Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/deeaeb46-1ee2-33a1-b2d5-73c9327fd2e0.roa
File: deeaeb46-1ee2-33a1-b2d5-73c9327fd2e0.roa (raw, json)
Hash identifier: Bxifh0YN3cVZHNu8m23SlB+MVptNYITOwy4KGtqv63U=
Subject key identifier: 4B:6F:28:F9:38:92:40:9C:52:61:F1:93:C4:D3:6C:60:D3:81:1F:B4
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F432858493673BD3698B384C74E894A80
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/deeaeb46-1ee2-33a1-b2d5-73c9327fd2e0.roa
Signing time: Mon 17 Mar 2025 01:00:37 +0000
ROA not before: Mon 17 Mar 2025 01:00:37 +0000
ROA not after: Sun 15 Jun 2025 01:00:37 +0000
asID: 8069
IP address blocks: 20.153.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:36:73:bd:36:98:b3:84:c7:4e:89:4a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Mar 17 01:00:37 2025 GMT
Not After : Jun 15 01:00:37 2025 GMT
Subject: CN=93a7e3c6-c41b-4103-97c1-43845d5a1395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:97:76:b9:e8:c5:8c:6e:00:f0:e1:00:3b:b3:
50:86:20:6a:7c:85:81:bd:68:c8:d7:35:78:3f:32:
6b:ce:e0:3e:41:60:a1:15:20:cf:50:0f:61:d2:d0:
13:b3:04:a7:28:43:c8:e3:b4:74:7f:ca:83:2e:09:
ad:62:fa:d8:0b:0d:79:ad:90:e0:d3:9f:cd:6f:03:
ca:88:32:1d:5b:89:79:7a:83:5a:88:36:c1:88:60:
09:9a:65:e2:68:3e:a7:18:1d:8d:50:93:8f:59:20:
c5:22:21:3d:c4:13:44:3e:a1:e3:27:72:36:fe:ba:
31:a6:10:a0:27:e2:f4:8a:a5:ea:5e:31:23:e9:a7:
70:ff:37:ee:3a:c8:30:33:30:ea:f8:ac:13:dd:44:
94:79:3f:56:13:97:92:47:6f:27:db:16:07:50:15:
aa:e6:8b:a9:d4:f3:68:f3:34:9f:dd:7c:fb:47:9b:
8e:0c:a6:c3:5c:62:49:27:a5:01:42:54:7d:25:b2:
d4:28:1f:7c:47:cb:bf:9a:7c:b9:34:15:3f:89:52:
65:88:9e:02:00:34:5e:6b:2a:58:cc:a3:6a:7c:f2:
a7:3a:e4:f2:f4:96:7c:63:3b:ef:fd:c3:f7:64:1b:
ba:4f:00:96:1a:73:d7:fd:4e:f5:15:cc:a4:b6:2f:
12:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:6F:28:F9:38:92:40:9C:52:61:F1:93:C4:D3:6C:60:D3:81:1F:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/deeaeb46-1ee2-33a1-b2d5-73c9327fd2e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.153.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:6e:3c:96:68:ac:fa:9a:8e:12:18:c8:cb:89:57:8c:da:72:
00:0d:2d:f3:b3:fd:75:1a:8f:b8:8f:f7:06:b9:e5:ed:86:ca:
55:43:6d:c6:4e:8b:c8:5b:32:c2:df:52:18:f7:45:1b:54:c8:
e3:66:22:c0:0b:fd:74:e8:bd:37:22:a2:5e:21:53:bf:1e:97:
36:78:47:99:05:c2:e0:85:ff:51:ab:bf:04:d9:34:7d:6a:d1:
94:65:79:c2:29:cc:b4:5a:c4:6e:95:a2:51:c7:b4:3d:56:aa:
01:84:c0:41:eb:53:c2:1e:0a:15:91:c4:2a:49:00:84:22:da:
a5:64:45:27:d1:ea:c7:a2:05:0e:44:68:a5:c4:7e:f0:3c:b3:
b6:e3:1c:0c:1b:00:d9:f4:c9:02:0d:2c:9c:6b:3f:7f:d7:81:
d5:92:9d:85:e9:d2:3d:62:a9:5e:f1:8b:e5:a4:da:f9:0a:ae:
05:f6:bb:38:91:fa:12:5d:c6:6f:07:4e:bd:18:fb:4e:a1:51:
95:5f:47:ce:d9:c8:c1:a0:7c:d1:0b:16:25:b7:8d:b8:46:85:
53:a2:a3:45:1f:53:f4:8e:27:61:c1:3c:0a:a9:1c:92:6e:1d:
41:f2:32:86:2b:9d:39:a3:c2:f9:4f:eb:34:33:90:c1:67:21:
d9:0a:8d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:40:09 2025 by rpki-client