Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/524ef244-3b54-3576-ac95-cc9390d8e648.roa
File: 524ef244-3b54-3576-ac95-cc9390d8e648.roa (raw, json)
Hash identifier: JHoujZbnvt1ZqYA/0VYihA3ijly1uqTwaI+iCTW6PtQ=
Subject key identifier: B3:DA:91:74:3A:3E:52:DC:B1:AD:9E:33:E1:02:C4:A6:A6:99:5B:72
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F432858496A19B1BFCC2F7F6C26FD9CE0
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/524ef244-3b54-3576-ac95-cc9390d8e648.roa
Signing time: Fri 04 Apr 2025 13:00:59 +0000
ROA not before: Fri 04 Apr 2025 13:00:59 +0000
ROA not after: Thu 03 Jul 2025 13:00:59 +0000
asID: 8069
IP address blocks: 20.33.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6a:19:b1:bf:cc:2f:7f:6c:26:fd:9c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Apr 4 13:00:59 2025 GMT
Not After : Jul 3 13:00:59 2025 GMT
Subject: CN=fba597cc-f163-4cea-9e55-16149acc49e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0a:f7:2b:6f:7c:b0:ab:fa:f1:dc:b7:c4:ba:
7b:40:4c:b4:53:a5:52:0c:70:7b:0c:c4:d8:f8:6e:
45:e0:65:e9:98:78:cf:a6:a5:62:61:d1:83:23:ef:
53:dd:ef:c7:46:1b:c0:54:f4:ac:a6:3d:be:54:8f:
70:5e:aa:6f:ae:66:04:48:04:62:57:86:44:52:22:
86:4a:cf:df:49:ed:0d:ed:e0:4d:67:e5:c5:f0:2b:
c8:1e:66:5d:a0:15:8f:72:17:4b:6b:7e:42:a4:db:
0f:06:56:ed:b1:5b:d3:31:a6:aa:19:b9:c3:f2:5e:
f7:72:69:24:56:00:99:d8:d8:6f:7a:bb:50:eb:aa:
7f:d8:01:82:cd:ca:4c:c4:05:ad:6f:69:be:45:7e:
54:c3:45:f8:fa:22:88:f7:66:b5:59:f9:23:9a:9c:
69:0a:be:8a:f4:c8:ca:c3:84:b9:4e:77:4e:94:eb:
1c:6c:b3:03:78:b0:60:dc:03:13:ae:e4:ff:09:47:
58:1c:ce:25:81:84:7c:3e:75:8a:d4:74:4d:f6:50:
17:3b:c1:18:78:b9:8c:ad:f1:ac:ae:af:03:90:fc:
d7:3e:a4:d2:19:c8:28:4b:c0:ab:e7:9c:35:b0:57:
5e:81:fe:38:41:5f:96:1a:13:11:b9:95:d8:19:3d:
98:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:DA:91:74:3A:3E:52:DC:B1:AD:9E:33:E1:02:C4:A6:A6:99:5B:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/524ef244-3b54-3576-ac95-cc9390d8e648.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.160.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:78:71:7b:4b:67:01:4c:35:14:3d:ba:28:74:e9:6a:20:d2:
c5:5c:67:05:a8:ab:44:57:3b:12:e5:21:2d:12:ce:f1:19:07:
4b:6e:5d:69:5f:0d:ae:1a:94:b5:81:d8:56:3e:5e:e2:25:c9:
a4:2a:b8:ce:f8:8f:e1:8f:6b:1d:7f:1f:98:0d:18:13:34:13:
89:58:52:00:44:21:76:61:2e:ae:de:a1:79:fc:59:b8:ff:4a:
7a:54:b1:81:4b:fe:3f:d8:a4:44:8b:b8:65:38:5e:95:78:ed:
72:16:52:2f:73:38:da:45:d2:56:10:e4:fb:a6:7a:4d:cc:6b:
7d:32:2b:1c:8b:62:2f:43:3f:56:49:40:bf:de:7f:aa:ff:5f:
58:13:bd:9f:05:0a:ec:60:dc:45:0e:3c:6d:73:cf:6d:25:c8:
eb:ed:a0:66:6e:5c:05:8f:b7:f3:b6:09:8c:c0:64:01:c8:f6:
d5:ee:78:8e:98:a2:fe:59:8e:03:60:29:3e:fd:0c:36:d1:49:
a5:c2:5f:1c:d3:20:be:8f:86:7c:a1:b7:4d:3e:88:63:5f:f2:
b4:03:d5:b2:c9:d8:56:e9:0a:b0:40:32:50:42:e7:bf:0d:47:
eb:57:85:53:1f:14:a9:fb:55:ea:74:64:f4:89:25:38:b9:2f:
0c:2f:06:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:30:17 2025 by rpki-client on console.sobornost.net