Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d760a4d0-1f4e-3320-be56-0e534bf615df.roa
File: d760a4d0-1f4e-3320-be56-0e534bf615df.roa (raw, json)
Hash identifier: ZvPjkWZJxawhDH/cOHJpqMhNLDFrCtAAyhyJDt26n3c=
Subject key identifier: A9:72:C1:35:DC:E5:16:96:56:9F:B6:1F:8D:47:36:AA:1C:A9:3A:51
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584806450CBB874DF88AE9101800
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d760a4d0-1f4e-3320-be56-0e534bf615df.roa
Signing time: Thu 28 Nov 2024 02:00:38 +0000
ROA not before: Thu 28 Nov 2024 02:00:38 +0000
ROA not after: Wed 26 Feb 2025 02:00:38 +0000
asID: 8069
IP address blocks: 20.33.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:06:45:0c:bb:87:4d:f8:8a:e9:10:18:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Nov 28 02:00:38 2024 GMT
Not After : Feb 26 02:00:38 2025 GMT
Subject: CN=2080fcbd-c4b0-4896-aaa4-1b630d444ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cb:7e:d4:35:4a:3e:75:4f:ff:34:ee:4f:9e:
bc:ad:27:32:f6:bf:b7:44:26:fe:54:01:51:35:30:
d6:7b:f0:91:f0:11:37:a0:b0:3a:8d:c4:45:ce:28:
f5:20:9c:fa:ae:f2:a5:c7:fb:c8:ae:49:19:1f:dd:
6d:d0:8d:6f:ad:89:a6:d9:86:8a:53:ef:3a:c6:b0:
97:02:35:9b:17:f4:81:34:15:ca:ab:7a:9f:f7:fa:
96:d0:d6:ef:9d:58:71:6f:5c:be:a9:b4:f1:b4:04:
a7:3d:c2:82:0b:99:07:4b:ba:88:5f:85:8e:0f:41:
95:13:9b:08:29:ca:62:51:24:3c:fc:26:6e:4e:90:
95:bd:5c:07:03:73:2c:cd:2b:d1:7c:af:7e:6d:b1:
10:e9:c2:d5:72:90:5d:70:8a:59:42:67:2e:bf:d6:
20:79:9e:65:41:5e:bf:9d:b1:af:fa:55:25:5a:55:
bb:d9:fb:38:9d:38:50:81:38:e2:f1:f6:9d:44:f6:
73:fb:cd:93:7b:60:48:93:26:25:39:d1:66:31:f9:
7b:20:57:ab:bc:d7:dc:d1:d6:bf:bc:2b:73:41:a1:
3c:ba:ce:14:a6:c1:4a:f6:9a:b5:bd:f3:79:90:da:
f4:49:72:c8:23:60:8e:96:42:49:8a:e8:41:61:2e:
dd:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:72:C1:35:DC:E5:16:96:56:9F:B6:1F:8D:47:36:AA:1C:A9:3A:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d760a4d0-1f4e-3320-be56-0e534bf615df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:a1:fc:7c:57:b1:b9:ba:64:3e:6c:69:dd:7c:49:ae:74:b8:
6c:89:b7:f5:06:ca:53:df:d2:3a:56:9e:90:5f:71:d6:2e:71:
a6:e1:aa:d7:73:23:8b:e6:d4:14:df:0b:b4:6c:c0:2c:2e:40:
2e:ce:b4:81:d7:30:a2:0b:93:bf:db:0c:97:55:b7:35:f4:a4:
15:ee:77:c3:7a:cf:06:b3:07:5c:4a:84:4c:5a:7e:c6:c8:5f:
b8:92:f3:1e:99:14:ac:dc:b8:c0:6a:ab:7d:a6:34:e2:f6:6d:
46:ff:7a:8a:18:9e:4b:c2:a6:37:d9:50:43:76:0e:ae:1a:49:
0d:e0:50:3c:a3:f5:89:d5:cd:4a:95:fb:53:c5:a0:e1:3e:54:
49:a9:ef:93:ba:aa:d0:d5:cd:3c:e1:64:c5:b5:43:8f:f0:0a:
91:06:b1:11:bb:a6:f2:ef:a5:b9:5d:3c:a9:bc:05:ea:46:a8:
b8:cf:6b:bf:4a:7e:e0:49:00:c3:61:75:e4:6d:ec:36:a5:f0:
71:79:53:85:8e:12:13:34:8f:0e:f0:64:63:ba:11:13:8c:9d:
52:f1:fc:d1:11:fd:da:9b:15:fc:12:05:6a:7a:89:dc:95:45:
78:a7:9c:ad:ca:75:d7:ce:ea:a0:42:88:27:9e:29:2d:d1:2e:
48:8d:29:e7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgGRQy7h034iukQGAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1
ZWVhMB4XDTI0MTEyODAyMDAzOFoXDTI1MDIyNjAyMDAzOFowLzEtMCsGA1UEAxMk
MjA4MGZjYmQtYzRiMC00ODk2LWFhYTQtMWI2MzBkNDQ0Y2E3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMt+1DVKPnVP/zTuT568rScy9r+3RCb+VAFR
NTDWe/CR8BE3oLA6jcRFzij1IJz6rvKlx/vIrkkZH91t0I1vrYmm2YaKU+86xrCX
AjWbF/SBNBXKq3qf9/qW0NbvnVhxb1y+qbTxtASnPcKCC5kHS7qIX4WOD0GVE5sI
KcpiUSQ8/CZuTpCVvVwHA3MszSvRfK9+bbEQ6cLVcpBdcIpZQmcuv9YgeZ5lQV6/
nbGv+lUlWlW72fs4nThQgTji8fadRPZz+82Te2BIkyYlOdFmMfl7IFervNfc0da/
vCtzQaE8us4UpsFK9pq1vfN5kNr0SXLII2COlkJJiuhBYS7dwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKlywTXc5RaWVp+2H41HNqocqTpRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy
ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZDc2MGE0ZDAtMWY0ZS0z
MzIwLWJlNTYtMGU1MzRiZjYxNWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky
M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl
NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz
ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJWh/HxXsbm6ZD5sad18Sa50uGyJt/UGylPf0jpWnpBfcdYucabhqtdz
I4vm1BTfC7RswCwuQC7OtIHXMKILk7/bDJdVtzX0pBXud8N6zwazB1xKhExafsbI
X7iS8x6ZFKzcuMBqq32mNOL2bUb/eooYnkvCpjfZUEN2Dq4aSQ3gUDyj9YnVzUqV
+1PFoOE+VEmp75O6qtDVzTzhZMW1Q4/wCpEGsRG7pvLvpbldPKm8BepGqLjPa79K
fuBJAMNhdeRt7Dal8HF5U4WOEhM0jw7wZGO6EROMnVLx/NER/dqbFfwSBWp6idyV
RXinnK3KddfO6qBCiCeeKS3RLkiNKec=
-----END CERTIFICATE-----
Generated at Tue Apr 29 23:39:13 2025 by rpki-client