Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/bf46d194-0dd2-36cc-ae4a-7bcffa50ec1e.roa
File: bf46d194-0dd2-36cc-ae4a-7bcffa50ec1e.roa (raw, json)
Hash identifier: wbnkmFnTSl4n7fi7gIphgNoMXPB5J35aEVFk42p9V9I=
Subject key identifier: 5E:CA:B8:D9:CA:E8:F0:95:57:94:A7:FD:5F:78:97:EF:91:39:BA:C8
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F432858485470273143C14215ACC52D40
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/bf46d194-0dd2-36cc-ae4a-7bcffa50ec1e.roa
Signing time: Thu 26 Dec 2024 02:00:40 +0000
ROA not before: Thu 26 Dec 2024 02:00:40 +0000
ROA not after: Wed 26 Mar 2025 01:00:40 +0000
asID: 8069
IP address blocks: 20.157.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:54:70:27:31:43:c1:42:15:ac:c5:2d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Dec 26 02:00:40 2024 GMT
Not After : Mar 26 01:00:40 2025 GMT
Subject: CN=5356139d-228b-4145-8e58-b29d91b361e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f5:d5:38:e4:ad:17:57:2d:f2:8c:44:e7:5d:
92:e6:62:9f:28:52:81:42:b6:cf:e5:73:76:05:37:
a5:6c:62:5d:66:97:13:33:6c:fb:53:37:c2:45:fc:
bb:b0:16:1b:a2:41:1f:e0:ff:55:d7:46:26:ff:c5:
38:0d:22:55:ba:ea:01:d2:d8:ba:39:dc:5f:ee:79:
9a:8e:da:ab:5e:65:d2:1e:e9:1a:fe:44:d6:ed:75:
13:c2:8e:7b:7b:9e:b6:a9:91:09:4d:32:0b:12:e6:
90:3d:8c:39:75:f5:57:6c:7c:6c:89:b9:89:1e:92:
60:66:77:6f:31:0b:b4:1b:5c:f3:23:90:cb:3c:7a:
5d:e7:08:5a:0d:54:62:87:a9:d3:94:df:60:38:5a:
1a:2e:03:80:80:6f:8b:51:6c:66:cc:8b:53:28:e3:
42:c7:07:e6:e3:be:83:4e:08:d6:af:2c:b7:51:c4:
b0:54:61:5c:ee:33:79:d3:d6:26:96:f9:a3:2f:e9:
7f:9b:58:73:3b:2f:96:27:89:01:49:72:cc:76:38:
b7:42:96:00:4a:bd:b5:6a:b6:df:1f:2d:b2:7a:20:
a9:b7:f9:ae:e5:86:f9:eb:73:4d:bd:38:e4:32:97:
a7:cc:fa:33:b9:ef:96:4b:71:32:70:6f:af:30:61:
2f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:CA:B8:D9:CA:E8:F0:95:57:94:A7:FD:5F:78:97:EF:91:39:BA:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/bf46d194-0dd2-36cc-ae4a-7bcffa50ec1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.157.235.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:d0:52:1c:a9:1a:55:c8:aa:a3:6f:39:7c:14:d0:7f:8c:2a:
b3:78:9a:7b:33:9c:64:20:c5:6f:9e:a7:a8:59:17:54:78:1a:
52:11:9e:e0:7a:38:33:db:18:25:9f:46:09:b9:68:a3:b9:1d:
3b:1b:7a:e9:d2:37:0a:0c:75:50:72:80:bf:e4:1c:99:ec:d7:
a3:f2:06:f2:24:ba:51:42:ba:b8:14:76:62:ba:c3:29:d3:e7:
21:1f:d3:46:59:31:3e:ee:0a:d6:bc:37:1f:06:4e:94:5d:9b:
ea:99:5c:7b:a6:8a:49:cc:c0:a1:3d:8f:df:27:e5:9d:3e:d6:
ca:31:96:9c:b6:26:43:7a:d7:52:b3:c1:68:c0:80:e6:2c:77:
f9:9f:07:7b:88:7c:81:e0:4b:6b:31:a3:26:98:5b:5c:16:09:
21:f2:e0:d5:dd:25:b7:70:73:89:06:28:47:28:00:9b:78:0e:
6f:3d:79:43:10:f0:ee:bd:3e:4e:15:52:1d:ea:12:05:75:dc:
e8:f3:92:53:7c:6c:ab:43:d1:b7:1f:57:e1:84:fe:c9:66:66:
f2:1d:10:7e:50:9f:70:6c:b5:9f:df:19:37:f6:87:bd:30:1e:
07:03:6b:35:0a:59:5b:e2:98:0e:bf:00:d4:e4:d4:ae:5b:84:
25:91:59:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:22:02 2025 by rpki-client