Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/14a380d8-92fd-3622-b799-436fce5ea07c.roa
File: 14a380d8-92fd-3622-b799-436fce5ea07c.roa (raw, json)
Hash identifier: QBF+OdPvDVW/zJJz5haOlaJk1eltE/pM0fTnoRPvGkE=
Subject key identifier: 57:A6:15:F1:C2:D0:C2:B9:D6:D0:54:A0:B9:EA:39:EB:CF:E8:D3:FC
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584944694E01137DD10CBC2B5B90
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/14a380d8-92fd-3622-b799-436fce5ea07c.roa
Signing time: Sat 22 Mar 2025 01:00:40 +0000
ROA not before: Sat 22 Mar 2025 01:00:40 +0000
ROA not after: Fri 20 Jun 2025 01:00:40 +0000
asID: 8069
IP address blocks: 20.33.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:44:69:4e:01:13:7d:d1:0c:bc:2b:5b:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Mar 22 01:00:40 2025 GMT
Not After : Jun 20 01:00:40 2025 GMT
Subject: CN=261269d8-ebb3-48e6-9ca8-82e667ad6eb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:69:69:1b:28:d0:e3:02:bf:bc:fb:0c:05:10:
11:7e:77:9a:fe:4d:10:e3:1f:d4:c5:f6:7e:a7:ce:
f2:c1:12:a1:5f:5f:66:4e:ee:b6:be:bf:f1:cc:01:
ad:55:a8:25:6d:2a:d8:a8:c5:93:35:67:9f:9d:87:
0b:a5:4d:50:30:c9:44:fc:39:15:0c:5f:f1:17:ec:
9e:f4:0f:5d:1b:4f:ec:a8:ca:c4:d5:5d:4d:5c:00:
64:ae:94:8f:d4:25:d0:32:8e:85:fa:9b:c1:24:d6:
2b:6b:bf:62:d1:da:cf:24:2e:16:25:dc:3a:38:c6:
c1:64:9d:d0:6c:06:4a:a6:26:c5:40:24:09:d7:5f:
a6:ef:74:da:fe:6d:b9:d2:e2:e0:11:22:69:dc:42:
e1:f2:b1:7b:aa:13:0f:89:3d:de:eb:09:59:c0:11:
fd:12:98:3f:8f:33:5c:34:31:67:b2:57:c0:2c:c7:
ef:c5:13:75:a9:52:39:b9:d5:c8:cf:0c:3e:2c:fb:
83:a0:f7:31:7e:35:01:55:f0:68:92:46:2d:da:6a:
2d:16:10:ff:52:8e:49:92:28:00:0c:2c:1b:a4:48:
d7:a7:b2:fe:ab:9c:9d:1c:a4:c5:c1:c1:39:ef:ac:
53:5c:bd:4b:1b:5a:7a:e6:4c:ca:e9:9e:5c:fc:20:
c6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A6:15:F1:C2:D0:C2:B9:D6:D0:54:A0:B9:EA:39:EB:CF:E8:D3:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/14a380d8-92fd-3622-b799-436fce5ea07c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.184.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:51:89:45:3e:f0:89:ec:f6:03:ae:d0:7e:cf:9c:e2:0b:f1:
6d:fe:44:3a:6e:e3:ec:01:45:75:37:58:dc:41:0f:c1:c2:96:
6c:72:30:09:30:d0:c9:1a:ce:47:91:9f:c5:80:d3:e8:44:20:
7f:02:62:c6:24:50:99:17:e5:93:b0:1d:d5:6c:05:b3:34:6a:
0c:7d:76:b8:3d:d0:f9:3b:c4:0d:d1:44:78:e8:2e:68:88:e5:
34:31:23:ff:20:a9:c9:58:c0:bd:f2:1a:fb:d3:b4:18:1a:c2:
fb:23:96:62:9a:66:28:4e:6d:ec:c4:8e:0e:80:3f:25:e5:0b:
e3:fb:cc:e4:c1:74:2a:8c:6c:cf:e6:24:94:a4:a2:06:b2:66:
99:f6:08:92:d9:5f:41:91:a7:5c:f0:22:13:b0:24:0a:3b:5b:
f4:9e:44:27:07:a5:bf:fe:3a:06:ad:02:0f:06:a7:d3:55:00:
97:9d:ea:9b:4a:ba:b0:86:69:90:b1:fd:2b:23:a7:15:8f:b8:
7f:e8:f2:51:a3:b5:72:c6:e1:d5:91:7b:f3:bd:de:16:6f:00:
b6:25:81:b6:4c:b0:98:cf:3f:a0:10:9c:9f:23:a0:e0:10:28:
af:26:50:b2:3c:87:9d:af:07:18:1b:44:34:bb:52:b0:dc:58:
27:a5:fe:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:30:16 2025 by rpki-client on console.sobornost.net