Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0944b58f-2c51-3787-a810-732d8f208d66.roa
File: 0944b58f-2c51-3787-a810-732d8f208d66.roa (raw, json)
Hash identifier: I1LsrCn3XL39HIgwjl49FiOK24hPgKc0qRy93oRSeGw=
Subject key identifier: 42:84:72:C6:DF:E4:83:89:C7:D4:35:CF:8F:59:2E:EF:BB:08:19:CD
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F432858487CEB3D6E78063ACF8F62C6D8
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0944b58f-2c51-3787-a810-732d8f208d66.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 8069
IP address blocks: 20.33.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:3d:6e:78:06:3a:cf:8f:62:c6:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=af0f2683-e93c-4265-ac47-0d65d1a8799f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f8:8e:e5:6b:b1:1b:ec:1d:d9:38:a2:21:82:
57:7e:a9:d0:4b:5e:c1:c7:39:f4:89:39:23:31:12:
ce:0f:de:fb:3b:92:11:c4:b6:6f:40:2a:f2:9b:cf:
34:91:20:12:87:92:1b:a7:ae:8b:f7:2d:cb:74:e6:
4b:41:01:1d:cc:13:6b:f7:95:59:95:f6:0d:6d:d5:
5e:ba:50:0f:9e:cb:86:d3:0b:35:da:71:bd:6b:0b:
6e:c7:1e:cf:0b:5b:9c:01:0b:f1:57:a3:f7:d4:ad:
b0:5d:fa:06:11:9e:6b:6d:ee:6a:ba:38:00:59:16:
0d:05:52:80:35:53:8a:9f:bd:ca:31:f9:eb:d9:26:
ce:35:65:d9:af:03:cc:c2:8a:f0:f2:39:7b:6d:f9:
28:d1:1e:44:a1:87:61:d3:23:af:8d:a3:9b:69:23:
47:4b:de:29:4d:7b:28:54:a0:ec:44:88:9f:97:46:
b6:b2:a5:1d:a4:39:c6:cc:4f:bb:44:be:86:dc:31:
f3:7a:f5:53:22:b2:a9:6e:da:df:f6:36:b4:84:b9:
d5:08:39:dd:6b:db:19:06:70:7e:3d:44:38:42:f8:
0d:23:50:25:af:d6:32:82:91:b7:1b:01:34:44:dc:
c1:b0:c8:bc:0e:e8:c5:7a:1e:30:54:2a:b7:f9:51:
12:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:84:72:C6:DF:E4:83:89:C7:D4:35:CF:8F:59:2E:EF:BB:08:19:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0944b58f-2c51-3787-a810-732d8f208d66.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.186.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:f7:c9:d9:45:d3:d5:9a:00:8e:28:68:df:50:57:34:eb:d5:
af:f2:b7:fd:dc:6b:9e:0c:d0:b1:4e:34:07:58:b4:9b:f5:98:
dd:19:4b:10:32:ee:c5:1a:98:63:66:c9:dc:85:32:1e:a3:d4:
fe:6b:1c:35:60:c7:e3:8b:6a:bf:f3:f8:d1:54:9e:99:cb:e8:
7e:0a:7a:99:85:98:93:f1:3a:e3:ef:e1:78:e3:ef:12:52:63:
03:f0:73:84:8b:93:0c:4e:ee:25:d7:f0:48:f9:84:20:26:b7:
88:e7:e5:b5:dd:8a:b2:7b:0b:96:cd:64:b1:a5:8f:53:74:7d:
e8:f7:c8:13:ec:5a:78:f5:3c:6c:11:cc:f5:87:5a:76:62:19:
12:21:05:8f:0a:65:37:3c:a6:ee:08:2c:51:e8:20:15:2d:96:
7c:c3:47:29:d4:5b:80:e8:20:13:98:47:0d:f3:d6:d5:78:44:
4e:4a:b9:26:e9:f8:a6:39:0e:17:97:e2:15:bf:e6:d2:f3:6f:
17:51:51:97:d9:80:f2:fc:9d:d3:03:49:62:0f:45:36:70:0b:
3f:c3:c9:b9:df:9a:92:ac:b4:11:81:af:a4:7b:8e:a7:81:d3:
5a:7a:54:43:c5:ba:22:a3:51:64:09:70:bc:04:b1:40:b2:cd:
f7:a1:31:5a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh86z1ueAY6z49ixtgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1
ZWVhMB4XDTI1MDEwOTE0MDA1MloXDTI1MDQwOTEzMDA1MlowLzEtMCsGA1UEAxMk
YWYwZjI2ODMtZTkzYy00MjY1LWFjNDctMGQ2NWQxYTg3OTlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyviO5WuxG+wd2TiiIYJXfqnQS17Bxzn0iTkj
MRLOD977O5IRxLZvQCrym880kSASh5Ibp66L9y3LdOZLQQEdzBNr95VZlfYNbdVe
ulAPnsuG0ws12nG9awtuxx7PC1ucAQvxV6P31K2wXfoGEZ5rbe5qujgAWRYNBVKA
NVOKn73KMfnr2SbONWXZrwPMworw8jl7bfko0R5EoYdh0yOvjaObaSNHS94pTXso
VKDsRIifl0a2sqUdpDnGzE+7RL6G3DHzevVTIrKpbtrf9ja0hLnVCDnda9sZBnB+
PUQ4QvgNI1Alr9YygpG3GwE0RNzBsMi8DujFeh4wVCq3+VES/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEKEcsbf5IOJx9Q1z49ZLu+7CBnNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy
ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMDk0NGI1OGYtMmM1MS0z
Nzg3LWE4MTAtNzMyZDhmMjA4ZDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky
M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl
NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz
ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCG6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHz3ydlF09WaAI4oaN9QVzTr1a/yt/3ca54M0LFONAdYtJv1mN0ZSxAy
7sUamGNmydyFMh6j1P5rHDVgx+OLar/z+NFUnpnL6H4KepmFmJPxOuPv4Xjj7xJS
YwPwc4SLkwxO7iXX8Ej5hCAmt4jn5bXdirJ7C5bNZLGlj1N0fej3yBPsWnj1PGwR
zPWHWnZiGRIhBY8KZTc8pu4ILFHoIBUtlnzDRynUW4DoIBOYRw3z1tV4RE5KuSbp
+KY5DheX4hW/5tLzbxdRUZfZgPL8ndMDSWIPRTZwCz/DybnfmpKstBGBr6R7jqeB
01p6VEPFuiKjUWQJcLwEsUCyzfehMVo=
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:28:53 2025 by rpki-client