Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e1715101-8757-35c5-9b97-2c8a2220e65e.roa
File: e1715101-8757-35c5-9b97-2c8a2220e65e.roa (raw, json)
Hash identifier: 0j9eqtwlaHYO+S/G3iWAO1n1hePve9B1qnqjRos10ik=
Subject key identifier: 07:A1:28:9E:D8:08:F1:68:54:AE:48:DC:EB:14:0D:85:0D:A4:F3:3B
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F43285848116FF9F928C4F9E6B8BA3500
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e1715101-8757-35c5-9b97-2c8a2220e65e.roa
Signing time: Mon 02 Dec 2024 02:00:40 +0000
ROA not before: Mon 02 Dec 2024 02:00:40 +0000
ROA not after: Sun 02 Mar 2025 02:00:40 +0000
asID: 8069
IP address blocks: 20.33.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:11:6f:f9:f9:28:c4:f9:e6:b8:ba:35:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Dec 2 02:00:40 2024 GMT
Not After : Mar 2 02:00:40 2025 GMT
Subject: CN=940348de-feb3-4cdc-ad47-7c16ec3b909f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5d:9e:29:1c:cd:fd:be:d4:a1:3c:f1:56:e6:
e3:ff:51:db:0a:5e:ac:a3:07:aa:42:59:60:3c:27:
e0:08:ec:dc:c8:5d:82:dd:69:d5:e4:12:04:6f:ae:
c8:76:3b:96:e8:31:c3:f6:04:b7:7c:29:01:61:19:
4d:da:d7:ac:3f:e5:26:14:e3:3a:ca:9c:3b:88:24:
d0:82:74:d9:6f:8d:2d:d5:11:8b:ad:6e:be:f1:ea:
78:df:65:65:17:9d:42:8c:d6:12:c5:1b:e5:0d:de:
46:f1:be:2f:90:ee:b4:1e:dc:1e:bf:4c:d3:2e:0f:
56:41:8f:c4:79:e5:bd:f1:88:3a:49:ba:79:38:dc:
07:05:65:15:34:a9:6d:60:96:e5:a4:e4:2d:80:8f:
b6:a9:84:1f:6b:5e:63:38:72:60:25:c7:9a:a6:3c:
20:a1:b4:cb:28:8b:b1:ba:af:e8:e7:2d:9b:71:7b:
b5:8b:ba:a2:a4:9a:71:b1:0b:8b:54:85:52:0f:71:
e1:c8:6e:ac:3f:04:cf:1c:00:1e:49:7a:f2:03:c3:
42:d6:7f:e2:84:76:c3:f1:42:5a:3e:54:7b:0d:2f:
5e:8a:1f:86:8d:b4:e2:7c:7f:c3:eb:44:24:17:b1:
dc:b3:16:9f:c8:a7:bf:32:94:54:c1:5b:d0:ab:0a:
44:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A1:28:9E:D8:08:F1:68:54:AE:48:DC:EB:14:0D:85:0D:A4:F3:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e1715101-8757-35c5-9b97-2c8a2220e65e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.218.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:3e:46:8f:80:95:02:45:86:8c:1f:e4:25:48:87:20:bb:e9:
51:2d:ea:7c:d4:c1:3f:43:4e:11:89:db:f4:c5:36:a2:54:c1:
19:74:3d:33:13:e3:64:00:1d:2f:c6:0b:c6:f0:b9:55:0a:06:
28:9a:7d:26:40:7b:34:21:41:35:ec:4b:e9:b3:21:c9:11:d6:
60:66:d9:8a:8a:17:02:9f:9e:a0:db:cf:9f:11:76:42:07:52:
37:c1:5e:11:fb:8f:1f:76:f9:f0:c7:da:7e:7d:47:80:a5:ca:
32:18:db:db:99:39:35:ee:f7:1d:7e:9b:28:a0:0b:56:2d:24:
17:8e:e4:e3:c6:ec:88:0b:48:a5:ec:2c:1c:8f:e2:d7:f8:ad:
1f:8e:d7:af:07:72:5e:b1:c6:5d:19:0e:0f:c5:bd:34:b9:1f:
9b:c9:77:15:9b:49:41:cd:a1:01:3b:ce:82:29:e4:ba:df:6c:
04:d8:25:07:a7:60:71:88:9d:fa:c5:3e:94:b7:b4:90:4a:d2:
ee:6e:9c:f2:e7:4a:a4:3f:7a:df:27:20:11:18:63:00:7a:08:
9e:1f:e9:d2:d4:8c:35:8a:8a:0b:c7:f5:3b:05:a2:e3:43:49:
f3:11:86:4e:db:24:8c:e5:ac:5e:16:dd:a4:12:22:b8:b8:44:
29:fe:79:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:39:26 2025 by rpki-client