Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c1f6ce7e-11f3-3197-bf63-44537afda3f2.roa
File: c1f6ce7e-11f3-3197-bf63-44537afda3f2.roa (raw, json)
Hash identifier: I0g1JHKvGleJR1H/+L9pQDYoEZeFJAuAYesfFmbmef0=
Subject key identifier: 9D:08:F6:6B:33:FB:1F:ED:4C:30:AE:74:3E:8D:1D:DB:24:67:0D:75
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F432858481F653A0D7E6F54F5A07A2A00
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c1f6ce7e-11f3-3197-bf63-44537afda3f2.roa
Signing time: Sat 07 Dec 2024 02:00:39 +0000
ROA not before: Sat 07 Dec 2024 02:00:39 +0000
ROA not after: Fri 07 Mar 2025 02:00:39 +0000
asID: 8069
IP address blocks: 20.33.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1f:65:3a:0d:7e:6f:54:f5:a0:7a:2a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Dec 7 02:00:39 2024 GMT
Not After : Mar 7 02:00:39 2025 GMT
Subject: CN=9472396b-0df4-4dc6-b2ec-78016fb7dae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4d:84:a6:55:1a:74:14:7d:69:cd:8f:77:d7:
1a:bf:7e:b4:86:85:6d:e1:04:eb:68:73:e7:7b:ff:
c0:77:8b:a9:9c:f8:fc:d1:88:3e:f6:80:74:15:ab:
6d:cf:47:a3:2b:71:de:ba:37:4a:d6:3a:24:1d:35:
21:89:7b:3d:24:41:3b:4b:58:92:27:c1:09:f8:7a:
fa:85:71:d0:5a:09:b0:da:44:e3:49:71:0b:ea:e9:
05:51:6a:bf:c2:1a:6c:46:42:fb:a1:6d:08:88:4b:
67:0b:8e:b6:1e:9d:f3:34:05:b5:81:be:6b:a1:fc:
62:88:92:ba:bd:b9:40:10:f5:a4:77:69:d6:a6:1f:
fe:1b:51:39:62:ea:70:45:7d:e3:85:a8:09:08:da:
2c:34:3e:27:e7:76:bf:3e:e7:73:a6:93:49:85:2b:
2d:05:f8:9e:ee:8c:42:44:ec:48:ff:81:a4:2c:6f:
e1:9b:42:1b:9b:ea:39:30:bd:3a:1e:9e:0e:7d:72:
9f:b4:19:d1:d7:3e:a5:5c:9b:5c:63:f5:29:26:ce:
4b:f5:98:b2:87:82:c8:6d:ee:75:ba:41:28:ac:2e:
df:23:95:b2:f0:30:5b:ff:68:4b:38:97:8b:10:4d:
16:fa:fe:92:8f:e7:f4:8c:bf:3e:47:bf:dc:b2:2c:
d7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:08:F6:6B:33:FB:1F:ED:4C:30:AE:74:3E:8D:1D:DB:24:67:0D:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c1f6ce7e-11f3-3197-bf63-44537afda3f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.28.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:ea:ea:fd:96:a6:95:d3:53:5f:3a:0e:79:c2:75:0d:38:b5:
ee:3e:40:66:8b:39:da:32:7e:c7:26:8a:4d:eb:6c:12:f3:a5:
11:12:9b:b3:c2:24:88:13:79:09:59:58:6a:7a:21:22:09:b8:
a9:56:f2:06:73:23:86:fe:51:3e:fa:59:9c:a4:8d:4c:01:d9:
e5:07:37:7c:29:a2:7d:5c:36:d4:38:1b:96:a0:12:f9:a1:51:
64:88:7a:1b:82:5f:99:82:7b:50:a4:c8:57:d7:58:6b:3e:3d:
83:55:42:8d:6f:33:55:86:cf:04:13:08:44:72:71:16:7a:04:
b5:1d:d9:2b:36:f9:20:a3:8f:3a:e2:9f:d2:55:13:b1:03:82:
6f:c9:65:b1:aa:2b:c2:4e:bb:25:40:fb:7e:e2:ee:1d:65:78:
45:ee:17:6b:78:9c:7b:b7:1e:ed:a1:22:0b:d2:4b:c4:5b:ed:
69:bb:ef:3e:86:f4:d4:0e:fd:e1:41:d9:50:cb:1b:7c:63:7e:
d5:0e:78:97:f7:bc:c2:b4:ba:71:46:0a:48:04:a6:01:89:b2:
9d:44:9a:16:fb:6f:1f:90:67:9e:37:16:3e:bb:1f:bd:09:a8:
aa:e0:8c:c7:f3:a8:54:4e:39:10:bc:27:80:6c:cf:a7:0f:81:
b0:e6:6c:2b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgfZToNfm9U9aB6KgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1
ZWVhMB4XDTI0MTIwNzAyMDAzOVoXDTI1MDMwNzAyMDAzOVowLzEtMCsGA1UEAxMk
OTQ3MjM5NmItMGRmNC00ZGM2LWIyZWMtNzgwMTZmYjdkYWU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwk2EplUadBR9ac2Pd9cav360hoVt4QTraHPn
e//Ad4upnPj80Yg+9oB0Fattz0ejK3HeujdK1jokHTUhiXs9JEE7S1iSJ8EJ+Hr6
hXHQWgmw2kTjSXEL6ukFUWq/whpsRkL7oW0IiEtnC462Hp3zNAW1gb5rofxiiJK6
vblAEPWkd2nWph/+G1E5YupwRX3jhagJCNosND4n53a/PudzppNJhSstBfie7oxC
ROxI/4GkLG/hm0Ibm+o5ML06Hp4OfXKftBnR1z6lXJtcY/UpJs5L9Ziyh4LIbe51
ukEorC7fI5Wy8DBb/2hLOJeLEE0W+v6Sj+f0jL8+R7/csizXYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ0I9msz+x/tTDCudD6NHdskZw11MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy
ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYzFmNmNlN2UtMTFmMy0z
MTk3LWJmNjMtNDQ1MzdhZmRhM2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky
M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl
NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz
ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAATq6v2WppXTU186DnnCdQ04te4+QGaLOdoyfscmik3rbBLzpRESm7PC
JIgTeQlZWGp6ISIJuKlW8gZzI4b+UT76WZykjUwB2eUHN3wpon1cNtQ4G5agEvmh
UWSIehuCX5mCe1CkyFfXWGs+PYNVQo1vM1WGzwQTCERycRZ6BLUd2Ss2+SCjjzri
n9JVE7EDgm/JZbGqK8JOuyVA+37i7h1leEXuF2t4nHu3Hu2hIgvSS8Rb7Wm77z6G
9NQO/eFB2VDLG3xjftUOeJf3vMK0unFGCkgEpgGJsp1Emhb7bx+QZ543Fj67H70J
qKrgjMfzqFROORC8J4Bsz6cPgbDmbCs=
-----END CERTIFICATE-----
Generated at Tue Apr 29 23:37:32 2025 by rpki-client