Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4a91552d-6deb-3e19-805b-ab52062a7fcd.roa
File: 4a91552d-6deb-3e19-805b-ab52062a7fcd.roa (raw, json)
Hash identifier: GLWCyx3GeRDFEk1W7GPr0KQTjZ448z+oMS/wLlSUEbY=
Subject key identifier: 4C:72:1D:C1:65:C2:9C:E1:D0:94:F7:E3:AB:CD:0E:29:08:5C:84:16
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F43285848653043FBF5D52DB9466483F0
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4a91552d-6deb-3e19-805b-ab52062a7fcd.roa
Signing time: Wed 01 Jan 2025 02:00:40 +0000
ROA not before: Wed 01 Jan 2025 02:00:40 +0000
ROA not after: Tue 01 Apr 2025 01:00:40 +0000
asID: 8069
IP address blocks: 20.33.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:65:30:43:fb:f5:d5:2d:b9:46:64:83:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Jan 1 02:00:40 2025 GMT
Not After : Apr 1 01:00:40 2025 GMT
Subject: CN=348c5abe-a771-41f1-815c-f6559b6bdcc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cf:29:4f:a4:11:ae:c8:38:1e:a7:21:62:16:
4d:50:5e:0e:85:f6:ae:73:53:29:d0:62:29:4f:ab:
70:fa:7a:6a:2c:f2:03:c5:19:16:dd:e9:af:f3:d7:
e1:2a:7b:f3:72:4b:fc:74:d6:58:72:6a:b3:2f:31:
bc:af:c4:0e:59:f2:0a:3b:f3:0a:bb:0e:fd:e1:b9:
b1:fc:9f:20:96:d9:14:b8:12:9a:c4:fc:00:dc:77:
05:6c:85:f3:26:cb:12:4a:3e:40:3f:9b:86:d7:91:
16:21:6e:c4:63:f4:ad:13:f3:84:9f:c9:7b:3f:ab:
be:11:92:34:7e:61:72:d7:7f:8f:0a:d3:3f:5e:09:
e0:6e:48:94:c4:a3:49:98:73:35:84:11:bc:98:f2:
99:2e:cc:c9:58:ec:46:51:6a:db:b8:6e:fb:df:8f:
37:77:72:71:c2:f7:7c:dd:f2:09:f9:e1:ea:42:ac:
50:8a:b0:2b:ca:6c:23:00:5b:34:f5:ee:16:17:4c:
8f:79:f6:28:ac:69:2e:ef:2d:2a:9b:fb:8d:d2:5d:
eb:83:e0:d0:4f:7e:af:42:24:70:24:84:16:29:1d:
ee:8b:54:5c:b2:10:5d:f8:dd:ce:8f:12:73:9b:57:
56:ec:7e:e3:62:a8:00:0e:1e:0c:0e:1d:13:c2:f7:
27:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:72:1D:C1:65:C2:9C:E1:D0:94:F7:E3:AB:CD:0E:29:08:5C:84:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4a91552d-6deb-3e19-805b-ab52062a7fcd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.51.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:fe:5a:b8:4c:f4:e5:7b:10:91:4e:51:66:c4:b3:73:ed:13:
e3:31:c7:ee:e3:f1:9f:9a:dc:2d:e0:61:2f:bc:11:98:9e:87:
45:53:81:15:55:e7:b4:cb:58:06:0c:c9:0b:1e:9b:69:f5:ff:
a7:99:bc:7b:e0:a7:50:c0:1b:1f:25:24:79:55:a5:89:63:a7:
5c:27:d3:4b:f9:8d:5b:f1:0b:e5:31:94:b7:cf:be:00:b9:d3:
82:50:9c:03:85:3a:cd:f4:70:61:6d:6c:05:a3:a2:07:96:dc:
25:e4:5e:44:20:45:03:b5:bf:38:32:a2:73:a8:aa:2f:cd:93:
ef:9f:e6:d0:02:7c:ef:1d:d1:47:ad:37:22:e4:c5:42:d9:55:
60:26:bf:b8:24:59:74:12:e0:03:35:c8:c9:70:3c:1e:1b:27:
91:6d:e0:3a:73:d8:de:94:1f:f2:64:8d:3d:10:e1:f1:0e:5f:
af:8b:ff:c2:39:85:de:6c:e6:34:95:11:af:30:ea:e1:ff:24:
f5:f8:3a:fc:fa:76:09:a2:ba:0f:01:a2:f1:60:f8:2b:08:30:
1d:81:96:f8:f5:80:c1:41:6a:eb:92:cf:74:ba:80:e9:7f:fa:
38:4a:bd:bf:22:88:82:bd:28:6a:f7:a7:b8:5c:7c:f7:59:b6:
05:99:34:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:32:59 2025 by rpki-client