Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d851fbe8-225a-3c6f-8e78-4c283a99fd68.roa
File: d851fbe8-225a-3c6f-8e78-4c283a99fd68.roa (raw, json)
Hash identifier: XtPsfIG9WdKCPGd3HkfImy/XEtj8ATlsDoe0B5SsuwI=
Subject key identifier: CE:73:44:51:C0:57:CE:92:8F:66:02:24:CA:82:2D:FB:4A:DB:D7:17
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584800AFC5B53915962FF6B20460
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d851fbe8-225a-3c6f-8e78-4c283a99fd68.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 8069
IP address blocks: 20.33.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:c5:b5:39:15:96:2f:f6:b2:04:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=2acdcc53-e301-455c-98d6-d7f1254e31a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fd:5f:a7:3b:38:bc:e4:e3:b3:d6:20:e7:05:
75:d0:f5:8b:2c:b0:0a:15:e5:64:14:58:9f:32:2f:
ab:7b:ed:df:a6:0a:29:cb:1e:e6:74:fe:12:ee:dc:
78:39:f9:2b:27:bf:25:7b:f0:38:ea:e1:96:9c:70:
ee:d3:60:03:c4:3a:f8:ba:3a:0d:54:73:7c:d8:91:
ff:79:dd:95:b3:f9:8c:4b:97:d2:8e:81:9b:fe:13:
ea:93:53:df:61:81:fb:18:9a:33:a7:23:b0:85:50:
2b:68:e2:95:32:0a:72:7d:a9:40:0d:cb:7f:24:df:
b5:97:b7:88:a2:c0:2d:ac:7d:5d:fb:5c:70:e6:64:
58:14:cd:62:52:2e:3b:c9:e3:de:c0:7e:c4:55:a2:
cf:b0:c3:61:87:7b:2a:e8:0c:01:8b:8f:56:d5:91:
3c:8a:f7:7f:f6:ef:76:76:a3:3e:7e:ff:61:b1:55:
b6:d3:83:de:76:d9:5b:00:b3:76:75:96:5c:b8:b5:
90:e9:99:b8:d0:07:85:8c:89:3a:69:ba:ad:c3:24:
43:ee:62:6e:40:6a:e8:b6:07:36:a4:e5:2b:6b:36:
13:30:13:64:8f:07:a4:5b:57:63:6a:22:3d:2a:e9:
9c:54:a2:0a:ab:34:37:f0:ee:f0:8c:bb:28:72:41:
1f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:73:44:51:C0:57:CE:92:8F:66:02:24:CA:82:2D:FB:4A:DB:D7:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d851fbe8-225a-3c6f-8e78-4c283a99fd68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.245.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:0f:75:9c:31:f9:7e:6c:91:8b:3f:bc:58:55:df:e8:c3:0e:
32:73:a9:33:77:86:d8:49:61:c2:b0:39:8a:16:a2:97:df:de:
71:6b:04:2a:a9:79:e7:52:11:7b:3c:a4:3c:30:14:96:c6:ba:
3f:3b:e4:73:40:83:d4:a1:7c:b8:11:94:a5:b5:0e:09:db:8d:
c5:e1:8d:12:61:79:4a:c1:dc:2c:75:3a:41:f0:df:c1:55:5b:
39:bc:1d:44:cb:76:6f:24:5b:3a:ee:06:af:1c:7d:eb:7d:29:
60:e1:a7:1f:cb:ba:c2:16:21:93:fc:ad:1e:28:ad:47:3b:a8:
ab:cb:ee:28:51:32:47:59:62:14:7f:66:49:2b:e4:36:eb:d9:
55:4e:35:d5:05:f7:88:08:b0:f6:4a:34:49:e3:5b:3d:6e:75:
75:6a:3b:95:7b:a6:b5:5c:83:4a:2e:81:63:51:fa:0a:96:7b:
41:91:77:13:52:91:75:ef:2a:30:11:2a:ab:4b:49:7b:16:d3:
32:5f:18:14:98:88:b8:0b:be:af:17:6b:0f:a3:95:94:e1:84:
93:bd:81:4e:ec:09:79:5e:40:d7:fc:2d:51:73:97:eb:5a:36:
dc:d8:ce:e2:a1:69:d5:54:86:23:c9:aa:57:8a:80:87:c1:11:
ce:bb:c5:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:16:55 2025 by rpki-client