Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0c2152c5-dd82-3836-b1d4-2fb879751d80.roa
File: 0c2152c5-dd82-3836-b1d4-2fb879751d80.roa (raw, json)
Hash identifier: NWDnMY7JtVaSsPwGXiLFwZkEOz27w6fq3z1XBjM8q5Y=
Subject key identifier: 54:F7:9F:83:82:9F:30:89:3C:FC:40:8A:A5:23:26:51:E1:92:10:54
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328576D51CC73C042CFC172AF0D34A9
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0c2152c5-dd82-3836-b1d4-2fb879751d80.roa
Signing time: Sat 13 Jun 2020 18:59:37 +0000
ROA not before: Sat 13 Jun 2020 04:00:00 +0000
ROA not after: Tue 19 Mar 2030 04:00:00 +0000
asID: 8069
IP address blocks: 20.47.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:af:0d:34:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Jun 13 04:00:00 2020 GMT
Not After : Mar 19 04:00:00 2030 GMT
Subject: CN=4b9394d5-7b7c-4268-99e0-526354b75f1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:40:0a:0a:46:55:84:97:96:5e:c7:43:d4:b6:
c3:78:01:3c:b9:99:55:5f:9c:b4:a0:ba:c6:7e:2b:
e3:1d:c9:c3:2e:ed:ce:fd:22:75:b5:b0:a2:8f:1c:
f8:fc:70:7d:cb:ca:50:c3:0f:b6:e8:bf:1b:d7:b3:
de:33:d2:a3:78:5d:15:bd:78:3d:70:f3:02:74:fe:
b6:bf:bb:97:99:38:f5:c3:58:d5:21:74:d7:47:95:
f0:8d:d2:f9:e1:ee:6e:21:f1:64:27:22:85:36:ce:
aa:03:94:cc:1a:1e:d0:20:6c:e5:60:57:85:88:b4:
b1:f6:f9:d0:21:7f:cc:ff:66:fe:44:43:ac:b6:c7:
bc:cc:b0:25:7b:8f:fb:e1:bd:d8:be:04:73:4e:7f:
d2:a8:63:b4:ca:2c:7c:d1:3b:32:55:67:87:51:fe:
e2:ac:25:df:f3:bd:a4:fe:98:89:bc:48:25:1d:40:
68:cf:57:5c:69:f9:8e:d8:b9:31:70:11:d6:f3:0a:
94:3f:1b:06:6e:9d:fa:4e:65:93:b4:97:d6:9e:f0:
40:e7:84:ad:69:88:f2:c3:78:58:c3:40:a0:62:7b:
64:45:ff:7b:59:5d:24:f9:c2:8a:48:77:cc:98:06:
ca:3f:45:7c:14:54:da:10:52:a8:37:fc:f8:0d:84:
d8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F7:9F:83:82:9F:30:89:3C:FC:40:8A:A5:23:26:51:E1:92:10:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0c2152c5-dd82-3836-b1d4-2fb879751d80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.47.91.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:76:d8:f2:14:12:f2:3c:00:fb:a4:80:19:c1:50:f2:7b:0b:
55:d7:5f:22:51:8a:21:75:2d:6f:98:c5:c1:17:1a:8a:2d:6e:
eb:88:16:52:44:51:2b:3b:c9:18:68:30:bb:f6:3e:77:43:83:
9e:9b:30:b8:ac:dd:70:8c:44:99:3b:64:d8:4a:c5:c6:76:5a:
1c:ec:1a:89:7c:cd:5b:99:72:9b:72:f6:9b:fd:29:13:a2:f5:
c4:02:88:a9:bc:b6:4e:0d:47:cf:18:3c:5b:ab:5b:22:d4:a1:
21:2c:91:02:82:e2:fd:69:bc:8d:96:52:40:b1:3c:60:97:54:
d4:3b:6e:fd:eb:19:9c:ef:6f:ac:dc:ff:b9:cd:1d:da:97:c8:
00:94:f4:d0:43:9b:ec:af:b2:c8:27:d7:2c:82:81:2b:4f:1c:
74:eb:b8:2e:11:a3:b4:51:ae:cd:19:c0:f2:43:d3:1a:b0:ee:
13:db:60:2e:d1:99:1a:63:b3:8e:a9:75:4a:f8:18:0c:9f:a6:
bc:97:62:da:ff:02:00:a2:2e:da:86:f2:f9:44:43:b3:93:8f:
58:f0:f6:90:05:21:0a:dc:71:71:82:d1:71:70:28:e0:b6:d3:
8e:21:f5:3f:58:fb:ea:f9:30:60:d1:91:7e:bf:0e:8b:7a:be:
40:d7:d6:07
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bcq8NNKkwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRlNWVl
YTAeFw0yMDA2MTMwNDAwMDBaFw0zMDAzMTkwNDAwMDBaMC8xLTArBgNVBAMTJDRi
OTM5NGQ1LTdiN2MtNDI2OC05OWUwLTUyNjM1NGI3NWYxZjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBANtACgpGVYSXll7HQ9S2w3gBPLmZVV+ctKC6xn4r
4x3Jwy7tzv0idbWwoo8c+PxwfcvKUMMPtui/G9ez3jPSo3hdFb14PXDzAnT+tr+7
l5k49cNY1SF010eV8I3S+eHubiHxZCcihTbOqgOUzBoe0CBs5WBXhYi0sfb50CF/
zP9m/kRDrLbHvMywJXuP++G92L4Ec05/0qhjtMosfNE7MlVnh1H+4qwl3/O9pP6Y
ibxIJR1AaM9XXGn5jti5MXAR1vMKlD8bBm6d+k5lk7SX1p7wQOeErWmI8sN4WMNA
oGJ7ZEX/e1ldJPnCikh3zJgGyj9FfBRU2hBSqDf8+A2E2JsCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBRU95+Dgp8wiTz8QIqlIyZR4ZIQVDCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3
ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1ZWVhLzBjMjE1MmM1LWRkODItMzgz
Ni1iMWQ0LTJmYjg3OTc1MWQ4MC5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3
Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNi
LWYwZTM4NGRlNWVlYS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVl
ZWEuY3JsMB8GA1UdIwQYMBaAFDV+T5hBJaNyA/XiukFDrkr64LwdMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt
YTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0
ZGU1ZWVhLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEABQvWzBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAZHbY8hQS8jwA+6SAGcFQ8nsLVddfIlGKIXUtb5jFwRcaii1u64gWUkRRKzvJ
GGgwu/Y+d0ODnpswuKzdcIxEmTtk2ErFxnZaHOwaiXzNW5lym3L2m/0pE6L1xAKI
qby2Tg1Hzxg8W6tbItShISyRAoLi/Wm8jZZSQLE8YJdU1Dtu/esZnO9vrNz/uc0d
2pfIAJT00EOb7K+yyCfXLIKBK08cdOu4LhGjtFGuzRnA8kPTGrDuE9tgLtGZGmOz
jql1SvgYDJ+mvJdi2v8CAKIu2oby+URDs5OPWPD2kAUhCtxxcYLRcXAo4LbTjiH1
P1j76vkwYNGRfr8Oi3q+QNfWBw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 11:44:39 2025 by rpki-client