Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8dea440f-3599-3031-bd25-4f82936b64f4.roa
File: 8dea440f-3599-3031-bd25-4f82936b64f4.roa (raw, json)
Hash identifier: JgyQzzT+boYon7jFlujEi4+lvOEE8E2MjNegxSB0DZ0=
Subject key identifier: 35:0C:CC:A1:AB:BC:AF:D5:D3:50:F7:D3:41:82:57:73:A7:B5:79:31
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584855D5A3971E2679BE3517BF40
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8dea440f-3599-3031-bd25-4f82936b64f4.roa
Signing time: Thu 26 Dec 2024 14:00:52 +0000
ROA not before: Thu 26 Dec 2024 14:00:52 +0000
ROA not after: Wed 26 Mar 2025 13:00:52 +0000
asID: 8069
IP address blocks: 20.157.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:d5:a3:97:1e:26:79:be:35:17:bf:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Dec 26 14:00:52 2024 GMT
Not After : Mar 26 13:00:52 2025 GMT
Subject: CN=0d6f889e-8cb8-4852-b2e5-ffe07ec0692f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:44:97:7f:67:90:31:64:31:3b:a4:3e:26:ef:
33:fd:7c:f6:e9:b0:37:14:0b:41:95:a9:0c:0f:df:
04:b5:f8:aa:4e:62:6b:dd:00:59:b0:d5:27:29:9f:
bb:7f:7e:59:7f:30:20:64:72:43:b0:56:5b:2c:13:
79:f8:12:08:34:2a:21:64:48:21:ea:be:06:a8:bc:
17:52:45:3e:a4:63:32:50:37:60:83:ef:cf:68:70:
88:63:79:2f:77:f9:9b:15:70:f8:c9:96:dc:73:3b:
6d:83:88:41:69:92:c4:0e:be:a2:58:74:d1:2d:58:
90:31:34:4d:32:9b:99:69:ba:18:e0:5c:43:53:e6:
21:a2:4e:a6:7c:6e:5d:c3:99:c1:37:f9:3a:07:26:
c7:dc:1b:93:e4:0d:8e:ed:c2:cd:00:99:8e:16:dc:
7a:4e:e6:3c:83:89:79:b1:91:ec:97:5c:a1:7a:41:
d7:5d:4e:3d:72:79:4a:b8:9f:8a:44:53:f0:f8:5f:
33:9c:df:fe:a2:c2:dc:5d:71:cc:22:67:a3:71:d3:
5f:e3:dc:56:6d:d0:22:1d:2c:4e:8c:01:18:05:c3:
42:ea:91:14:0a:be:c8:b5:b3:8b:3b:53:ae:4f:8e:
fa:74:8f:7d:0f:68:be:80:82:bc:29:55:11:a4:60:
17:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:0C:CC:A1:AB:BC:AF:D5:D3:50:F7:D3:41:82:57:73:A7:B5:79:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8dea440f-3599-3031-bd25-4f82936b64f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.157.173.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:12:72:d3:e5:cd:c9:1d:29:54:8e:dc:d4:8b:a1:de:b1:5c:
63:a5:34:00:fe:a4:d0:5e:14:47:04:38:ba:75:c4:26:fc:1b:
ef:02:8c:46:a2:6c:e6:fb:b5:b9:ec:b3:50:84:3c:dd:62:96:
3a:0e:3f:2a:12:7e:9b:0a:68:01:e3:40:3b:2d:d3:b7:e9:f8:
5d:f7:31:ce:64:25:5d:0d:b2:bc:c3:b3:c2:ba:e3:03:a4:f8:
aa:12:8c:f1:f7:99:dc:92:d9:40:9d:16:a2:94:ce:b7:b4:aa:
d9:22:b8:bd:d3:88:62:69:ec:0b:14:94:3f:a2:05:83:2e:03:
b6:81:18:3e:25:78:2d:6c:bf:d7:6c:2c:a3:d1:0a:9d:98:eb:
cd:18:7a:cf:3a:7f:98:a0:3e:c0:7a:a8:63:eb:91:a0:fc:15:
b7:0c:d8:ca:33:e3:a8:61:57:bc:ba:ac:9f:25:49:f1:1c:bb:
26:fc:ed:bf:a1:30:ec:d8:5b:25:3b:6f:68:da:f4:ae:19:8d:
f2:38:b5:9c:f1:97:c8:09:c5:ef:70:52:82:2e:97:93:f0:38:
cb:0a:b4:1e:12:21:f8:1f:d8:30:44:5a:49:60:98:13:8a:84:
78:ee:de:c1:1a:98:f2:df:0b:94:53:40:9e:26:ff:28:38:91:
ed:17:2c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:37:57 2025 by rpki-client