Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cd786728-d6f2-3414-abfc-112e58503c9a.roa
File: cd786728-d6f2-3414-abfc-112e58503c9a.roa (raw, json)
Hash identifier: ygjiMknfhW/P/8PGzVgmJeeEnqa+15mrZPJy6vchN40=
Subject key identifier: 20:50:93:EA:AA:C6:B5:ED:62:60:DC:A2:FB:A7:F3:13:6A:44:42:5F
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584855D5A354FBCB9AAC5C2C6BE0
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cd786728-d6f2-3414-abfc-112e58503c9a.roa
Signing time: Thu 26 Dec 2024 14:00:52 +0000
ROA not before: Thu 26 Dec 2024 14:00:52 +0000
ROA not after: Wed 26 Mar 2025 13:00:52 +0000
asID: 8069
IP address blocks: 20.157.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:d5:a3:54:fb:cb:9a:ac:5c:2c:6b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Dec 26 14:00:52 2024 GMT
Not After : Mar 26 13:00:52 2025 GMT
Subject: CN=1b928c88-9324-47a7-994b-ea95b45ad7c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:97:ed:1f:bc:a0:d2:1c:4f:40:84:11:6f:1c:
e9:9d:b5:ae:aa:46:2a:c9:ca:a5:a2:f7:4e:67:fe:
1b:1a:3c:20:26:a1:1e:b1:71:c0:39:bb:b0:d3:99:
75:df:5e:48:88:07:21:12:53:f1:df:a8:04:ce:3d:
97:4f:5c:a1:3f:80:8f:68:12:fd:4d:f0:be:cc:2e:
da:90:29:ff:59:81:34:5f:3e:78:fa:6b:ee:6f:33:
70:a4:7b:d0:00:68:4d:f7:73:af:23:a6:31:4e:4d:
fc:e3:7c:91:ee:07:86:2e:79:8a:a4:35:6a:2e:85:
a7:f9:8c:cf:a8:7f:c5:ad:b5:14:ab:b4:05:fd:66:
65:fa:12:f9:1f:80:6c:02:8d:5d:cb:33:61:43:3e:
89:96:25:3c:4b:82:24:29:9a:8a:a0:f4:ea:5c:7a:
01:42:c1:7d:c7:aa:bd:c8:fa:c8:fe:a5:82:49:d5:
be:31:c3:43:01:31:8b:c2:29:93:65:bd:39:b2:49:
fe:38:b4:ca:ed:7d:b0:91:cc:15:3f:40:1a:a5:40:
6a:f7:71:1e:03:ee:c5:90:42:fc:89:20:fd:5c:0b:
5f:b0:68:91:da:db:0d:57:95:9a:a7:97:e4:6b:2a:
88:53:d9:9b:86:96:b6:e6:9c:af:02:e7:a1:05:01:
4e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:50:93:EA:AA:C6:B5:ED:62:60:DC:A2:FB:A7:F3:13:6A:44:42:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cd786728-d6f2-3414-abfc-112e58503c9a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.157.207.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:51:b6:fe:e3:65:17:6b:34:82:4c:88:c7:d3:98:6a:f1:a4:
a4:a4:86:b6:bb:6f:b4:e7:77:dc:3b:17:2c:52:c8:ff:f0:40:
2a:e2:e8:af:e9:63:5b:2b:67:89:ed:b5:ae:0c:92:f2:e5:ba:
47:e6:f1:bd:73:f4:7f:e6:f4:fa:f0:c0:99:e9:11:07:ce:3b:
5e:e9:30:4a:9c:41:81:57:41:b6:f9:06:89:89:48:6b:0a:15:
4b:95:b7:5a:6c:e5:f9:63:10:25:f8:4e:a7:fe:16:70:9f:bc:
6b:aa:bd:1f:5b:63:c5:d2:e6:8f:d6:4d:ab:b2:dd:18:d8:48:
20:50:84:e0:e3:9e:c7:48:f3:be:6c:16:07:94:08:a5:70:b2:
cf:bc:0b:02:06:7f:a1:d0:9c:94:73:1c:1d:37:90:d9:2b:04:
97:c4:e6:24:bf:e9:5f:fe:4f:94:52:d1:bf:bb:ec:74:10:89:
27:2b:4a:eb:8c:43:d9:ce:cd:b6:bd:c3:c3:6b:53:41:7e:91:
b8:43:45:79:18:e0:ed:86:c3:2f:2b:f7:42:05:1a:62:b6:7c:
73:10:5c:77:06:67:51:57:ae:5e:4d:99:c2:12:91:c0:21:a5:
7c:69:16:be:fb:3a:8d:d6:de:c5:2d:d2:0c:e5:68:78:ad:a8:
98:ca:24:73
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhV1aNU+8uarFwsa+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1
ZWVhMB4XDTI0MTIyNjE0MDA1MloXDTI1MDMyNjEzMDA1MlowLzEtMCsGA1UEAxMk
MWI5MjhjODgtOTMyNC00N2E3LTk5NGItZWE5NWI0NWFkN2M3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJftH7yg0hxPQIQRbxzpnbWuqkYqycqlovdO
Z/4bGjwgJqEesXHAObuw05l1315IiAchElPx36gEzj2XT1yhP4CPaBL9TfC+zC7a
kCn/WYE0Xz54+mvubzNwpHvQAGhN93OvI6YxTk3843yR7geGLnmKpDVqLoWn+YzP
qH/FrbUUq7QF/WZl+hL5H4BsAo1dyzNhQz6JliU8S4IkKZqKoPTqXHoBQsF9x6q9
yPrI/qWCSdW+McNDATGLwimTZb05skn+OLTK7X2wkcwVP0AapUBq93EeA+7FkEL8
iSD9XAtfsGiR2tsNV5Wap5fkayqIU9mbhpa25pyvAuehBQFOBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCBQk+qqxrXtYmDcovun8xNqREJfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy
ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvY2Q3ODY3MjgtZDZmMi0z
NDE0LWFiZmMtMTEyZTU4NTAzYzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky
M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl
NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz
ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ3PMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKBRtv7jZRdrNIJMiMfTmGrxpKSkhra7b7Tnd9w7FyxSyP/wQCri6K/p
Y1srZ4ntta4MkvLlukfm8b1z9H/m9PrwwJnpEQfOO17pMEqcQYFXQbb5BomJSGsK
FUuVt1ps5fljECX4Tqf+FnCfvGuqvR9bY8XS5o/WTauy3RjYSCBQhODjnsdI875s
FgeUCKVwss+8CwIGf6HQnJRzHB03kNkrBJfE5iS/6V/+T5RS0b+77HQQiScrSuuM
Q9nOzba9w8NrU0F+kbhDRXkY4O2Gwy8r90IFGmK2fHMQXHcGZ1FXrl5NmcISkcAh
pXxpFr77Oo3W3sUt0gzlaHitqJjKJHM=
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:19:11 2025 by rpki-client