Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4426bc50-c7c8-3db9-ba29-a76605eb28e0.roa
File: 4426bc50-c7c8-3db9-ba29-a76605eb28e0.roa (raw, json)
Hash identifier: 8ORaMFPLqOzZd0Cgx0hCTprNqSbqvTE1JJS00rQShIs=
Subject key identifier: 7D:FE:83:6E:A2:B1:89:72:67:FA:60:1E:0E:EE:50:EF:66:38:63:19
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584806450CDF4B8495E8FF648240
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4426bc50-c7c8-3db9-ba29-a76605eb28e0.roa
Signing time: Thu 28 Nov 2024 02:00:38 +0000
ROA not before: Thu 28 Nov 2024 02:00:38 +0000
ROA not after: Wed 26 Feb 2025 02:00:38 +0000
asID: 8069
IP address blocks: 20.33.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:06:45:0c:df:4b:84:95:e8:ff:64:82:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Nov 28 02:00:38 2024 GMT
Not After : Feb 26 02:00:38 2025 GMT
Subject: CN=e5de0421-0b67-4402-b0e2-3fa1f3ea1dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:97:f2:db:b4:5d:0e:25:fa:ad:c0:02:0d:b3:
c2:4a:54:b4:ae:93:26:34:0a:cd:f0:17:87:53:ea:
9b:44:a9:a8:af:7f:af:c6:08:06:c5:c1:eb:d9:13:
65:b3:47:66:01:7c:0c:3d:63:ce:4d:b9:3d:18:5f:
d3:a4:d4:7c:0e:50:1f:29:b4:f7:1a:81:1d:88:84:
90:2f:09:05:43:b9:92:39:84:fa:9f:0b:34:36:9e:
ab:6c:fa:ae:0a:33:b2:c3:6b:20:d5:71:a3:ca:da:
7d:09:f7:ed:d7:58:85:5c:76:21:14:ad:03:83:1a:
ca:47:cd:bd:ce:87:8e:15:a3:4a:1d:82:91:b1:2e:
76:59:09:ba:34:ad:83:af:41:39:30:11:4b:9d:8b:
9d:9c:ee:5f:10:0e:5a:c3:fc:7a:d7:19:f2:1f:f2:
d8:bf:02:4e:09:8c:1c:76:ed:f3:05:9d:58:6f:7f:
3e:e5:9b:85:d6:af:cd:70:9a:69:70:18:e8:aa:1d:
af:ce:91:1b:2e:1d:b2:0d:1e:10:24:ad:1a:bb:4a:
03:ee:e3:e5:c9:24:e7:ed:21:c2:10:d5:2e:d5:c8:
f4:42:41:ea:8e:75:76:e5:5a:9e:13:67:4d:29:ee:
37:b7:59:59:a4:e2:9f:69:59:f8:df:3c:7c:85:1b:
e2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:FE:83:6E:A2:B1:89:72:67:FA:60:1E:0E:EE:50:EF:66:38:63:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4426bc50-c7c8-3db9-ba29-a76605eb28e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.70.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:98:dc:67:48:78:70:c7:91:7f:1c:8c:8d:a4:75:aa:e2:67:
7f:b6:91:a0:75:21:93:cd:5b:f7:39:97:ce:61:6f:ac:c1:75:
9d:56:4f:5c:30:f3:55:5a:77:17:75:f2:40:84:4a:f0:a1:15:
59:6f:92:e1:2b:d4:22:c1:fc:28:ac:8e:1c:65:d8:e7:6b:2f:
25:32:2a:48:96:e2:d7:4b:7c:04:41:84:59:bd:73:cb:42:5f:
dd:95:0f:2c:9e:c8:70:b9:0b:37:5d:f8:40:ef:4d:ad:38:34:
63:58:94:f6:f3:22:f2:c3:ca:e3:74:17:20:54:c1:40:68:71:
e7:70:43:cd:0e:f4:e2:35:6b:62:b8:ac:7a:35:32:f1:b7:d6:
65:c1:7e:63:cb:9b:65:7e:94:12:b7:f8:9e:b7:8a:d9:d2:9b:
01:4f:5e:92:c4:45:c0:f1:4b:56:9d:d4:97:d7:ed:22:05:c8:
4d:49:ed:b5:e8:46:34:14:a7:4c:67:0c:d0:b3:e8:12:72:07:
a9:e0:a1:0e:7a:8f:5f:ff:80:72:98:2a:23:88:f1:85:b5:4a:
0d:41:36:c6:6e:f0:ab:49:b4:52:a8:ab:69:8d:e3:cf:c5:c9:
42:01:24:f0:dc:bc:8e:fd:74:74:ff:58:b0:40:dd:05:21:14:
c3:05:43:88
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgGRQzfS4SV6P9kgkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1
ZWVhMB4XDTI0MTEyODAyMDAzOFoXDTI1MDIyNjAyMDAzOFowLzEtMCsGA1UEAxMk
ZTVkZTA0MjEtMGI2Ny00NDAyLWIwZTItM2ZhMWYzZWExZGZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Jfy27RdDiX6rcACDbPCSlS0rpMmNArN8BeH
U+qbRKmor3+vxggGxcHr2RNls0dmAXwMPWPOTbk9GF/TpNR8DlAfKbT3GoEdiISQ
LwkFQ7mSOYT6nws0Np6rbPquCjOyw2sg1XGjytp9Cfft11iFXHYhFK0DgxrKR829
zoeOFaNKHYKRsS52WQm6NK2Dr0E5MBFLnYudnO5fEA5aw/x61xnyH/LYvwJOCYwc
du3zBZ1Yb38+5ZuF1q/NcJppcBjoqh2vzpEbLh2yDR4QJK0au0oD7uPlySTn7SHC
ENUu1cj0QkHqjnV25VqeE2dNKe43t1lZpOKfaVn43zx8hRvizQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH3+g26isYlyZ/pgHg7uUO9mOGMZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy
ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDQyNmJjNTAtYzdjOC0z
ZGI5LWJhMjktYTc2NjA1ZWIyOGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky
M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl
NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz
ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIOY3GdIeHDHkX8cjI2kdariZ3+2kaB1IZPNW/c5l85hb6zBdZ1WT1ww
81Vadxd18kCESvChFVlvkuEr1CLB/Cisjhxl2OdrLyUyKkiW4tdLfARBhFm9c8tC
X92VDyyeyHC5Czdd+EDvTa04NGNYlPbzIvLDyuN0FyBUwUBocedwQ80O9OI1a2K4
rHo1MvG31mXBfmPLm2V+lBK3+J63itnSmwFPXpLERcDxS1ad1JfX7SIFyE1J7bXo
RjQUp0xnDNCz6BJyB6ngoQ56j1//gHKYKiOI8YW1Sg1BNsZu8KtJtFKoq2mN48/F
yUIBJPDcvI79dHT/WLBA3QUhFMMFQ4g=
-----END CERTIFICATE-----
Generated at Tue Apr 29 11:44:30 2025 by rpki-client