Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f239b7f1-e25e-3db0-8dc4-5d98a3f48435.roa
File: f239b7f1-e25e-3db0-8dc4-5d98a3f48435.roa (raw, json)
Hash identifier: fwX5IDe3mpe/c1i49NaEa0EFqrQxRFmrBXWZB64X6jo=
Subject key identifier: 85:E6:C5:03:97:9C:3A:7D:6B:3B:81:1C:37:6C:BD:A7:4C:E7:52:B4
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F43285849350EB287020D831F0FF7C280
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f239b7f1-e25e-3db0-8dc4-5d98a3f48435.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 8069
IP address blocks: 20.157.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:b2:87:02:0d:83:1f:0f:f7:c2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=f260dbc1-4de0-42f0-9bbc-c7a1645ee66b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:69:d9:75:97:ce:1f:a7:61:b8:d4:ae:df:9f:
4a:fa:1c:1a:84:09:2a:2b:10:cd:78:16:39:d3:ed:
9b:56:fa:72:6a:0e:a6:35:03:b1:13:24:1d:03:fd:
a3:1a:ef:ef:c6:c1:35:bd:7f:38:a9:e9:37:56:16:
7c:8b:94:07:13:e1:fb:6d:d8:f1:38:7d:3d:3a:48:
19:4e:f0:08:1f:6d:e4:25:f0:a2:d4:17:fd:94:06:
dd:44:83:2e:96:96:d9:e2:61:66:28:50:72:88:52:
a3:5b:13:66:8d:34:5b:bb:99:fc:7a:f6:85:a0:f2:
d3:e6:74:3d:76:4f:af:c8:d6:e7:25:42:d9:92:fe:
aa:93:7f:06:a8:32:b8:09:a5:0e:d1:c1:e1:09:3f:
9b:31:3c:c1:b7:69:a3:97:17:33:a9:ca:b2:f0:82:
04:ec:d9:ec:d8:01:d0:db:f6:80:de:f3:2a:b9:dc:
e6:40:b8:39:e7:bf:08:ac:e4:2b:4d:b1:00:7c:d1:
f8:0a:c4:bc:22:41:f7:ac:18:7b:a8:8e:5c:b4:a0:
b9:4b:7c:8e:d2:53:b7:e9:ec:54:a1:48:bd:24:71:
86:ff:92:0c:aa:67:50:99:6d:0d:1d:45:92:d7:f6:
29:ed:ea:3e:de:1e:76:7e:7a:e3:d6:09:de:7f:52:
5d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E6:C5:03:97:9C:3A:7D:6B:3B:81:1C:37:6C:BD:A7:4C:E7:52:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f239b7f1-e25e-3db0-8dc4-5d98a3f48435.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.157.193.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:1b:cd:55:0f:4d:67:97:fd:e8:1e:87:5e:09:7f:8a:a3:79:
bf:b9:bf:b7:b7:57:47:3f:fb:25:bd:d8:cb:58:49:30:d7:63:
81:db:32:b7:5c:1d:64:93:19:3a:ec:24:d7:ab:66:27:42:9b:
83:85:30:1c:49:33:9c:35:1c:9a:c8:26:1b:4c:e3:67:36:b7:
12:6b:5e:94:b8:f1:6b:9b:f8:d2:ed:a8:dc:b2:68:dd:24:0b:
42:0e:5d:6c:f8:db:6a:7c:46:27:bf:15:ca:83:ed:77:f5:7b:
f5:a3:02:67:2c:cb:e3:41:5f:ee:1d:1a:5d:88:65:d6:c4:aa:
c9:66:43:67:dd:50:ba:9c:f3:0e:dd:44:c2:4c:2f:c6:89:72:
0d:f0:f5:5e:d0:10:fa:96:65:9d:a2:fc:44:26:4e:0c:95:69:
ab:e0:dd:7e:15:89:43:54:10:dc:28:47:ae:ae:ef:2a:fb:89:
e9:3f:0c:bb:58:d9:8c:0b:8a:de:a4:1b:53:a1:bf:ed:74:24:
00:e4:12:ae:64:b0:b9:e7:61:d8:7f:aa:63:91:f8:44:7e:ad:
c5:25:f9:ec:85:0f:f6:20:8a:b5:85:87:a5:2e:47:ad:9a:78:
7b:f2:86:bf:95:35:9c:2a:44:72:ba:aa:ce:75:8f:ff:76:ea:
78:7c:d5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:37:04 2025 by rpki-client