Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ede11131-09a5-3938-9e03-0196812fb57b.roa
File: ede11131-09a5-3938-9e03-0196812fb57b.roa (raw, json)
Hash identifier: UDLN/Xhtc5Ft5iZg2nW/rqhxQInx1w7Zf2Z8CLPYQlI=
Subject key identifier: 63:96:7C:19:AD:13:80:AF:53:5E:E1:8C:56:86:33:09:4F:18:43:62
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F432858489D05ECC05B6AE3169CCAA3C0
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ede11131-09a5-3938-9e03-0196812fb57b.roa
Signing time: Tue 21 Jan 2025 02:00:39 +0000
ROA not before: Tue 21 Jan 2025 02:00:39 +0000
ROA not after: Mon 21 Apr 2025 01:00:39 +0000
asID: 8069
IP address blocks: 20.33.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9d:05:ec:c0:5b:6a:e3:16:9c:ca:a3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Jan 21 02:00:39 2025 GMT
Not After : Apr 21 01:00:39 2025 GMT
Subject: CN=91708f31-beb1-42e8-9d3c-36ec53746b7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b7:e6:be:dc:39:c5:48:0a:50:91:27:74:b6:
32:60:b7:05:82:30:71:72:d0:df:aa:9c:fc:79:41:
9b:d6:71:1d:91:72:de:e3:6c:b1:b1:34:a6:2a:72:
d8:cf:3f:d1:b5:26:18:50:31:e9:3f:23:d1:01:31:
0c:84:67:ef:ab:dc:bc:51:fa:34:97:97:d8:d0:84:
3d:4d:58:a2:46:36:fc:a9:e8:d8:b2:4f:f8:90:c6:
d2:61:24:54:1f:cc:ee:38:22:3e:fe:52:2d:2a:59:
d7:73:38:b3:5b:16:e8:ed:a1:7c:15:c7:fa:a2:50:
01:3f:cb:2c:7e:f5:1c:17:42:fa:03:86:cb:d4:8f:
ff:13:97:2b:a0:b4:de:d4:6d:76:08:9d:59:0b:73:
25:8d:fa:a2:70:21:2c:6a:41:37:50:b7:54:7b:98:
c2:74:c0:c2:c3:64:34:bf:71:e9:27:ff:85:56:6b:
0f:35:d2:40:69:ef:59:80:a7:3e:d7:b9:7c:1e:e2:
8e:f7:be:ff:58:43:61:f4:a4:b2:ec:8f:b2:bc:5c:
ef:36:76:f1:18:0b:7e:0f:f0:f6:9e:e3:8b:d1:aa:
b3:07:a9:79:65:55:33:75:89:e1:f4:f6:5a:36:00:
0f:b3:51:93:8f:f7:d4:ff:2f:1d:3a:d5:97:e8:65:
ad:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:96:7C:19:AD:13:80:AF:53:5E:E1:8C:56:86:33:09:4F:18:43:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ede11131-09a5-3938-9e03-0196812fb57b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.249.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:ff:13:7e:f8:43:25:c3:da:53:c0:d1:cd:88:a7:0c:dd:c7:
4e:01:da:a6:af:34:7c:e8:2a:51:08:0e:d9:50:76:e2:48:eb:
16:ef:45:8a:aa:e7:c3:ba:30:13:bf:24:c5:b6:34:02:3a:82:
ac:1e:7b:3a:34:ba:b9:cc:64:68:4e:66:74:4a:d0:aa:42:01:
66:f3:5c:e8:91:11:7c:7b:6b:a9:79:6a:ce:7c:d1:02:86:dd:
8d:27:4a:0f:47:40:ce:1c:0d:e3:cc:00:0d:d3:6b:78:6a:a7:
2c:8d:61:6b:cb:e1:43:c2:39:95:15:66:61:f7:b9:40:ca:83:
97:5d:f1:11:36:3f:44:f4:54:fb:3c:77:33:75:18:7e:05:10:
93:2d:d0:3b:63:7e:af:a9:9c:9c:1f:b9:35:a9:07:b2:15:69:
04:16:39:8d:54:30:14:03:2c:d4:05:cc:30:75:53:0f:87:2e:
a2:b4:a4:cf:c3:f2:04:d9:03:b8:cc:a0:76:fc:63:14:ce:45:
c1:38:95:e0:2d:e4:fe:75:74:bf:93:3d:8a:2e:a8:b0:29:f4:
17:ba:ee:e8:77:67:1d:a3:70:95:e9:ff:c2:21:75:67:79:20:
17:19:5f:7b:fe:cb:f9:1a:3a:0f:86:86:aa:23:82:c8:5b:a5:
70:42:3d:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEidBezAW2rjFpzKo8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1
ZWVhMB4XDTI1MDEyMTAyMDAzOVoXDTI1MDQyMTAxMDAzOVowLzEtMCsGA1UEAxMk
OTE3MDhmMzEtYmViMS00MmU4LTlkM2MtMzZlYzUzNzQ2YjdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7fmvtw5xUgKUJEndLYyYLcFgjBxctDfqpz8
eUGb1nEdkXLe42yxsTSmKnLYzz/RtSYYUDHpPyPRATEMhGfvq9y8Ufo0l5fY0IQ9
TViiRjb8qejYsk/4kMbSYSRUH8zuOCI+/lItKlnXczizWxbo7aF8Fcf6olABP8ss
fvUcF0L6A4bL1I//E5croLTe1G12CJ1ZC3MljfqicCEsakE3ULdUe5jCdMDCw2Q0
v3HpJ/+FVmsPNdJAae9ZgKc+17l8HuKO977/WENh9KSy7I+yvFzvNnbxGAt+D/D2
nuOL0aqzB6l5ZVUzdYnh9PZaNgAPs1GTj/fU/y8dOtWX6GWt3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGOWfBmtE4CvU17hjFaGMwlPGENiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy
ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZWRlMTExMzEtMDlhNS0z
OTM4LTllMDMtMDE5NjgxMmZiNTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky
M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl
NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz
ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCH5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG3/E374QyXD2lPA0c2Ipwzdx04B2qavNHzoKlEIDtlQduJI6xbvRYqq
58O6MBO/JMW2NAI6gqweezo0urnMZGhOZnRK0KpCAWbzXOiREXx7a6l5as580QKG
3Y0nSg9HQM4cDePMAA3Ta3hqpyyNYWvL4UPCOZUVZmH3uUDKg5dd8RE2P0T0VPs8
dzN1GH4FEJMt0Dtjfq+pnJwfuTWpB7IVaQQWOY1UMBQDLNQFzDB1Uw+HLqK0pM/D
8gTZA7jMoHb8YxTORcE4leAt5P51dL+TPYouqLAp9Be67uh3Zx2jcJXp/8IhdWd5
IBcZX3v+y/kaOg+GhqojgshbpXBCPaM=
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:47:30 2025 by rpki-client