Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5863ef84-56e8-36d7-a5a8-33b2de1eb16a.roa
File: 5863ef84-56e8-36d7-a5a8-33b2de1eb16a.roa (raw, json)
Hash identifier: 34RnTSQWvMTsU1xTU/vPtgsoggwjeW9uE7Gjfcxxdok=
Subject key identifier: B2:5A:8E:B8:80:13:35:07:4C:A3:82:C0:DE:87:1E:20:0A:F2:3D:E2
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F432858497C3EF2BA10AD3ED7D8A5B380
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5863ef84-56e8-36d7-a5a8-33b2de1eb16a.roa
Signing time: Fri 11 Apr 2025 01:00:48 +0000
ROA not before: Fri 11 Apr 2025 01:00:48 +0000
ROA not after: Thu 10 Jul 2025 01:00:48 +0000
asID: 8069
IP address blocks: 20.33.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:7c:3e:f2:ba:10:ad:3e:d7:d8:a5:b3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Apr 11 01:00:48 2025 GMT
Not After : Jul 10 01:00:48 2025 GMT
Subject: CN=3abaefbc-1df1-4035-9d51-886bbd35c4ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c9:a7:f9:68:a6:e5:b4:90:3c:ad:b6:30:dd:
16:8e:49:a0:8f:06:15:76:14:5d:69:9d:24:b2:50:
ce:b0:aa:29:6c:3c:f8:65:ad:2a:b9:ab:5e:87:9e:
ae:e2:2b:eb:cc:20:da:d6:6e:b5:b1:ca:fb:f9:2c:
ea:ba:d6:fe:5c:58:08:c0:87:dc:47:7d:36:c9:cb:
ec:b9:1c:03:a2:18:21:6c:26:5f:ee:85:fe:c8:d7:
d2:2c:60:58:c3:0e:a3:bc:c1:d9:ea:af:c0:ea:bd:
69:5a:df:bb:16:2d:4e:d5:ca:c8:60:fe:de:c2:7a:
5a:55:e1:69:c6:ed:43:26:c7:37:8c:12:84:f2:00:
3b:f9:9c:04:ac:e8:04:c3:ba:2d:4f:db:08:a5:97:
6d:0a:91:d1:40:f4:7c:c1:f3:c9:2a:cf:7a:4f:23:
c5:ba:86:81:de:3f:79:8f:e7:92:24:a3:15:4b:a2:
5b:df:19:30:7a:2c:01:58:24:a0:5f:dc:da:2c:60:
01:36:f6:72:51:01:27:c8:e2:7b:f2:69:b4:78:08:
aa:22:e8:df:39:ef:8f:04:04:17:81:9e:31:d9:a6:
fe:46:41:ba:44:73:ab:13:fb:92:dc:ad:b7:dd:29:
3f:c9:5c:be:b6:b3:22:cd:10:49:41:63:20:c2:99:
ab:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:5A:8E:B8:80:13:35:07:4C:A3:82:C0:DE:87:1E:20:0A:F2:3D:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5863ef84-56e8-36d7-a5a8-33b2de1eb16a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.230.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:cd:ec:d3:b2:83:29:c2:e2:8e:68:90:59:96:b2:ff:59:e4:
c1:1f:95:06:80:a1:27:73:a0:8e:ae:2f:48:5f:1c:47:e2:d4:
bc:88:0d:a5:1b:f1:e5:81:70:6e:05:c6:51:2d:f1:7f:b3:19:
1a:e7:b1:03:6b:19:da:0a:9d:89:96:23:53:03:87:9e:61:28:
41:85:67:8d:ac:d8:79:d3:84:49:0f:59:3d:1b:25:e6:5f:b6:
cf:88:d1:fa:61:0e:9d:1e:b4:36:92:c7:09:83:79:2e:45:fd:
14:35:29:cd:82:66:7c:fb:76:a3:8f:14:51:36:ac:8b:fb:6e:
46:4c:57:72:90:74:31:88:1a:5f:41:b1:f1:b5:14:36:f1:4a:
e2:3f:73:d6:f3:5a:9b:e0:5c:df:2f:5b:ff:14:d6:03:9a:c0:
eb:24:4c:bf:90:3d:27:7a:e6:a0:03:ea:92:a1:f5:91:bf:52:
99:48:da:b7:cc:c9:99:c9:9f:7c:dc:29:1e:4d:c6:c8:70:75:
11:41:c0:4f:01:a1:ff:c7:d2:ad:88:42:33:73:29:ef:2b:d2:
5d:77:d0:3d:e7:83:fc:70:19:e5:43:6e:af:07:4b:d4:33:80:
d6:cc:2a:0c:b8:3d:e1:6f:10:3d:0f:d0:25:dc:cf:c9:94:26:
74:67:3c:06
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl8PvK6EK0+19ils4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1
ZWVhMB4XDTI1MDQxMTAxMDA0OFoXDTI1MDcxMDAxMDA0OFowLzEtMCsGA1UEAxMk
M2FiYWVmYmMtMWRmMS00MDM1LTlkNTEtODg2YmJkMzVjNGFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsmn+Wim5bSQPK22MN0WjkmgjwYVdhRdaZ0k
slDOsKopbDz4Za0quateh56u4ivrzCDa1m61scr7+Szqutb+XFgIwIfcR302ycvs
uRwDohghbCZf7oX+yNfSLGBYww6jvMHZ6q/A6r1pWt+7Fi1O1crIYP7ewnpaVeFp
xu1DJsc3jBKE8gA7+ZwErOgEw7otT9sIpZdtCpHRQPR8wfPJKs96TyPFuoaB3j95
j+eSJKMVS6Jb3xkweiwBWCSgX9zaLGABNvZyUQEnyOJ78mm0eAiqIujfOe+PBAQX
gZ4x2ab+RkG6RHOrE/uS3K233Sk/yVy+trMizRBJQWMgwpmrdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLJajriAEzUHTKOCwN6HHiAK8j3iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy
ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNTg2M2VmODQtNTZlOC0z
NmQ3LWE1YTgtMzNiMmRlMWViMTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky
M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl
NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz
ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFjN7NOygynC4o5okFmWsv9Z5MEflQaAoSdzoI6uL0hfHEfi1LyIDaUb
8eWBcG4FxlEt8X+zGRrnsQNrGdoKnYmWI1MDh55hKEGFZ42s2HnThEkPWT0bJeZf
ts+I0fphDp0etDaSxwmDeS5F/RQ1Kc2CZnz7dqOPFFE2rIv7bkZMV3KQdDGIGl9B
sfG1FDbxSuI/c9bzWpvgXN8vW/8U1gOawOskTL+QPSd65qAD6pKh9ZG/UplI2rfM
yZnJn3zcKR5NxshwdRFBwE8Bof/H0q2IQjNzKe8r0l130D3ng/xwGeVDbq8HS9Qz
gNbMKgy4PeFvED0P0CXcz8mUJnRnPAY=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:30:17 2025 by rpki-client on console.sobornost.net