Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/96781fca-906e-351a-8100-dfe1dcb508d0.roa
File: 96781fca-906e-351a-8100-dfe1dcb508d0.roa (raw, json)
Hash identifier: ANKV18frmdQtv52vGbJgiLTm7I2MVaAqoGJPlSpLyCM=
Subject key identifier: 4A:79:39:E1:C7:1D:38:A5:67:CF:A6:55:C1:F4:87:0B:03:E9:6E:73
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F43285848562F363316152E3F3CDBE800
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/96781fca-906e-351a-8100-dfe1dcb508d0.roa
Signing time: Thu 26 Dec 2024 17:01:32 +0000
ROA not before: Thu 26 Dec 2024 17:01:32 +0000
ROA not after: Wed 26 Mar 2025 16:01:32 +0000
asID: 8069
IP address blocks: 20.33.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:56:2f:36:33:16:15:2e:3f:3c:db:e8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Dec 26 17:01:32 2024 GMT
Not After : Mar 26 16:01:32 2025 GMT
Subject: CN=68f1e3f2-380c-4210-9e5b-15ec2abd49e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d3:89:f6:79:d1:28:35:12:a4:38:c2:9f:4c:
79:ea:d7:71:58:c6:72:15:86:88:19:5e:50:5a:9f:
2d:99:ec:cd:52:f9:58:4a:ce:e2:72:b6:60:0e:21:
d2:9f:5b:bd:f1:6b:bf:07:70:2e:cd:58:86:52:2f:
a8:b1:c1:53:d3:88:72:f8:5c:74:a6:92:f9:e6:fd:
60:f5:aa:25:e2:76:e6:fe:9a:b8:73:f7:79:cc:34:
3c:ee:71:b6:b6:47:57:a2:5f:eb:01:80:7b:48:31:
f8:c9:c9:c7:32:07:3c:f5:f0:b5:6e:3e:73:44:fa:
e3:f3:22:05:b5:21:b5:9e:f7:e2:48:3a:80:13:da:
33:5a:5c:e1:db:c8:f4:01:f2:07:94:c8:04:d2:13:
0c:2c:80:a2:94:b1:a4:6c:c9:ba:b1:db:d2:ad:c4:
10:ee:ca:31:9d:a6:a2:cf:e7:b8:ac:af:e8:16:2c:
66:12:f0:52:8f:87:93:e9:ff:d7:a3:5b:55:1e:f7:
c4:d9:c8:0b:c3:74:bc:b5:92:84:9a:ed:74:b2:74:
c1:dd:97:7e:7b:b5:4e:17:b6:4c:9b:36:d1:8e:6b:
d4:74:90:a9:3a:09:31:6e:b3:b0:53:fd:94:b9:c7:
3f:9d:37:79:4b:7e:db:e9:fe:ef:4f:ba:33:9d:2e:
35:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:79:39:E1:C7:1D:38:A5:67:CF:A6:55:C1:F4:87:0B:03:E9:6E:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/96781fca-906e-351a-8100-dfe1dcb508d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.115.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:f1:1a:39:6a:55:43:84:4b:68:45:27:38:69:91:9a:e8:99:
a4:09:69:4a:83:0c:80:72:0c:cf:78:e5:9e:d9:8f:82:81:ff:
73:47:b3:2f:7d:2c:96:ec:0b:d1:d0:2a:16:b7:a4:1e:dc:6d:
fb:a7:10:47:03:57:c2:8f:4e:4a:b6:0c:52:c8:45:d5:36:8f:
10:79:a8:2b:ad:df:04:74:b3:05:6f:6c:ba:2b:29:71:87:79:
87:0b:f1:0c:0f:5b:77:e2:fa:d0:1a:f7:be:54:94:cc:30:bf:
67:53:8c:41:40:50:e3:58:f7:28:e4:74:cc:10:11:19:6a:eb:
f3:a0:fe:7d:d3:ff:7e:a4:31:5e:5a:12:10:05:00:ec:31:1a:
d1:5b:0c:10:62:e3:7a:a9:8c:f0:a6:6d:f7:27:58:db:7f:32:
57:55:04:af:08:2e:fa:98:99:8a:be:d2:dc:0f:bc:7e:b0:b9:
67:81:d5:47:34:de:1c:3d:b9:e5:ee:93:6b:39:71:13:c1:21:
04:9a:77:d5:e3:c9:b8:86:00:ff:e6:47:93:16:1c:40:a7:72:
92:13:a1:e5:24:97:b6:e9:9d:f6:27:a0:34:b9:81:88:61:a5:
48:fa:b0:dd:d0:1b:c5:71:e1:0f:c9:b3:03:17:d9:e3:e4:bd:
25:52:3b:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhWLzYzFhUuPzzb6AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1
ZWVhMB4XDTI0MTIyNjE3MDEzMloXDTI1MDMyNjE2MDEzMlowLzEtMCsGA1UEAxMk
NjhmMWUzZjItMzgwYy00MjEwLTllNWItMTVlYzJhYmQ0OWUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdOJ9nnRKDUSpDjCn0x56tdxWMZyFYaIGV5Q
Wp8tmezNUvlYSs7icrZgDiHSn1u98Wu/B3AuzViGUi+oscFT04hy+Fx0ppL55v1g
9aol4nbm/pq4c/d5zDQ87nG2tkdXol/rAYB7SDH4ycnHMgc89fC1bj5zRPrj8yIF
tSG1nvfiSDqAE9ozWlzh28j0AfIHlMgE0hMMLICilLGkbMm6sdvSrcQQ7soxnaai
z+e4rK/oFixmEvBSj4eT6f/Xo1tVHvfE2cgLw3S8tZKEmu10snTB3Zd+e7VOF7ZM
mzbRjmvUdJCpOgkxbrOwU/2Uucc/nTd5S37b6f7vT7oznS41rQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEp5OeHHHTilZ8+mVcH0hwsD6W5zMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy
ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOTY3ODFmY2EtOTA2ZS0z
NTFhLTgxMDAtZGZlMWRjYjUwOGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky
M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl
NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz
ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAErxGjlqVUOES2hFJzhpkZromaQJaUqDDIByDM945Z7Zj4KB/3NHsy99
LJbsC9HQKha3pB7cbfunEEcDV8KPTkq2DFLIRdU2jxB5qCut3wR0swVvbLorKXGH
eYcL8QwPW3fi+tAa975UlMwwv2dTjEFAUONY9yjkdMwQERlq6/Og/n3T/36kMV5a
EhAFAOwxGtFbDBBi43qpjPCmbfcnWNt/MldVBK8ILvqYmYq+0twPvH6wuWeB1Uc0
3hw9ueXuk2s5cRPBIQSad9XjybiGAP/mR5MWHECncpIToeUkl7bpnfYnoDS5gYhh
pUj6sN3QG8Vx4Q/JswMX2ePkvSVSO/4=
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:46:02 2025 by rpki-client