Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4394c957-d6d6-3969-9f1f-2829f0301cc7.roa
File: 4394c957-d6d6-3969-9f1f-2829f0301cc7.roa (raw, json)
Hash identifier: IQjx6hzz1ZlMCPGp6Pt8lO6JQsu5MusFDEvNiKxC86s=
Subject key identifier: 9B:45:9C:4F:C7:72:A2:46:0A:35:E6:BB:78:2F:0D:A5:79:AE:72:04
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F43285847FB1A2A168FEE420F56EDF460
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4394c957-d6d6-3969-9f1f-2829f0301cc7.roa
Signing time: Sun 24 Nov 2024 02:00:27 +0000
ROA not before: Sun 24 Nov 2024 02:00:27 +0000
ROA not after: Sat 22 Feb 2025 02:00:27 +0000
asID: 8069
IP address blocks: 20.33.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:fb:1a:2a:16:8f:ee:42:0f:56:ed:f4:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Nov 24 02:00:27 2024 GMT
Not After : Feb 22 02:00:27 2025 GMT
Subject: CN=41b650ae-8062-4594-9751-ab0c7cf1f901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9a:6c:47:fc:ba:ed:bc:56:a8:ea:10:98:dc:
b5:2f:c0:13:bb:fa:41:6f:1f:1f:60:a6:0e:a7:68:
c1:68:a1:5c:ca:19:b7:e2:6d:e0:dc:d5:0c:e9:1d:
0b:a5:7e:b4:df:36:a4:62:6e:ed:58:60:47:1b:cf:
8c:5c:cd:d1:24:0f:5b:43:d3:b7:60:07:35:1b:04:
9f:77:96:40:fa:95:7a:fc:3f:05:e5:f5:0c:c2:99:
2f:46:bc:5f:66:68:db:29:a6:ab:fd:99:6e:64:7f:
71:7c:58:4f:c8:ea:8b:bc:35:08:d8:b1:2e:59:96:
cd:6e:57:4c:82:db:85:4c:46:57:e6:93:31:9e:ea:
95:c4:71:dc:85:cf:dc:13:33:a8:16:a9:4c:db:a6:
32:3f:24:ce:28:c8:6b:55:59:e7:c1:a0:f3:fe:80:
58:7f:97:65:47:0e:6e:60:36:88:39:2a:34:5e:68:
c9:c6:92:50:2b:5d:8e:db:95:6b:79:53:ef:08:93:
f8:9d:fb:65:53:c1:1c:d1:bf:88:02:a4:40:7b:73:
dc:68:17:94:7c:cd:0d:97:f6:22:84:6d:d2:5a:c6:
bd:98:05:f5:2c:80:45:ca:85:e9:bc:04:20:c3:77:
48:38:62:80:a7:00:fa:a6:14:a9:d1:e0:82:2c:e1:
c7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:45:9C:4F:C7:72:A2:46:0A:35:E6:BB:78:2F:0D:A5:79:AE:72:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4394c957-d6d6-3969-9f1f-2829f0301cc7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:31:fc:54:25:ed:80:e5:39:94:c7:de:5b:89:16:b2:cc:73:
81:e2:01:88:cd:26:ab:25:72:50:21:0c:b0:0b:24:6b:ca:bb:
54:b5:84:fa:0f:38:9d:c1:91:db:1c:03:a7:36:c9:ff:76:da:
83:df:7f:59:bd:06:73:6a:43:52:bc:a4:46:e0:7f:c6:a2:c4:
1e:0c:21:02:0f:71:66:12:e9:c6:ac:23:e4:04:66:99:5f:8a:
1d:cc:66:32:5f:b9:eb:b6:db:96:b4:c3:97:29:dc:77:ca:d8:
3b:ce:cb:27:75:21:cc:33:9a:c0:e4:27:9a:54:91:19:ca:13:
a4:64:1c:23:31:62:00:b7:b2:4a:f9:e7:3e:5f:85:b1:62:97:
aa:30:e9:38:f0:50:ab:96:1e:ef:74:47:b2:12:dc:25:34:7b:
f5:f0:29:7b:1b:ad:a1:2c:a0:de:8d:76:31:9e:e9:2b:1d:fe:
bc:9d:8e:1a:82:02:1a:8e:1e:b8:35:c6:3c:c3:7f:b0:be:c9:
05:2a:b2:7f:87:81:f0:52:6c:f8:fe:a4:3c:a9:f5:f5:b8:fb:
63:d0:fc:5a:26:e7:ce:6f:c8:45:6c:2a:12:34:4a:a7:8e:fd:
89:c1:ba:dd:d5:85:88:72:71:2c:c6:65:08:5f:a6:f0:ea:d8:
0d:c0:47:8d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf7GioWj+5CD1bt9GAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1
ZWVhMB4XDTI0MTEyNDAyMDAyN1oXDTI1MDIyMjAyMDAyN1owLzEtMCsGA1UEAxMk
NDFiNjUwYWUtODA2Mi00NTk0LTk3NTEtYWIwYzdjZjFmOTAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtppsR/y67bxWqOoQmNy1L8ATu/pBbx8fYKYO
p2jBaKFcyhm34m3g3NUM6R0LpX603zakYm7tWGBHG8+MXM3RJA9bQ9O3YAc1GwSf
d5ZA+pV6/D8F5fUMwpkvRrxfZmjbKaar/ZluZH9xfFhPyOqLvDUI2LEuWZbNbldM
gtuFTEZX5pMxnuqVxHHchc/cEzOoFqlM26YyPyTOKMhrVVnnwaDz/oBYf5dlRw5u
YDaIOSo0XmjJxpJQK12O25VreVPvCJP4nftlU8Ec0b+IAqRAe3PcaBeUfM0Nl/Yi
hG3SWsa9mAX1LIBFyoXpvAQgw3dIOGKApwD6phSp0eCCLOHHMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJtFnE/HcqJGCjXmu3gvDaV5rnIEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy
ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDM5NGM5NTctZDZkNi0z
OTY5LTlmMWYtMjgyOWYwMzAxY2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky
M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl
NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz
ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEAx/FQl7YDlOZTH3luJFrLMc4HiAYjNJqslclAhDLALJGvKu1S1hPoP
OJ3BkdscA6c2yf922oPff1m9BnNqQ1K8pEbgf8aixB4MIQIPcWYS6casI+QEZplf
ih3MZjJfueu225a0w5cp3HfK2DvOyyd1IcwzmsDkJ5pUkRnKE6RkHCMxYgC3skr5
5z5fhbFil6ow6TjwUKuWHu90R7IS3CU0e/XwKXsbraEsoN6NdjGe6Ssd/rydjhqC
AhqOHrg1xjzDf7C+yQUqsn+HgfBSbPj+pDyp9fW4+2PQ/Fom585vyEVsKhI0SqeO
/YnBut3VhYhycSzGZQhfpvDq2A3AR40=
-----END CERTIFICATE-----
Generated at Tue Apr 29 21:07:26 2025 by rpki-client