Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c4cc327a-172a-3b79-aa08-dd5f2fdd3f92.roa
File: c4cc327a-172a-3b79-aa08-dd5f2fdd3f92.roa (raw, json)
Hash identifier: aUTrDTofq9IRsm+MkG+iczIj9V2+k0A2zRGl8lSwuU0=
Subject key identifier: 40:BC:78:A8:F6:F0:E0:A2:94:85:FE:19:30:3D:E3:AF:C1:63:D8:8C
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F432858493673BC6443C357EFBAE6F880
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c4cc327a-172a-3b79-aa08-dd5f2fdd3f92.roa
Signing time: Mon 17 Mar 2025 01:00:37 +0000
ROA not before: Mon 17 Mar 2025 01:00:37 +0000
ROA not after: Sun 15 Jun 2025 01:00:37 +0000
asID: 8069
IP address blocks: 20.153.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:36:73:bc:64:43:c3:57:ef:ba:e6:f8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Mar 17 01:00:37 2025 GMT
Not After : Jun 15 01:00:37 2025 GMT
Subject: CN=d07bb8a2-355b-45c3-aa83-2ce1d33a7b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f4:97:a3:2c:02:1c:59:7d:12:09:0c:29:7c:
a8:83:ee:a2:5c:fd:44:bd:13:04:11:74:90:9a:99:
e8:e8:95:8e:57:ad:8e:b2:64:34:42:36:a7:e6:f8:
e5:79:34:2a:01:9a:a7:62:b8:71:1b:29:c7:fe:77:
3d:c4:44:9e:9f:d4:a3:f5:55:ff:34:89:dc:f3:3b:
3b:c8:c3:ab:e8:f0:3a:ca:1f:46:cf:a1:66:e5:9d:
59:d1:4e:31:53:93:38:cf:9d:4d:a2:6a:82:4a:f0:
a2:ab:9d:30:e8:2b:54:1c:fc:93:d0:19:4a:0e:8f:
48:33:6a:cb:a7:da:5e:8a:f6:97:21:96:9d:64:38:
a9:6f:00:31:6d:9e:6e:c3:aa:4e:36:fc:a3:d0:1b:
20:60:4e:82:1a:95:6a:83:fd:b9:82:4c:e2:53:f9:
ba:f6:2f:62:c0:45:81:cf:e1:b4:03:c9:24:7f:16:
5b:aa:88:d6:67:82:cd:52:3a:6c:d4:1f:3a:22:6b:
53:aa:56:46:03:e7:d0:d6:0f:57:95:94:06:e9:e6:
1c:46:12:11:ee:cd:5d:15:f9:5d:d3:34:b9:cd:81:
3e:e7:14:30:a1:63:83:7a:97:39:27:ee:1f:78:1c:
2f:66:92:f7:73:94:a7:c2:48:4c:ed:55:c5:2f:c1:
ac:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:BC:78:A8:F6:F0:E0:A2:94:85:FE:19:30:3D:E3:AF:C1:63:D8:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c4cc327a-172a-3b79-aa08-dd5f2fdd3f92.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.153.21.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:b0:27:91:3e:15:13:af:14:01:0e:2e:43:34:dc:57:4e:a1:
87:7e:28:f8:c8:27:34:62:1e:92:86:92:b5:a1:41:70:34:a7:
b3:fa:5a:ea:48:7e:dc:27:23:f2:e4:43:fa:f5:6b:d4:ca:d4:
c9:72:73:18:13:96:0a:5e:23:e6:6a:b8:67:04:9f:f1:3c:52:
fb:af:4d:61:d8:13:b7:05:af:a8:ad:e4:64:e5:7a:08:c9:42:
59:fd:4c:88:04:5f:d6:28:ff:6b:70:a4:3a:fb:4a:5f:e1:52:
46:f4:5f:35:b7:e9:36:a2:26:8e:3e:5d:c2:cb:0b:b3:56:22:
03:9e:e8:d8:a4:9d:bb:56:72:34:58:81:90:32:33:6f:b3:8b:
40:11:67:80:9a:a4:bb:13:65:f5:67:e9:f8:70:5f:39:e6:dd:
91:e0:61:8b:d5:e2:0f:4c:ec:4a:3d:77:9b:af:8b:ae:9a:3b:
7b:bc:c0:9e:bc:de:96:0d:10:cd:e3:4b:cd:37:60:6f:bf:f3:
0b:e2:38:24:fe:1a:c4:70:15:79:60:6b:2a:80:23:e7:16:f6:
cb:2f:44:dc:18:ee:f4:73:27:ec:30:83:b0:5d:69:c4:dd:e8:
37:fa:76:a8:0a:8c:9a:36:af:17:d3:a9:23:22:26:c3:61:9d:
22:55:f0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:42:37 2025 by rpki-client