Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/139a9492-65e1-3f75-ab00-d84e01d973d7.roa
File: 139a9492-65e1-3f75-ab00-d84e01d973d7.roa (raw, json)
Hash identifier: GPLkRrmxovmw6YJUGx6v5H7bnUyo+qZD0xk9+bwmHN8=
Subject key identifier: 1D:37:7F:00:16:47:A9:D1:DB:48:7D:44:03:0D:D7:08:9A:8A:6D:0B
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584806450D0D5FD71C032FAAF640
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/139a9492-65e1-3f75-ab00-d84e01d973d7.roa
Signing time: Thu 28 Nov 2024 02:00:38 +0000
ROA not before: Thu 28 Nov 2024 02:00:38 +0000
ROA not after: Wed 26 Feb 2025 02:00:38 +0000
asID: 8069
IP address blocks: 20.33.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:06:45:0d:0d:5f:d7:1c:03:2f:aa:f6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Nov 28 02:00:38 2024 GMT
Not After : Feb 26 02:00:38 2025 GMT
Subject: CN=e8209db3-93d7-42a8-bdae-9ef46a32c70e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:96:46:16:48:e7:5f:fb:39:8e:b8:57:92:98:
6a:05:6a:ea:6b:01:70:9c:96:26:ed:36:ab:c8:ee:
b5:14:92:4d:78:88:c2:a8:55:31:d9:d9:cc:e2:0e:
d2:d9:c5:30:07:b9:c6:a1:69:e4:31:0f:36:a8:01:
ff:b8:7a:71:4c:11:6d:b8:80:90:66:28:6c:c3:ed:
69:4b:bb:ea:60:df:69:45:e6:69:98:6d:f2:d2:0d:
93:ec:23:02:a1:c1:7f:bb:34:32:0e:31:08:c3:65:
38:0b:d3:e1:96:5f:a8:dc:ae:d6:e4:9d:13:a2:9d:
81:56:39:74:be:fd:7f:08:d8:74:36:77:47:c7:49:
ff:8f:66:e9:df:9d:ff:1c:2c:74:0f:e2:ea:fd:68:
66:b3:ff:6f:fd:41:8e:96:a9:35:2c:07:03:99:c9:
1f:e8:7a:53:2a:92:41:72:00:e4:2f:3a:23:43:ab:
77:e3:57:84:65:c4:7e:65:75:f6:16:39:41:e2:bc:
af:e5:57:5c:f7:6e:5a:a2:22:87:8c:6e:97:e3:99:
09:5e:b0:fb:f9:8f:64:cc:62:c9:03:42:97:3d:97:
bf:92:cf:2e:59:36:de:30:e9:e4:ea:b3:8d:32:dd:
0d:70:0a:c8:b8:2a:77:27:f4:e3:ba:8b:bf:42:9e:
a0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:37:7F:00:16:47:A9:D1:DB:48:7D:44:03:0D:D7:08:9A:8A:6D:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/139a9492-65e1-3f75-ab00-d84e01d973d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.73.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:c8:d9:fd:12:1a:78:74:d1:4e:b3:73:2f:28:28:51:fd:f8:
bd:ae:88:9e:51:c6:f9:62:50:d2:84:63:13:12:16:64:6c:19:
04:79:e6:12:b7:85:ba:88:23:0c:af:83:bf:02:ea:01:17:eb:
9a:3c:61:ca:7c:37:6d:f4:ee:00:24:df:71:a0:60:a9:40:36:
3f:2c:14:01:cb:91:53:35:d0:f5:1d:b8:92:75:a5:f4:25:d4:
ba:0c:2c:bc:fd:88:38:5a:d8:30:bf:14:87:7d:1f:df:4a:02:
75:6e:a3:97:db:93:d1:4c:fa:bb:1e:36:32:2e:2b:f9:f2:53:
0c:a4:31:ba:92:a5:dd:d4:03:16:df:4e:20:65:9d:a8:8f:e2:
35:85:d0:a9:a2:0f:1e:66:99:9a:b4:a7:6c:cb:73:db:3d:ac:
29:bc:de:22:27:9f:fc:6c:ac:3b:31:09:22:7f:16:2a:22:4f:
0c:8e:0f:24:08:73:4a:a0:99:b0:44:a1:fd:9b:ed:9c:44:fd:
bb:55:5f:07:be:3b:26:cf:34:55:2e:6d:bb:b8:c8:0d:69:29:
31:0b:6c:ea:8e:11:f3:ce:82:31:00:4e:fd:9d:f2:33:59:1e:
eb:aa:5a:56:de:75:2e:17:70:bf:83:4a:20:d0:1a:33:01:2c:
93:5e:0f:e0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgGRQ0NX9ccAy+q9kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1
ZWVhMB4XDTI0MTEyODAyMDAzOFoXDTI1MDIyNjAyMDAzOFowLzEtMCsGA1UEAxMk
ZTgyMDlkYjMtOTNkNy00MmE4LWJkYWUtOWVmNDZhMzJjNzBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJZGFkjnX/s5jrhXkphqBWrqawFwnJYm7Tar
yO61FJJNeIjCqFUx2dnM4g7S2cUwB7nGoWnkMQ82qAH/uHpxTBFtuICQZihsw+1p
S7vqYN9pReZpmG3y0g2T7CMCocF/uzQyDjEIw2U4C9Phll+o3K7W5J0Top2BVjl0
vv1/CNh0NndHx0n/j2bp353/HCx0D+Lq/Whms/9v/UGOlqk1LAcDmckf6HpTKpJB
cgDkLzojQ6t341eEZcR+ZXX2FjlB4ryv5Vdc925aoiKHjG6X45kJXrD7+Y9kzGLJ
A0KXPZe/ks8uWTbeMOnk6rONMt0NcArIuCp3J/Tjuou/Qp6gXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB03fwAWR6nR20h9RAMN1wiaim0LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy
ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMTM5YTk0OTItNjVlMS0z
Zjc1LWFiMDAtZDg0ZTAxZDk3M2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky
M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl
NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz
ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ7I2f0SGnh00U6zcy8oKFH9+L2uiJ5RxvliUNKEYxMSFmRsGQR55hK3
hbqIIwyvg78C6gEX65o8Ycp8N2307gAk33GgYKlANj8sFAHLkVM10PUduJJ1pfQl
1LoMLLz9iDha2DC/FId9H99KAnVuo5fbk9FM+rseNjIuK/nyUwykMbqSpd3UAxbf
TiBlnaiP4jWF0KmiDx5mmZq0p2zLc9s9rCm83iInn/xsrDsxCSJ/FioiTwyODyQI
c0qgmbBEof2b7ZxE/btVXwe+OybPNFUubbu4yA1pKTELbOqOEfPOgjEATv2d8jNZ
HuuqWlbedS4XcL+DSiDQGjMBLJNeD+A=
-----END CERTIFICATE-----
Generated at Tue Apr 29 11:51:59 2025 by rpki-client