Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/54229034-9041-3ee3-bfcd-6d8d02da3700.roa
File: 54229034-9041-3ee3-bfcd-6d8d02da3700.roa (raw, json)
Hash identifier: Zc9ZyWulXD+7Qnxqra5vePSP09toA59K0Lowm72Oqhc=
Subject key identifier: EB:62:E9:AE:B5:01:A0:6B:1D:9F:11:20:37:53:1A:DD:60:E7:47:1A
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F432858481F653A4B4AAB84690C19E200
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/54229034-9041-3ee3-bfcd-6d8d02da3700.roa
Signing time: Sat 07 Dec 2024 02:00:39 +0000
ROA not before: Sat 07 Dec 2024 02:00:39 +0000
ROA not after: Fri 07 Mar 2025 02:00:39 +0000
asID: 8069
IP address blocks: 20.33.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1f:65:3a:4b:4a:ab:84:69:0c:19:e2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Dec 7 02:00:39 2024 GMT
Not After : Mar 7 02:00:39 2025 GMT
Subject: CN=29cd2796-f294-4e5e-9c52-54e7ff2bb4ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:ac:65:45:25:aa:7c:72:b2:3a:fb:ee:4f:a6:
b3:5c:99:fa:36:35:e2:53:8a:8b:83:66:a7:25:0f:
82:ed:9f:72:bc:4d:38:ab:8f:87:86:55:39:96:24:
5f:75:2b:7c:6c:df:b9:60:0f:e3:05:6f:05:08:37:
73:e7:03:3d:be:e0:23:5d:de:86:47:30:4b:35:c4:
6e:48:a6:ed:51:7c:f5:55:d7:43:55:86:de:98:2a:
7b:ff:10:0a:a0:ab:7d:41:20:fa:ce:0d:61:1f:dd:
4b:48:c7:c5:7e:05:6e:2e:cf:35:46:7c:9c:8c:85:
4e:ef:b8:9b:7d:6e:6e:47:51:a4:f8:6b:78:bd:39:
e8:67:05:7f:11:c7:b3:af:0d:b5:b5:e7:ff:bf:b4:
a0:88:52:a0:3d:43:94:a2:7d:a7:da:82:23:fd:b6:
74:59:ea:07:2e:7c:ae:19:fd:4e:21:19:03:8c:4d:
ef:3f:3e:8a:e0:da:5a:21:00:3d:39:bd:67:8f:eb:
e7:d9:8f:65:48:a8:2b:bf:fb:7f:b9:ae:47:19:f9:
e1:17:d3:46:be:02:f1:87:4d:4d:64:b7:a7:33:40:
0c:f0:29:48:3a:c3:6f:59:56:f7:97:75:3c:b4:d5:
8c:eb:62:42:c5:25:85:6a:98:fc:82:f4:87:51:92:
b1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:62:E9:AE:B5:01:A0:6B:1D:9F:11:20:37:53:1A:DD:60:E7:47:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/54229034-9041-3ee3-bfcd-6d8d02da3700.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.32.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:d1:8b:2a:26:ce:e1:f4:11:a0:2a:59:44:75:41:8e:3f:41:
1a:3f:ad:de:28:d7:99:c2:e8:e1:68:9b:b1:44:01:2c:4a:ee:
8d:a9:27:66:f2:8d:eb:f8:d1:30:c8:14:44:98:ec:68:94:54:
94:1f:fe:d4:3a:08:25:d0:95:1e:b5:d1:25:28:3e:4d:1b:b5:
37:3b:20:5f:f1:45:78:9a:b6:e1:e8:fb:9c:a1:d3:8e:7b:14:
bf:5a:72:91:ea:27:55:76:1c:8b:16:72:d3:0f:ac:49:11:54:
17:8a:10:75:59:9a:34:72:ed:8d:6d:c4:6e:07:60:26:be:95:
05:cd:42:ff:56:fe:3a:5d:af:b7:a6:98:f5:8b:c9:17:49:b4:
9d:d9:e6:6d:88:a3:4a:c6:fb:18:b1:00:27:3d:cd:4e:7b:4f:
8c:0f:e8:50:54:97:b3:97:25:18:52:27:f4:97:60:60:81:52:
49:d3:d2:9d:f5:52:18:17:cc:dd:35:7b:3b:53:02:fd:b8:00:
5b:c8:a9:28:2e:f7:0d:7c:94:7c:79:ba:bc:64:fa:a4:cb:dd:
35:15:04:e0:e1:23:fe:c4:b7:b9:30:99:27:8d:06:6d:5d:92:
79:45:c5:3b:37:b5:27:66:fb:7e:b4:9d:90:c8:69:fa:b6:17:
31:5c:cf:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:52:22 2025 by rpki-client