Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/16646b1c-7273-3e1a-9ca3-efedf58284e9.roa
File: 16646b1c-7273-3e1a-9ca3-efedf58284e9.roa (raw, json)
Hash identifier: DVNu8lv09HsPikQFCQgbInqecUioQef8pm2kjtEo/U0=
Subject key identifier: 1E:54:E3:7D:EF:A9:DB:76:B1:78:46:5F:63:F8:80:9D:31:19:77:F1
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F43285848562F2B7DAA556CF9ED010DC0
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/16646b1c-7273-3e1a-9ca3-efedf58284e9.roa
Signing time: Thu 26 Dec 2024 17:01:27 +0000
ROA not before: Thu 26 Dec 2024 17:01:27 +0000
ROA not after: Wed 26 Mar 2025 16:01:27 +0000
asID: 8069
IP address blocks: 20.153.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:56:2f:2b:7d:aa:55:6c:f9:ed:01:0d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Dec 26 17:01:27 2024 GMT
Not After : Mar 26 16:01:27 2025 GMT
Subject: CN=d4335e56-34f0-493f-8b6f-a6d7cb5f5f86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a9:ec:62:18:65:78:73:96:41:29:59:69:74:
56:d6:9a:5d:70:bd:b0:a0:d1:f2:f2:2a:cd:e2:ed:
7b:eb:e3:c8:1d:ad:8e:26:42:bd:87:a5:c8:09:8f:
d4:24:1b:7d:f6:40:92:5d:83:8d:04:de:d0:24:40:
88:98:59:22:9a:e3:e1:e7:57:d0:8e:90:0d:54:28:
7c:fd:ea:98:2f:cb:ff:02:a0:ce:c5:01:b0:26:97:
4f:a9:1d:29:8b:88:25:03:44:a0:49:d8:bd:79:76:
14:9a:50:ba:58:0f:e5:7d:91:92:a3:36:82:4d:f4:
53:de:8f:94:3d:4f:4e:8c:a8:d4:8e:1f:4c:52:55:
63:0d:19:f0:5c:33:94:b7:ad:b9:b9:9a:9a:e5:71:
c8:4e:7a:6e:5a:63:ea:da:50:05:bc:1e:74:8e:b0:
1f:6f:3b:1c:71:28:f2:27:89:28:07:88:c7:35:bc:
fc:ba:82:3e:7d:76:10:ad:cf:4d:2c:37:6d:37:a0:
db:85:74:fd:6f:25:ad:1c:3b:13:ff:64:64:37:65:
82:9b:fe:0f:9f:ee:8a:4b:12:84:97:55:f3:68:a8:
50:0d:a1:ac:f3:f9:45:9f:10:85:47:ee:27:a8:32:
78:5c:9d:cc:fd:16:27:77:5e:69:4e:0e:cb:5c:d0:
6b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:54:E3:7D:EF:A9:DB:76:B1:78:46:5F:63:F8:80:9D:31:19:77:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/16646b1c-7273-3e1a-9ca3-efedf58284e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.153.36.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:87:8c:a7:db:0d:36:77:c7:df:e4:6a:36:e7:5f:82:e5:02:
01:08:f5:6b:7f:c8:60:be:7a:e3:23:37:32:a2:9f:5e:bd:5e:
ad:b4:7c:91:98:09:42:72:48:6c:b2:78:d2:0d:ca:d2:7b:0d:
c6:b6:6f:ee:76:6f:0c:46:04:ad:8d:0b:33:51:b0:73:12:95:
26:89:6d:e2:62:6a:53:b0:52:33:08:ef:cd:c0:d4:00:8b:bd:
a1:bf:bc:e6:1c:43:73:d9:2e:e7:a9:42:8c:ff:2f:6b:a9:eb:
47:4c:b1:61:1e:db:6d:8c:b4:34:06:f6:6b:f5:9f:32:ba:dd:
08:02:aa:04:49:ab:72:7a:02:ee:52:f5:d0:75:f0:0d:87:78:
17:5c:2d:4d:36:7f:68:60:fd:02:20:fe:49:96:e5:9e:df:25:
4d:82:48:26:7a:1b:08:35:3c:64:9d:d7:08:a4:9b:38:fe:a8:
78:e8:f6:f9:76:6b:26:b2:43:24:10:08:15:05:9e:2d:4c:2c:
1c:07:15:7f:15:b2:cb:ee:ee:87:09:e3:1e:05:e6:e7:fc:09:
ab:07:c4:f8:84:a6:a4:d9:67:ad:0d:e3:47:89:e6:f1:c2:f3:
d2:b8:c0:82:33:bc:9b:89:02:1e:f0:4d:dd:fc:1c:45:1b:9f:
ab:03:58:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:38:33 2025 by rpki-client