Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0d49e71e-15ef-35d8-87b6-e8933f1ce4d7.roa
File: 0d49e71e-15ef-35d8-87b6-e8933f1ce4d7.roa (raw, json)
Hash identifier: uOoksdz5uF63HHVD57oManr0XfFGgM400KxbPx97Znk=
Subject key identifier: D2:BA:D6:6E:60:8B:DC:E6:D9:A9:95:B9:45:8C:5C:5D:AD:34:06:BA
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584867FAEBD66622216359B24920
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0d49e71e-15ef-35d8-87b6-e8933f1ce4d7.roa
Signing time: Thu 02 Jan 2025 02:00:39 +0000
ROA not before: Thu 02 Jan 2025 02:00:39 +0000
ROA not after: Wed 02 Apr 2025 01:00:39 +0000
asID: 8069
IP address blocks: 20.33.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:67:fa:eb:d6:66:22:21:63:59:b2:49:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Jan 2 02:00:39 2025 GMT
Not After : Apr 2 01:00:39 2025 GMT
Subject: CN=10b42da7-d6e7-4230-ae04-eb5ade273afd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:6d:4c:0d:27:c1:0c:90:03:48:a9:15:ce:8f:
f1:ab:d1:25:ad:4c:93:67:49:81:db:e8:b6:e2:a4:
05:4d:72:df:e0:7c:2c:2c:83:1e:07:d8:0f:06:c0:
2b:a5:e2:b8:12:96:8e:96:3a:2b:38:8b:0d:7c:0f:
31:9f:75:fa:74:16:17:c6:39:82:e1:74:9a:b7:b6:
cc:e4:e9:49:c8:ab:8f:0e:71:8d:1d:69:1d:99:2f:
d9:5b:d0:48:80:6e:40:85:6f:dc:bd:88:fa:6a:89:
bd:20:79:35:27:1a:12:c5:65:99:50:8c:2d:8a:2b:
7c:c0:3a:8f:78:7f:ee:fe:f0:92:1d:f7:10:88:c4:
a2:b3:9f:63:72:6e:7f:b5:5b:47:8f:15:11:bb:4f:
30:ed:12:fe:52:e0:11:87:8e:d0:6a:6c:38:b2:a8:
78:1b:5d:99:18:f2:8b:1b:dd:ff:7d:1b:d1:bc:39:
37:49:f4:d3:21:cf:7b:28:88:2a:23:48:95:5e:71:
31:d2:a1:86:6d:b0:3b:89:9f:01:2b:07:59:9e:66:
2a:56:3a:64:c3:5a:d6:92:5f:61:16:00:29:5e:6b:
06:3d:40:74:b0:50:97:f5:55:8e:eb:3e:1a:74:22:
22:7d:5a:50:72:34:ad:72:2f:af:3b:a9:2f:8a:8c:
28:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:BA:D6:6E:60:8B:DC:E6:D9:A9:95:B9:45:8C:5C:5D:AD:34:06:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0d49e71e-15ef-35d8-87b6-e8933f1ce4d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.212.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:49:96:eb:89:39:c6:ae:b1:9f:81:f5:94:1a:c7:ee:f5:40:
6e:f6:7c:a9:2a:6e:33:ee:00:6e:40:d3:4a:95:33:26:71:ae:
be:a4:2b:47:be:80:4c:5e:23:44:a7:7f:06:da:61:e1:9c:cc:
33:a3:2d:ed:eb:1f:e3:1f:01:67:58:bc:66:ca:44:7e:90:7c:
17:e2:e0:4b:8e:62:ef:03:20:e1:59:1c:23:42:f6:99:9a:e1:
b2:1a:f8:f7:88:86:94:e0:3a:c9:98:ff:07:b9:e9:e5:33:b9:
ea:61:75:51:05:a9:23:d5:9c:07:dd:1d:a9:30:0f:e6:fd:17:
a7:68:30:8f:23:9c:03:cc:0a:b7:4f:00:9e:d1:0c:50:b7:a5:
7d:d8:f8:2c:f8:5b:29:5b:89:0f:28:c5:b0:5e:8f:0b:84:17:
49:58:57:e9:38:f8:2e:5c:09:bd:5d:f7:bf:65:89:24:4a:a5:
b4:6e:fd:e7:11:2f:7d:a2:de:61:92:7a:85:55:9d:f8:b5:9c:
98:d5:09:0b:f0:25:61:d7:28:0b:e2:06:9c:7b:7d:40:5c:aa:
f1:73:fd:d5:6c:74:52:d0:0d:2b:cb:cc:31:ef:ef:78:80:fa:
29:b7:a8:b7:bb:34:3b:2b:e8:2a:91:86:f1:b6:26:a7:5d:ae:
94:19:a9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:12:10 2025 by rpki-client