Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e8355b70-b3ac-3440-a538-b39c041c2270.roa
File: e8355b70-b3ac-3440-a538-b39c041c2270.roa (raw, json)
Hash identifier: 6WAFqagoHFprFa5Yn1r4hD4RMMe1+kwK0vVygolsFxg=
Subject key identifier: 15:AC:AF:FF:D6:CA:E2:D2:27:E1:A7:27:68:50:87:07:01:F1:49:42
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F43285849473402044FAB67B5545C7C80
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e8355b70-b3ac-3440-a538-b39c041c2270.roa
Signing time: Sun 23 Mar 2025 01:00:39 +0000
ROA not before: Sun 23 Mar 2025 01:00:39 +0000
ROA not after: Sat 21 Jun 2025 01:00:39 +0000
asID: 8069
IP address blocks: 20.33.222.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:47:34:02:04:4f:ab:67:b5:54:5c:7c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Mar 23 01:00:39 2025 GMT
Not After : Jun 21 01:00:39 2025 GMT
Subject: CN=917dac58-35c0-46a8-9bf3-953e5149eb6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c8:39:c4:4c:10:12:4d:ff:ad:ee:a9:cd:c7:
5a:68:6b:6a:24:2c:cc:32:b8:8e:bf:43:09:ff:83:
e6:8b:9b:d0:84:dc:15:7b:1f:d0:52:8c:ca:87:1c:
1e:55:c1:bf:ff:6c:4e:70:9e:a2:a1:56:85:ce:1c:
49:a0:c3:76:65:a9:7d:42:84:96:2c:1a:dd:a5:31:
43:36:af:88:c7:fe:c7:df:a7:92:47:04:1e:ba:02:
81:d9:77:b2:43:2b:41:7f:47:94:33:05:d1:91:fa:
50:69:ea:49:31:c3:1d:41:62:85:48:5a:a0:03:83:
c7:3e:16:57:29:39:58:82:97:b8:20:65:b3:3b:60:
3a:8b:dc:ff:92:f6:e2:15:ae:80:0c:22:3b:6b:9a:
e8:de:8f:05:6e:85:a2:3e:08:46:5a:e9:01:f4:d7:
fc:5b:4a:bf:e8:91:10:b1:74:f8:c8:d4:8e:8d:8e:
3a:66:c7:12:22:91:bf:f6:4d:56:2d:f2:64:a3:68:
89:2f:d2:2d:ee:3e:c4:b5:50:06:dc:d3:2f:23:54:
c3:9c:24:29:71:37:5b:85:67:c4:02:d2:d6:cf:0a:
3e:8f:96:db:83:7d:42:48:a3:f7:c3:2c:d5:53:64:
18:66:94:57:19:13:98:f4:04:e7:59:af:82:31:bb:
b3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:AC:AF:FF:D6:CA:E2:D2:27:E1:A7:27:68:50:87:07:01:F1:49:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e8355b70-b3ac-3440-a538-b39c041c2270.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.222.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:1d:e6:22:29:7b:40:59:25:54:0c:57:13:f6:0c:1e:a0:6c:
cc:e5:46:c4:ac:11:aa:fd:4a:23:1b:14:72:53:88:1f:ff:be:
f9:91:fa:ca:60:71:95:97:dd:96:60:05:6f:04:71:29:7a:49:
62:02:af:45:29:b5:b3:3e:8e:9a:f4:7b:be:a9:22:ab:fc:73:
6f:47:1e:45:67:a5:e9:6f:19:ed:e9:2b:8d:61:64:ab:c8:5d:
fa:c1:41:89:92:82:27:a9:73:02:94:8a:b0:a1:2e:8e:72:b2:
60:29:91:39:02:9d:b3:41:c9:c8:b0:12:a6:4b:d0:4d:ae:cc:
77:34:1c:d5:e8:17:12:17:fe:f0:4d:37:1d:2b:fd:9d:dd:2f:
9b:f3:fb:c4:83:e8:3f:8f:7e:18:12:e4:52:da:be:65:65:49:
c1:a7:70:98:4d:0b:72:e6:63:54:57:9f:09:ee:8f:1d:36:84:
25:30:5e:b6:89:c5:6d:c8:e5:d6:b3:8b:3a:f3:54:e2:7c:6b:
81:ef:c8:c5:35:d0:0b:5e:aa:a3:ea:34:72:45:72:96:ac:31:
96:3c:fc:6a:6f:9d:71:05:46:12:75:70:b0:da:7f:be:6a:78:
cc:3d:5f:90:9c:e0:c4:b2:f4:2c:8f:3a:04:59:ba:4a:cd:85:
70:72:83:92
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElHNAIET6tntVRcfIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1
ZWVhMB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk
OTE3ZGFjNTgtMzVjMC00NmE4LTliZjMtOTUzZTUxNDllYjZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cg5xEwQEk3/re6pzcdaaGtqJCzMMriOv0MJ
/4Pmi5vQhNwVex/QUozKhxweVcG//2xOcJ6ioVaFzhxJoMN2Zal9QoSWLBrdpTFD
Nq+Ix/7H36eSRwQeugKB2XeyQytBf0eUMwXRkfpQaepJMcMdQWKFSFqgA4PHPhZX
KTlYgpe4IGWzO2A6i9z/kvbiFa6ADCI7a5ro3o8FboWiPghGWukB9Nf8W0q/6JEQ
sXT4yNSOjY46ZscSIpG/9k1WLfJko2iJL9It7j7EtVAG3NMvI1TDnCQpcTdbhWfE
AtLWzwo+j5bbg31CSKP3wyzVU2QYZpRXGROY9ATnWa+CMbuzlQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBWsr//WyuLSJ+GnJ2hQhwcB8UlCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy
ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZTgzNTViNzAtYjNhYy0z
NDQwLWE1MzgtYjM5YzA0MWMyMjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky
M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl
NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz
ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFCHeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKgd5iIpe0BZJVQMVxP2DB6gbMzlRsSsEar9SiMbFHJTiB//vvmR+spg
cZWX3ZZgBW8EcSl6SWICr0UptbM+jpr0e76pIqv8c29HHkVnpelvGe3pK41hZKvI
XfrBQYmSgiepcwKUirChLo5ysmApkTkCnbNByciwEqZL0E2uzHc0HNXoFxIX/vBN
Nx0r/Z3dL5vz+8SD6D+PfhgS5FLavmVlScGncJhNC3LmY1RXnwnujx02hCUwXraJ
xW3I5dazizrzVOJ8a4HvyMU10AteqqPqNHJFcpasMZY8/GpvnXEFRhJ1cLDaf75q
eMw9X5Cc4MSy9CyPOgRZukrNhXByg5I=
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:45:05 2025 by rpki-client