2-378b-b7e4-8ec84d750389.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.97.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:02:32:50:14:72:7e:89:1f:e1:7d:9b:a9:38:30:3d:67:79:
5c:f8:7b:d2:b9:b2:36:a9:bb:aa:10:88:95:5e:bf:4d:8a:31:
02:9e:21:db:fc:3a:70:4b:45:c2:2d:50:91:ac:33:36:0e:0a:
c2:9f:26:29:ec:4d:f7:ad:a6:9b:58:84:54:9b:8e:fc:29:68:
1b:7b:b6:86:ab:e3:61:dd:62:57:7b:cb:bf:95:a4:75:f2:67:
10:2a:4d:73:5b:64:3d:4b:b6:a5:f3:a0:33:83:eb:c5:34:bd:
9d:c0:04:c1:52:f8:97:92:f4:a8:01:76:af:36:25:13:ca:df:
db:c2:e2:38:95:ca:96:fc:3f:6e:d0:34:91:8d:39:d2:52:6f:
69:c6:98:36:00:4a:98:e6:85:f4:b1:67:d2:dd:6b:04:e3:29:
91:83:0e:2f:62:73:3e:47:e7:33:85:ee:df:cc:85:25:61:ee:
99:97:a7:63:fd:b7:95:c8:51:dd:e9:b5:20:ae:da:a7:6a:1e:
81:81:9a:4f:d0:a2:bf:49:7a:c9:f4:94:6b:ba:de:d6:1f:b7:
f8:be:93:eb:a6:22:87:e8:1d:c9:14:68:16:7e:ae:0e:58:1d:
cd:28:c7:20:50:1b:c9:40:ee:0f:cf:f6:b8:8e:3e:f2:e5:ba:
01:22:08:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjgBp4rUwOaLrGLBMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1
ZWVhMB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk
Njk3MzE4ZTAtMDBkNC00YWJjLWIxNmYtZmI1Yjg0OGUxNmI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJOHQOaXLTZnbripBtsP9qqLVqQgnmaRgnhC
qFRHuCTFhrnvdW+NOnPvbJnjqMxe28V7eUeUHf5c0dI26o0wQVUWIFvA8/aXABdR
OjQvhZzRY/d0AnApFKvYyFAvWn5s7iM2D3J6gErl1YLSnGy9hugTuwG0n3qe4Sug
2LKiAYDi1u0H0FlbsXwakuabJb1rZ+gAtq3DU17tVt6m6otL6UdJrXWPkckq83uu
Oot8SmNeH6XHRFSd0nq/mvpkH60vJ49fIGM+yfbXMrZl0AE/ZRv6RgYOsGT6WMVb
4GcHWK1bvlvbWly6rElRapP6iqnNiMu1p5ZjtBG/f58z2Na2kwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI6m7d663w7loEbtZ18O5t+aGeBKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy
ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYWJhZDNmYzQtMTlmMi0z
NzhiLWI3ZTQtOGVjODRkNzUwMzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky
M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl
NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz
ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFECMlAUcn6JH+F9m6k4MD1neVz4e9K5sjapu6oQiJVev02KMQKeIdv8
OnBLRcItUJGsMzYOCsKfJinsTfetpptYhFSbjvwpaBt7toar42HdYld7y7+VpHXy
ZxAqTXNbZD1LtqXzoDOD68U0vZ3ABMFS+JeS9KgBdq82JRPK39vC4jiVypb8P27Q
NJGNOdJSb2nGmDYASpjmhfSxZ9LdawTjKZGDDi9icz5H5zOF7t/MhSVh7pmXp2P9
t5XIUd3ptSCu2qdqHoGBmk/Qor9Jesn0lGu63tYft/i+k+umIofoHckUaBZ+rg5Y
Hc0oxyBQG8lA7g/P9riOPvLlugEiCKM=
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:45:06 2025 by rpki-client