Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/71d0f7d6-9afd-338d-be2b-f05eeb35f338.roa
File: 71d0f7d6-9afd-338d-be2b-f05eeb35f338.roa (raw, json)
Hash identifier: 1XqXVckW2ZXta+HLsu9B4DvmI0EjT+UIbuXmPPZpQu0=
Subject key identifier: 07:B2:79:A2:D2:DD:D0:8F:14:2B:22:2C:4B:28:61:E1:58:61:35:3A
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F432858485A057A982027619ACF7F04C0
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/71d0f7d6-9afd-338d-be2b-f05eeb35f338.roa
Signing time: Sat 28 Dec 2024 02:00:38 +0000
ROA not before: Sat 28 Dec 2024 02:00:38 +0000
ROA not after: Fri 28 Mar 2025 01:00:38 +0000
asID: 8069
IP address blocks: 20.33.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5a:05:7a:98:20:27:61:9a:cf:7f:04:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Dec 28 02:00:38 2024 GMT
Not After : Mar 28 01:00:38 2025 GMT
Subject: CN=b091e920-924d-4779-9e02-095c8771ad08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:92:8f:17:80:f1:ae:0f:24:5e:93:e6:e7:28:
ae:32:c7:ab:b7:3f:47:c5:c4:c8:7a:78:3c:de:66:
ae:91:19:a9:bf:c8:ca:22:00:97:79:82:be:84:ce:
92:ca:0b:a8:40:01:ef:0a:26:b7:f1:72:53:70:00:
5b:33:18:a2:d2:19:1e:c3:52:56:4f:97:4d:ec:4c:
b7:67:24:72:50:6a:aa:88:4f:f9:52:ec:c5:9c:cb:
3f:b5:d2:c4:39:d5:b4:e2:0a:00:47:bc:5d:7e:89:
ac:20:5a:12:bc:3f:32:31:65:4d:5b:e9:b5:de:f4:
79:4b:fe:a6:ac:a7:cd:dd:c2:34:f1:11:3b:ef:f1:
c9:e8:f2:3d:41:c1:27:f3:c1:72:db:c1:60:8c:df:
02:a4:9f:bc:db:cf:5c:56:fc:d3:11:7e:84:5c:b1:
8b:c1:7c:6e:70:94:24:e1:ee:f6:0f:c6:df:0d:1c:
36:f3:a0:c1:fa:b0:8e:f9:94:75:4f:62:e6:64:63:
54:3a:ce:76:b7:aa:29:8e:08:82:d5:bd:db:8e:e7:
fc:62:e6:3f:e2:83:d8:33:11:d8:9f:25:d5:5b:2a:
8b:02:3d:6b:05:ce:af:53:fa:4a:7f:fa:b0:37:ce:
6c:fb:bf:a5:ca:4d:c9:92:11:1d:b8:94:ed:ee:0e:
43:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B2:79:A2:D2:DD:D0:8F:14:2B:22:2C:4B:28:61:E1:58:61:35:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/71d0f7d6-9afd-338d-be2b-f05eeb35f338.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.233.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:d4:27:1e:d5:f3:93:8e:af:61:0e:26:6a:88:b8:0d:ce:43:
b2:02:bc:81:39:fd:ef:ac:32:e5:ca:fe:e0:5c:bd:e4:71:40:
6c:c1:cb:a5:e7:eb:a2:08:6a:ec:9b:49:46:fc:ed:df:25:16:
f6:bb:e9:4a:78:11:5c:77:4f:b7:31:28:1e:b2:bc:4c:b8:2c:
83:07:6a:ea:6a:de:f8:47:69:f2:40:71:d2:42:89:70:3e:09:
af:27:8e:33:0b:7f:3b:c2:24:da:90:17:66:97:61:03:c0:2c:
4b:57:8e:57:e8:e5:d7:ff:a5:73:02:3d:6c:bf:f6:ef:d1:08:
9e:ad:6e:04:a2:76:4b:d7:32:8e:73:41:bb:c0:99:f8:5f:d8:
b6:f2:ee:e3:09:0b:51:5e:bf:e3:76:5b:84:31:8e:04:96:af:
f6:9f:27:b7:7d:98:18:6d:f0:5c:4e:5f:f2:11:69:1a:0b:35:
6e:ed:0f:a6:1e:71:6e:a1:e1:a6:5d:bd:c9:17:06:ac:ad:6d:
64:10:45:46:8f:ac:0f:0d:fd:80:19:f8:89:fa:f4:ae:7b:06:
b6:09:9d:a0:53:94:9d:bd:ff:13:b9:a9:96:fe:48:bf:ab:7b:
3f:19:f6:05:0d:3c:3d:33:66:51:7e:88:7d:4a:d9:2b:c3:7c:
fe:14:56:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:14:16 2025 by rpki-client