Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d720d3d4-588b-310b-9b5e-0b5376deda30.roa
File: d720d3d4-588b-310b-9b5e-0b5376deda30.roa (raw, json)
Hash identifier: clPs5dfrnc9qIUrya8iHhkeXnyI4UXo1+5P9mRvEa+s=
Subject key identifier: B5:78:04:0C:54:02:A1:D5:AD:16:C9:25:C9:56:25:28:9C:9E:87:8A
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F432858488AE0AAE63E4326DDA60CE280
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d720d3d4-588b-310b-9b5e-0b5376deda30.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 8069
IP address blocks: 20.33.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:aa:e6:3e:43:26:dd:a6:0c:e2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=050733a2-504c-4143-beed-c26212e11bc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:07:7d:eb:73:db:ee:4c:44:d8:bd:05:70:86:
48:36:22:02:0f:1c:b1:6a:76:be:1f:d0:c9:7d:b5:
e8:b8:5e:6f:24:85:67:24:16:80:a2:ca:b0:0f:6a:
bb:bc:76:ef:91:fa:9a:3f:15:3d:bd:91:6a:49:4c:
88:64:f9:80:51:c3:07:54:67:d9:20:77:43:b4:65:
dd:a2:e2:26:19:d1:8c:ef:ae:21:64:ee:0f:cf:fb:
47:bb:0b:59:e0:5d:84:a6:d1:ef:19:e7:91:98:88:
1e:d2:f8:20:cf:88:f7:fb:ee:aa:22:0e:55:bd:a0:
3b:fc:3b:da:86:af:56:8f:66:fb:bb:fe:32:b1:88:
9d:2a:6e:12:b9:a3:73:7f:d5:9b:d6:35:42:87:f0:
26:d3:93:da:99:14:ae:65:d3:b3:1b:73:41:03:07:
09:0d:28:fe:10:10:0c:90:e3:80:57:16:35:2d:13:
cf:b1:a4:6b:d7:5f:19:7f:a1:39:83:35:b5:92:2e:
74:ec:09:e8:ee:62:57:b5:f5:0f:ef:56:99:84:bf:
f8:23:9b:88:e5:17:31:96:bf:2f:4e:87:00:6e:00:
c9:c7:66:09:5d:7e:2a:a6:db:5b:1f:9e:d2:07:6a:
5d:f3:be:ea:c0:15:ce:d1:e2:d3:16:11:64:5c:58:
ad:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:78:04:0C:54:02:A1:D5:AD:16:C9:25:C9:56:25:28:9C:9E:87:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d720d3d4-588b-310b-9b5e-0b5376deda30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.163.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:44:80:e2:03:43:82:73:3b:20:f5:30:9b:69:2b:29:ab:cb:
6c:b7:72:da:5f:d7:1e:cb:70:af:e8:f0:88:ac:19:f6:d9:7e:
a9:b8:d6:93:ef:6d:de:4c:96:08:29:3b:bc:70:b4:a9:5d:fd:
33:0a:73:c6:a0:de:c3:54:e3:c0:2d:92:1e:16:b4:10:0b:ba:
40:cf:05:4e:68:fd:d0:bc:97:44:51:5f:b6:52:f4:c2:4b:fb:
c4:bf:9b:06:a5:c7:68:f3:4f:1c:34:24:36:93:73:54:9c:fb:
a9:21:ca:aa:ed:9c:fa:9f:51:e7:12:44:6a:75:b1:bd:9a:52:
ea:4d:eb:3c:9d:25:44:6a:e2:d3:ea:7e:f9:02:3f:62:a4:b2:
ce:2c:1f:11:44:55:5b:d0:04:56:ac:da:28:ce:14:e1:bc:63:
5b:07:51:46:55:eb:2a:5e:da:68:77:d2:7d:f0:07:4a:06:6b:
90:0f:48:8a:cc:e4:7c:53:3f:a7:01:0b:5a:30:fd:8b:11:0b:
84:91:47:cb:f9:09:15:31:df:2c:6d:2f:fe:8f:99:d1:de:83:
86:bd:df:b1:02:3d:4e:4c:86:dd:ea:5c:c7:fc:49:13:c2:97:
00:6b:5d:e2:02:80:ee:80:f6:00:3d:c7:34:ce:c6:df:a2:ee:
ef:c6:17:42
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiK4KrmPkMm3aYM4oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1
ZWVhMB4XDTI1MDExNDE0MDA1MVoXDTI1MDQxNDEzMDA1MVowLzEtMCsGA1UEAxMk
MDUwNzMzYTItNTA0Yy00MTQzLWJlZWQtYzI2MjEyZTExYmM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwd963Pb7kxE2L0FcIZINiICDxyxana+H9DJ
fbXouF5vJIVnJBaAosqwD2q7vHbvkfqaPxU9vZFqSUyIZPmAUcMHVGfZIHdDtGXd
ouImGdGM764hZO4Pz/tHuwtZ4F2EptHvGeeRmIge0vggz4j3++6qIg5VvaA7/Dva
hq9Wj2b7u/4ysYidKm4SuaNzf9Wb1jVCh/Am05PamRSuZdOzG3NBAwcJDSj+EBAM
kOOAVxY1LRPPsaRr118Zf6E5gzW1ki507Ano7mJXtfUP71aZhL/4I5uI5Rcxlr8v
TocAbgDJx2YJXX4qpttbH57SB2pd877qwBXO0eLTFhFkXFitUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLV4BAxUAqHVrRbJJclWJSicnoeKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy
ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZDcyMGQzZDQtNTg4Yi0z
MTBiLTliNWUtMGI1Mzc2ZGVkYTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky
M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl
NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz
ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE9EgOIDQ4JzOyD1MJtpKymry2y3ctpf1x7LcK/o8IisGfbZfqm41pPv
bd5MlggpO7xwtKld/TMKc8ag3sNU48Atkh4WtBALukDPBU5o/dC8l0RRX7ZS9MJL
+8S/mwalx2jzTxw0JDaTc1Sc+6khyqrtnPqfUecSRGp1sb2aUupN6zydJURq4tPq
fvkCP2Kkss4sHxFEVVvQBFas2ijOFOG8Y1sHUUZV6ype2mh30n3wB0oGa5APSIrM
5HxTP6cBC1ow/YsRC4SRR8v5CRUx3yxtL/6PmdHeg4a937ECPU5Mht3qXMf8SRPC
lwBrXeICgO6A9gA9xzTOxt+i7u/GF0I=
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:10:55 2025 by rpki-client