Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f0c78555-959f-3406-a67f-c1b8b75f63c0.roa
File: f0c78555-959f-3406-a67f-c1b8b75f63c0.roa (raw, json)
Hash identifier: wI8EubQjAOnnQfh/jtljF6jvEKEeRYZn8NeNapUcZRM=
Subject key identifier: 2B:85:DF:CA:DB:1F:61:69:37:42:2D:CC:E4:A0:61:54:AA:60:3C:07
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F432858486D906064FBAF327662A4B200
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f0c78555-959f-3406-a67f-c1b8b75f63c0.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 8069
IP address blocks: 20.157.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:60:64:fb:af:32:76:62:a4:b2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=17f49637-950b-44fb-9d76-ba06adfbd8cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:52:ec:12:96:20:23:f7:03:f4:45:b2:f5:62:
f1:1f:2d:ea:a0:fe:be:ce:e7:e6:b4:19:9e:f9:82:
3f:6a:b3:19:e5:9e:31:bd:e6:c1:47:5f:e6:ef:31:
e9:29:a3:7d:14:9f:cf:b2:24:a0:1e:c4:93:ca:6d:
48:4f:6c:27:2e:34:9a:fb:bd:38:ba:21:b7:83:5f:
7e:19:c6:66:c2:52:cd:9e:05:ab:76:3f:74:a0:72:
87:69:a6:9e:42:49:d6:1b:f1:98:3f:3d:bb:c6:23:
ad:79:60:6c:21:62:b9:3f:01:70:df:1c:77:78:ea:
6a:a6:f8:16:8a:79:30:51:a2:6a:57:89:e3:d1:ce:
8e:20:6b:da:7c:ce:a8:ff:92:76:8f:b5:9b:4d:10:
ac:da:9e:13:54:2d:8e:1b:43:a4:82:2a:02:f8:3e:
42:50:6b:03:f4:2b:9d:15:26:23:8f:bf:b7:e2:6d:
9a:c8:9a:58:b0:a4:51:92:78:f4:58:7c:88:2f:70:
6b:f5:37:79:ec:30:4b:eb:6e:9a:af:51:b9:66:c9:
fd:82:f0:80:d6:24:ef:63:18:48:5e:20:86:b7:d5:
77:90:f9:fe:5e:59:73:1a:73:ef:41:bb:5d:ba:57:
9f:32:14:95:13:26:28:a9:d2:96:2e:a5:d5:5e:41:
db:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:85:DF:CA:DB:1F:61:69:37:42:2D:CC:E4:A0:61:54:AA:60:3C:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f0c78555-959f-3406-a67f-c1b8b75f63c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.157.208.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:9a:63:65:ba:46:63:d7:72:b7:59:27:70:d8:c8:d3:df:c0:
74:4b:ee:26:31:ce:84:3e:37:13:4f:5d:a1:84:98:6f:33:d9:
7b:38:e8:68:aa:43:4b:9f:ed:0c:d6:56:fb:31:f2:50:49:5f:
09:23:21:59:5d:1c:bc:90:9a:ea:70:14:7f:2b:4e:ae:2e:94:
5f:69:53:67:87:ed:8c:52:6c:80:cb:3b:59:47:8b:be:bf:a5:
aa:55:09:b5:07:f6:cc:73:dc:17:a0:e4:09:50:f1:a9:c6:7f:
83:23:c8:15:d0:ce:69:c0:1d:63:29:c8:d3:6a:05:f9:41:78:
f2:90:d6:70:16:f0:b8:f9:16:b2:6d:36:40:ed:e3:bf:5d:48:
ec:93:f4:60:66:55:a7:83:f0:90:5d:39:52:00:55:0c:98:d0:
72:08:ba:38:0c:e1:60:a2:d5:dd:34:15:48:59:c6:68:87:76:
2f:e5:10:91:c3:5f:6f:80:dc:6a:50:b9:79:98:6b:25:14:e2:
b6:0c:75:80:9c:50:c5:fd:37:e0:70:eb:70:ec:94:1f:46:88:
77:10:2f:ee:d5:6f:61:eb:3b:d2:e3:9c:96:3d:71:c0:be:70:
24:45:82:6d:ea:b4:4c:76:5e:a7:e5:1b:0f:72:c6:c0:0a:68:
60:aa:17:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:21:07 2025 by rpki-client