Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3adf06ea-c564-32c5-aad1-7e75e56f5c8a.roa
File: 3adf06ea-c564-32c5-aad1-7e75e56f5c8a.roa (raw, json)
Hash identifier: 1mfoGRkZliXEEwIdm1Bv/vqYUJjFaefVOLOELDDV9zE=
Subject key identifier: EE:9B:11:26:E1:3D:E1:57:4D:2A:A0:7C:CD:F7:54:FF:AE:7C:8C:D2
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F43285848562F2A6BE3A71A9F6668F920
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3adf06ea-c564-32c5-aad1-7e75e56f5c8a.roa
Signing time: Thu 26 Dec 2024 17:01:26 +0000
ROA not before: Thu 26 Dec 2024 17:01:26 +0000
ROA not after: Wed 26 Mar 2025 16:01:26 +0000
asID: 8069
IP address blocks: 20.153.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:56:2f:2a:6b:e3:a7:1a:9f:66:68:f9:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Dec 26 17:01:26 2024 GMT
Not After : Mar 26 16:01:26 2025 GMT
Subject: CN=23755a32-0a6b-455d-bb03-752f2a7c2264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0c:d0:76:06:b6:5b:98:9f:52:55:e8:a9:0f:
d2:0c:f8:33:b5:18:55:64:4a:46:50:e5:4b:ce:08:
da:80:8c:db:56:a6:c1:6f:25:e5:ed:ab:f1:da:28:
d3:b8:1a:9e:32:6b:ba:dd:3d:46:21:98:0d:ca:f2:
25:2b:c1:61:f8:e5:f5:77:d5:74:f5:72:ce:b4:22:
a2:cd:83:84:ab:3e:33:99:52:38:c5:e4:e4:61:62:
93:5a:3b:8a:eb:4d:ed:3b:bd:cb:75:5e:05:86:ce:
a1:9e:64:cd:ce:59:d2:07:1d:df:8d:65:bf:a7:cd:
e2:71:c9:2c:31:55:1a:8d:a2:8a:b6:d8:fe:25:f4:
c5:26:58:82:0c:b1:08:b8:af:c5:98:11:9c:23:2d:
49:18:2b:f1:6f:53:0f:d2:85:4f:7d:ae:9e:fe:de:
c0:4d:ce:32:da:96:7b:7e:f3:f4:f9:b7:0c:37:a6:
ec:99:3c:e3:e2:63:66:00:35:ae:73:ad:7a:24:1b:
f2:a2:4a:ce:66:50:71:b2:af:5a:ab:0c:3a:4d:7d:
4d:dd:c4:ff:9e:8f:f2:b8:28:3a:99:d4:6d:54:66:
9d:be:a9:41:cb:d2:21:6f:03:60:8e:a5:46:8a:3b:
4a:55:39:d5:f6:a1:51:d3:36:15:e5:73:b7:10:4a:
73:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:9B:11:26:E1:3D:E1:57:4D:2A:A0:7C:CD:F7:54:FF:AE:7C:8C:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3adf06ea-c564-32c5-aad1-7e75e56f5c8a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.153.24.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:b5:9e:2a:5c:e6:7a:54:c1:25:60:08:7e:fb:61:82:f6:d8:
d2:95:d2:47:5a:33:56:13:03:e3:b7:02:32:c0:65:7f:08:4d:
6e:cd:38:66:7a:37:e3:db:71:19:37:68:9a:79:61:c9:03:eb:
44:0b:cf:e2:01:75:1d:2e:9b:16:b8:d9:37:81:70:fb:55:10:
61:b2:dc:cf:43:ca:a5:53:dc:93:af:d1:f9:3c:ca:6f:24:1e:
b6:c9:d4:d3:14:fb:86:35:5d:d9:75:3f:fa:15:d6:49:7f:1f:
59:dc:48:f4:a9:ab:03:a9:23:9b:1c:6f:fe:10:1c:37:de:83:
a5:13:29:12:54:23:79:f3:63:79:3d:4d:9c:b7:bf:c4:72:dc:
43:c9:89:28:c8:36:dc:9e:75:04:13:25:97:ad:4e:99:c4:38:
31:33:4c:47:5e:ff:93:81:2d:be:c6:54:80:98:f7:2e:4c:5f:
f8:d2:7b:1c:36:05:cb:7f:cf:52:fd:80:e5:dd:ab:ec:7b:85:
b4:69:24:75:b9:02:ae:01:d7:e1:53:b7:96:13:ff:15:8d:23:
79:1d:27:b5:29:89:2d:54:28:db:55:e3:ad:5b:61:27:96:ac:
99:f6:33:ce:b8:8c:9e:1c:5b:2f:a8:c0:e2:75:53:b8:ba:3a:
68:43:dd:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:21:23 2025 by rpki-client