Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7cbce0d9-041b-3c5c-87e4-357878aadde8.roa
File: 7cbce0d9-041b-3c5c-87e4-357878aadde8.roa (raw, json)
Hash identifier: hN323ZvuEWROutv8rmbXRM6wHW2WfwSvP+q5fF08Zdo=
Subject key identifier: 0F:7E:41:9C:68:E9:C9:7F:F4:0C:9C:AE:42:6B:43:0B:18:72:C4:60
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584806450D1EB8437F5CDE76D600
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7cbce0d9-041b-3c5c-87e4-357878aadde8.roa
Signing time: Thu 28 Nov 2024 02:00:38 +0000
ROA not before: Thu 28 Nov 2024 02:00:38 +0000
ROA not after: Wed 26 Feb 2025 02:00:38 +0000
asID: 8069
IP address blocks: 20.33.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:06:45:0d:1e:b8:43:7f:5c:de:76:d6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Nov 28 02:00:38 2024 GMT
Not After : Feb 26 02:00:38 2025 GMT
Subject: CN=930892c8-ade9-4777-80fc-8b18275238bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f6:b6:ad:e0:41:d7:e5:49:f7:20:94:df:82:
67:7a:1c:81:bb:7c:eb:f0:30:2a:e3:1d:23:3d:5a:
69:d3:81:37:48:d1:1c:47:9b:80:ea:99:06:77:4f:
13:51:ed:d5:07:90:e8:01:15:cb:a6:e3:cf:c9:56:
a0:6a:79:04:ff:da:30:44:1e:9e:7b:c6:8e:31:5f:
f0:ae:fd:17:8b:a0:1a:66:d2:58:f3:37:e0:f4:39:
b7:0e:bf:64:54:31:89:81:bb:1d:7d:38:a9:4d:b9:
94:ca:ab:b8:8e:91:2f:c7:c3:53:29:96:29:ba:01:
4b:b9:78:b8:22:27:bc:18:a0:e4:37:1f:0d:1d:b5:
82:e4:4a:4f:4d:15:ba:3f:73:f7:33:15:a6:c9:0b:
ec:66:2d:c5:8b:64:3f:52:74:40:30:c8:e3:36:0a:
0b:6d:72:a4:d8:d3:66:37:a6:45:55:86:8f:96:53:
2b:f6:2c:6e:06:a6:d6:9d:c3:40:68:f2:81:1d:8f:
6c:2e:ed:f2:3a:8b:6a:d8:10:8e:2e:bd:5c:5b:b6:
1f:78:3f:41:45:f3:bb:ab:73:fb:a5:1b:d9:c2:8b:
a4:24:40:0c:2e:3d:93:57:59:11:86:18:fe:bd:10:
c5:1c:9d:e1:6d:46:38:59:02:0d:14:11:87:f9:6c:
cc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:7E:41:9C:68:E9:C9:7F:F4:0C:9C:AE:42:6B:43:0B:18:72:C4:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7cbce0d9-041b-3c5c-87e4-357878aadde8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.74.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:5f:c9:77:bc:34:72:f3:5f:c8:b8:32:8c:5d:03:6d:3c:20:
82:f0:29:c9:18:03:32:f1:6a:52:6e:f3:83:01:cd:02:9e:ac:
d7:91:26:11:eb:01:a1:0e:07:9d:f2:73:4c:6c:ac:8d:be:de:
0c:4c:f6:56:81:ad:a4:66:12:6a:64:04:fd:26:9d:b8:6e:ad:
88:74:d8:3f:41:2d:cd:7f:05:3d:2b:30:d8:f0:d0:a2:fc:1e:
67:04:ba:15:05:62:7e:31:27:49:5f:3b:3b:c0:be:3e:38:be:
6d:1c:24:9f:b5:83:f2:ad:7b:00:a2:4c:d7:a9:53:05:be:f5:
82:48:ac:2d:ba:04:1c:b6:fd:ab:ce:e8:8a:ef:48:0d:b0:38:
fe:06:55:73:30:c7:be:cd:cf:ca:91:bf:e5:76:b1:bb:f0:cc:
41:c9:5f:03:8a:f2:4f:be:6e:40:ad:83:17:6c:e0:35:ae:0d:
f5:88:3f:29:ca:27:50:43:a9:05:73:6e:b4:ab:84:10:38:51:
d9:0f:ed:93:67:4d:e5:ca:f6:16:fa:10:f2:fd:25:ca:82:e3:
4f:7e:f4:1e:e1:dd:50:9f:08:f0:be:8b:a1:e9:c7:f2:63:5c:
14:b9:ac:29:b4:71:63:1f:9c:f1:d7:fd:ff:6d:48:6d:f4:df:
05:ac:f9:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:42:34 2025 by rpki-client