Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cf868108-55e4-390c-8997-0552696dcffd.roa
File: cf868108-55e4-390c-8997-0552696dcffd.roa (raw, json)
Hash identifier: yB0ZYTkzh4Zke5JMoHC1JHTSX+8GGOg6ZD+AVfykip0=
Subject key identifier: 19:9B:11:38:DB:3A:49:4A:86:0E:95:4C:F3:9D:5B:14:9A:C9:4D:D0
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F432858494CC95478D143CF2C0B81FC80
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cf868108-55e4-390c-8997-0552696dcffd.roa
Signing time: Tue 25 Mar 2025 01:00:40 +0000
ROA not before: Tue 25 Mar 2025 01:00:40 +0000
ROA not after: Mon 23 Jun 2025 01:00:40 +0000
asID: 8069
IP address blocks: 20.33.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4c:c9:54:78:d1:43:cf:2c:0b:81:fc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Mar 25 01:00:40 2025 GMT
Not After : Jun 23 01:00:40 2025 GMT
Subject: CN=1387bad5-5106-4c16-8b1c-077afd2168da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3a:c5:dd:bf:d4:24:5d:d3:43:02:8e:87:14:
cb:3f:a3:0c:9f:7c:47:f8:66:57:b5:a9:d0:e7:39:
e5:a3:8e:5d:e1:0c:db:a9:8d:1b:a7:c2:bb:05:fa:
57:63:c8:a1:e5:76:ae:ff:c7:f2:74:e7:9c:97:cb:
4a:14:b3:70:31:ab:14:5a:ef:33:85:cc:1a:13:83:
42:e1:6a:1c:5b:1d:af:78:91:61:5a:af:e4:52:e5:
5c:6e:78:79:8f:80:9c:b8:12:2e:3f:1f:14:9e:d7:
ef:ed:2c:d0:93:15:0f:66:79:ae:52:a6:63:a8:cb:
1d:12:ef:63:2f:18:08:38:e2:e6:4a:6e:82:c4:92:
f8:0c:a1:8e:ec:86:b2:59:1a:33:a6:50:d0:84:ce:
56:12:3f:09:1a:43:28:d3:f6:51:dc:21:93:37:86:
9d:05:2a:75:84:00:ee:f1:7d:86:1b:a3:f0:95:88:
37:7d:05:2b:77:87:8d:89:33:5b:03:fa:55:04:d0:
09:50:58:77:8d:a8:92:6e:a1:9e:ae:94:42:e9:ca:
f2:d6:70:cd:1e:78:7c:8c:67:d5:25:5f:3c:29:3b:
71:8a:18:68:5e:a1:bc:b2:12:e5:21:99:05:b4:0b:
23:44:2a:e9:ca:03:c4:8f:ac:ea:ef:5e:08:8a:9a:
b8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:9B:11:38:DB:3A:49:4A:86:0E:95:4C:F3:9D:5B:14:9A:C9:4D:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cf868108-55e4-390c-8997-0552696dcffd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.182.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:ec:e5:27:d6:79:4e:e7:38:d0:a3:0a:34:a3:55:0e:ea:68:
ff:fb:ba:e0:28:8f:31:9f:24:a0:f0:ca:63:5f:e9:e2:5c:5b:
26:27:d4:49:ed:66:83:47:2a:87:7e:07:68:ce:27:b1:32:20:
a8:af:c7:d3:74:5f:a8:cf:24:1d:e9:83:ce:88:2f:cb:ff:b7:
15:e3:94:1a:78:8c:9e:ba:cd:84:aa:84:ff:d3:ad:21:36:94:
d5:df:3c:79:cd:d2:71:66:37:48:8f:a2:8e:b3:4d:3d:e8:38:
f1:ec:08:23:f8:1c:69:92:cc:ba:86:d3:4c:56:62:9c:52:67:
74:1c:35:c7:4e:3b:e4:b4:56:df:54:36:8e:5e:4b:a1:94:bf:
77:fa:6e:77:01:3f:5c:08:fc:a3:28:66:dd:9a:e1:f3:58:c7:
70:78:52:38:2a:05:89:20:e5:a4:35:05:54:74:3a:f0:50:5c:
53:2d:8d:71:cc:88:34:12:b2:c5:ec:b8:dc:9a:c1:2b:6a:8f:
ca:5e:0d:7c:54:71:3d:10:6b:70:1d:04:11:80:8a:10:94:19:
60:fb:d6:aa:49:2a:63:d1:04:6c:7b:ae:79:ae:8a:70:e1:45:
93:f5:75:6b:80:d3:b5:96:4a:22:17:52:0e:de:e0:29:d0:2a:
ca:68:97:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:45:10 2025 by rpki-client