Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/abe29d06-94cb-33bf-b8fd-20f50b0715db.roa
File: abe29d06-94cb-33bf-b8fd-20f50b0715db.roa (raw, json)
Hash identifier: wfgdCgnWgcV7LuK+Zd8wptn0ZtKuVSSStLNRzT9/aQo=
Subject key identifier: 11:66:45:D0:50:DD:0E:B7:99:EB:19:BA:51:DB:A1:80:F1:D1:31:51
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584883E5CA38F34EBCE6C2650380
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/abe29d06-94cb-33bf-b8fd-20f50b0715db.roa
Signing time: Sun 12 Jan 2025 02:00:38 +0000
ROA not before: Sun 12 Jan 2025 02:00:38 +0000
ROA not after: Sat 12 Apr 2025 01:00:38 +0000
asID: 8069
IP address blocks: 20.33.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:83:e5:ca:38:f3:4e:bc:e6:c2:65:03:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Jan 12 02:00:38 2025 GMT
Not After : Apr 12 01:00:38 2025 GMT
Subject: CN=6ffa2adb-384a-47cf-a060-d04d0f1bd021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f6:98:d1:f2:78:aa:40:53:2b:58:d8:6e:bc:
1b:33:6b:81:49:b2:a8:7e:9f:ac:1a:5a:8a:e5:93:
ff:3f:f2:81:34:fc:49:26:2f:25:99:bd:94:ca:7b:
eb:96:cb:bc:bd:5c:74:d8:f0:fd:9d:c8:2c:1a:ee:
72:7f:b9:6a:30:61:ff:33:a6:98:6d:42:88:6f:fe:
7e:2a:f8:53:3d:6f:38:9c:d6:20:5c:df:b9:d9:af:
30:ce:31:8e:80:aa:07:f4:f3:a5:0d:9b:98:a9:36:
77:40:f7:b6:de:fe:85:25:9d:a5:e4:bd:52:d3:3a:
19:cb:38:cc:e2:ca:43:d6:c4:8e:ee:4c:6e:88:74:
c6:dc:19:a1:99:92:d3:02:b3:e4:d1:c0:39:a8:e0:
6c:f2:29:e3:e8:9f:d2:45:72:50:81:7e:55:71:88:
1e:22:07:4f:80:d6:93:68:34:28:5f:f8:4b:a2:e3:
7b:fc:ab:76:4d:de:db:f9:8c:3b:b3:2c:d8:63:13:
b2:b4:f6:58:69:59:9e:1b:f6:c6:94:bf:e6:b2:69:
fa:b7:6f:4d:b1:03:b6:56:e1:0b:e4:ed:e2:0a:1a:
06:3b:93:b7:8f:95:6d:8f:3e:6c:2e:ab:88:71:24:
3d:f7:d3:61:fe:1e:c3:7f:bf:d1:2a:25:54:6d:83:
7f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:66:45:D0:50:DD:0E:B7:99:EB:19:BA:51:DB:A1:80:F1:D1:31:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/abe29d06-94cb-33bf-b8fd-20f50b0715db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:9c:b1:cf:5a:a1:ab:95:66:f0:ec:96:23:7a:dc:c4:f4:e8:
01:b3:aa:97:fd:ca:87:ab:e1:a2:db:22:4a:98:1e:7b:1e:e7:
a8:e9:11:bc:8d:4b:93:b9:ba:05:9f:58:a1:2e:8e:25:2f:a8:
5c:60:f0:3a:f5:8a:0b:b0:9d:40:f4:8d:dc:e2:22:f6:7c:68:
d5:69:aa:ac:31:05:51:0b:18:5e:60:7e:52:42:45:5a:1d:23:
50:cc:a4:cd:3c:89:08:28:09:18:44:02:49:5f:07:ff:f5:9b:
ea:1d:b9:db:7b:9f:c0:a1:8f:b3:a2:3d:9a:fc:19:53:c0:a4:
25:c3:7a:8b:95:09:28:4b:04:b0:d4:b2:c9:27:b7:c9:21:2b:
42:71:2b:1c:37:d2:08:41:a0:6c:cf:63:53:08:5c:87:cd:3e:
c6:c8:46:15:27:bd:77:e4:76:2d:f5:ee:28:30:4a:7a:f3:25:
43:c5:df:38:52:26:32:a6:96:ee:a0:26:91:8c:60:53:92:5a:
04:4e:f3:b3:5e:fc:17:fc:04:8c:23:52:11:c8:ce:93:7c:0d:
62:1a:e8:e2:5e:ef:18:e4:84:97:80:a1:eb:a2:cb:f4:b0:ee:
04:b6:2b:11:16:3e:ba:c9:60:00:38:ba:fc:58:85:72:e8:fd:
80:57:eb:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:47:44 2025 by rpki-client