Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cfce08b9-fa20-3011-97ac-85c4ba3785d5.roa
File: cfce08b9-fa20-3011-97ac-85c4ba3785d5.roa (raw, json)
Hash identifier: vsRoydU9SsFQbckiZw8HcKTAZFmTZhduJ9JJ5NSaUlQ=
Subject key identifier: EA:91:DF:BC:87:1B:AD:7F:E3:8A:7D:94:CC:C4:B6:CE:0B:E9:BD:27
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F43285848F22C2634DB3AF5FDF819EC20
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cfce08b9-fa20-3011-97ac-85c4ba3785d5.roa
Signing time: Thu 20 Feb 2025 14:00:52 +0000
ROA not before: Thu 20 Feb 2025 14:00:52 +0000
ROA not after: Wed 21 May 2025 13:00:52 +0000
asID: 8069
IP address blocks: 20.33.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:2c:26:34:db:3a:f5:fd:f8:19:ec:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Feb 20 14:00:52 2025 GMT
Not After : May 21 13:00:52 2025 GMT
Subject: CN=f5d5e287-e8c1-4e89-bfd1-203cf8950767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f0:a0:07:a5:ce:6c:38:28:f3:d2:f5:83:a0:
58:f2:1d:19:5b:26:a1:8c:16:ee:40:d2:1c:0d:19:
91:ee:69:cd:ae:d3:b8:f9:d4:d1:37:7a:66:59:36:
c5:ad:b6:55:f8:df:97:b2:bc:aa:ba:d2:cb:75:d5:
61:36:a0:57:56:55:98:9d:ef:18:37:b0:40:87:39:
aa:7d:65:dd:a0:33:22:c9:97:b3:9f:76:e0:c9:ad:
c1:88:36:71:e3:6a:40:2f:2d:25:ac:ba:a8:ca:a7:
7f:e4:f2:6f:c1:9e:5d:69:ad:af:c3:16:ad:47:f8:
78:80:3a:08:40:85:92:0c:cb:a3:24:26:86:e1:34:
1e:16:a8:9d:95:70:1e:04:b4:2d:8e:73:86:a2:13:
15:04:7c:2d:24:3a:ed:3f:07:73:67:5f:c5:27:5a:
fb:92:53:8f:00:fa:ab:41:07:c0:50:c4:97:5f:82:
a4:75:ed:3a:63:fc:d0:c4:08:95:31:e7:a4:33:24:
b6:c5:c9:a9:69:fa:58:e2:fd:04:d7:43:1b:2e:a4:
c3:05:49:60:73:d1:b7:31:b0:31:d0:ff:b3:17:77:
44:7f:e0:02:04:bd:e1:54:78:23:6c:23:f4:ff:ac:
96:3b:72:a4:eb:66:fd:a7:f2:32:10:6d:78:d8:97:
b7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:91:DF:BC:87:1B:AD:7F:E3:8A:7D:94:CC:C4:B6:CE:0B:E9:BD:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cfce08b9-fa20-3011-97ac-85c4ba3785d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.232.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:3d:81:0a:b1:5e:1a:1a:1f:7d:bd:77:f3:ce:35:d0:1a:19:
17:9c:63:97:87:4d:7d:ee:bf:87:3f:f1:81:13:4c:10:8c:d8:
b4:91:fc:01:6d:e1:6b:b6:0d:84:97:d4:d6:71:79:7c:90:f3:
ae:0a:1f:82:4d:36:0e:89:1f:78:c9:dc:4e:08:77:40:52:96:
6e:b1:2b:d3:7b:b8:b3:e2:68:47:73:5e:1e:46:72:24:99:17:
de:a4:db:f0:82:60:11:42:5c:06:f8:50:77:f2:9d:9d:74:2a:
24:65:4d:99:64:dd:ea:c2:79:1e:40:7e:62:d9:cb:8e:18:fa:
47:84:10:09:43:7d:7a:81:d0:0f:14:17:77:25:54:10:65:67:
84:2c:61:11:98:82:f3:b8:24:35:6c:f7:0e:20:2e:67:69:7a:
25:fb:c8:f8:e6:a1:f7:3c:bb:71:d8:30:95:0a:f4:c4:ee:66:
30:1b:51:1c:89:e3:cb:88:d6:eb:d4:14:f0:f3:dd:0e:2a:8d:
ac:e6:e1:a6:cd:02:bc:b1:6f:f8:e1:2a:3a:8b:ae:00:1e:ae:
27:0f:a7:26:73:77:56:da:04:c3:eb:ea:eb:78:f3:cc:82:56:
1c:a9:17:be:7b:a1:71:69:7b:ef:f5:29:07:e0:92:c8:5d:db:
13:8e:19:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:42:37 2025 by rpki-client