Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4eb720e4-01b2-3f16-8642-849e970123c0.roa
File: 4eb720e4-01b2-3f16-8642-849e970123c0.roa (raw, json)
Hash identifier: zqMggsngR039sN67m0c62kL0FdkzJDjQfkFds0w8Wrs=
Subject key identifier: 47:38:1F:B9:9B:78:44:B0:96:5C:A2:5A:D3:55:CF:71:12:DA:AA:A8
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584806450C6F1139CA854BF46A90
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4eb720e4-01b2-3f16-8642-849e970123c0.roa
Signing time: Thu 28 Nov 2024 02:00:38 +0000
ROA not before: Thu 28 Nov 2024 02:00:38 +0000
ROA not after: Wed 26 Feb 2025 02:00:38 +0000
asID: 8069
IP address blocks: 20.33.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:06:45:0c:6f:11:39:ca:85:4b:f4:6a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Nov 28 02:00:38 2024 GMT
Not After : Feb 26 02:00:38 2025 GMT
Subject: CN=71378e92-f7f6-4140-8a79-669c8ae28364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:53:00:7b:80:88:db:75:e3:c4:1c:52:c8:34:
bf:de:75:c2:48:75:f0:90:ab:7d:3c:8b:27:b1:ff:
3a:2f:d6:62:49:10:6b:ce:86:0b:d3:2e:c4:c1:10:
c3:2a:6f:8e:bf:ea:ad:17:37:19:54:d7:cd:a6:26:
48:18:a0:b6:cc:9f:cb:58:81:3d:dc:48:92:ee:58:
84:e7:10:84:52:04:3d:ab:88:44:81:dd:66:86:5d:
a0:6a:94:34:7a:ff:0b:17:be:1a:89:18:0b:f3:a5:
2a:ca:93:1c:ce:95:8b:4d:12:ec:6d:58:bd:40:c3:
01:08:66:63:c0:de:e0:6b:9f:75:b2:5a:cf:51:0f:
a1:34:2f:23:b0:2c:8e:37:68:5d:8a:af:b4:d6:77:
e5:75:08:a9:70:97:98:ea:4a:4c:a3:1a:ef:5d:59:
31:11:d2:c9:d1:cb:45:61:5e:38:68:4c:40:ad:9b:
d3:56:ce:ef:a7:ce:71:98:35:c6:5f:c8:1f:b1:92:
c5:4a:4b:88:fd:1f:98:66:48:13:bc:47:44:30:70:
d5:3c:f9:5b:b8:57:cc:18:04:fd:9d:bb:b1:1a:a4:
6d:e5:3d:5a:94:a1:95:41:74:d3:c6:d4:80:05:ce:
db:80:a7:06:5e:45:c2:32:45:fe:91:ef:24:7d:8d:
05:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:38:1F:B9:9B:78:44:B0:96:5C:A2:5A:D3:55:CF:71:12:DA:AA:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4eb720e4-01b2-3f16-8642-849e970123c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.205.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:f8:e1:90:f9:2b:3a:74:a0:2b:44:13:9b:b9:7b:69:43:f2:
c5:34:64:17:46:c7:c1:24:5d:7e:67:c9:24:5c:d9:1b:e2:eb:
0b:9c:04:a7:30:5f:9f:99:f0:d3:cf:27:79:58:d9:56:b2:97:
e8:42:b3:e8:b3:3b:fb:68:ab:72:02:97:3a:e7:80:50:26:1d:
fa:35:94:3e:6e:b1:71:8a:66:1b:f9:d8:b0:d4:24:7b:26:7b:
f4:89:1a:ce:04:22:45:72:50:27:44:00:51:3c:33:ee:06:c2:
7e:2d:06:d5:bf:b4:b3:26:d5:40:63:c0:bf:6f:e5:39:13:a4:
fd:a5:2a:23:50:57:0e:7f:b2:61:b6:f0:da:c6:b2:ed:b5:b6:
90:99:02:28:58:35:78:a9:46:91:af:4b:ac:f2:b6:3a:65:23:
b7:d8:83:87:f6:ea:35:f8:17:ef:a0:b0:0f:42:ba:dc:55:36:
8b:45:e1:cc:d4:c3:b2:1d:93:af:07:fa:0f:ac:0f:72:d6:8d:
03:c0:79:d5:8a:77:94:9e:27:3a:8c:92:0a:59:48:b9:14:67:
4a:aa:e0:b7:5d:19:f1:09:ea:ab:99:69:fa:71:78:94:94:ff:
68:43:0d:fc:20:4d:3f:c1:1d:d6:ec:19:73:01:72:88:52:77:
79:22:0a:a8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgGRQxvETnKhUv0apAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1
ZWVhMB4XDTI0MTEyODAyMDAzOFoXDTI1MDIyNjAyMDAzOFowLzEtMCsGA1UEAxMk
NzEzNzhlOTItZjdmNi00MTQwLThhNzktNjY5YzhhZTI4MzY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVMAe4CI23XjxBxSyDS/3nXCSHXwkKt9PIsn
sf86L9ZiSRBrzoYL0y7EwRDDKm+Ov+qtFzcZVNfNpiZIGKC2zJ/LWIE93EiS7liE
5xCEUgQ9q4hEgd1mhl2gapQ0ev8LF74aiRgL86UqypMczpWLTRLsbVi9QMMBCGZj
wN7ga591slrPUQ+hNC8jsCyON2hdiq+01nfldQipcJeY6kpMoxrvXVkxEdLJ0ctF
YV44aExArZvTVs7vp85xmDXGX8gfsZLFSkuI/R+YZkgTvEdEMHDVPPlbuFfMGAT9
nbuxGqRt5T1alKGVQXTTxtSABc7bgKcGXkXCMkX+ke8kfY0FZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEc4H7mbeESwllyiWtNVz3ES2qqoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy
ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNGViNzIwZTQtMDFiMi0z
ZjE2LTg2NDItODQ5ZTk3MDEyM2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky
M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl
NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz
ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGb44ZD5Kzp0oCtEE5u5e2lD8sU0ZBdGx8EkXX5nySRc2Rvi6wucBKcw
X5+Z8NPPJ3lY2Vayl+hCs+izO/toq3IClzrngFAmHfo1lD5usXGKZhv52LDUJHsm
e/SJGs4EIkVyUCdEAFE8M+4Gwn4tBtW/tLMm1UBjwL9v5TkTpP2lKiNQVw5/smG2
8NrGsu21tpCZAihYNXipRpGvS6zytjplI7fYg4f26jX4F++gsA9CutxVNotF4czU
w7Idk68H+g+sD3LWjQPAedWKd5SeJzqMkgpZSLkUZ0qq4LddGfEJ6quZafpxeJSU
/2hDDfwgTT/BHdbsGXMBcohSd3kiCqg=
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:11:08 2025 by rpki-client