Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5c842db2-d012-3551-87ea-7b6b22348b27.roa
File: 5c842db2-d012-3551-87ea-7b6b22348b27.roa (raw, json)
Hash identifier: Uea6V6qn5WPnabVDYH0XxuZDtbDt1mN3BRgSYXuXKsQ=
Subject key identifier: 98:3E:B6:5D:97:21:1A:BA:E5:D9:A5:88:D4:CC:2C:C2:1F:32:5B:27
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F432858497C3EF2EFB77AAB56DF9DE4B0
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5c842db2-d012-3551-87ea-7b6b22348b27.roa
Signing time: Fri 11 Apr 2025 01:00:48 +0000
ROA not before: Fri 11 Apr 2025 01:00:48 +0000
ROA not after: Thu 10 Jul 2025 01:00:48 +0000
asID: 8069
IP address blocks: 20.33.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:7c:3e:f2:ef:b7:7a:ab:56:df:9d:e4:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Apr 11 01:00:48 2025 GMT
Not After : Jul 10 01:00:48 2025 GMT
Subject: CN=29d91a7b-3b22-4ee6-b3c0-63b985a0fe9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:6b:b8:c2:06:02:60:9f:ef:20:d5:74:15:42:
fd:f8:6b:3a:5d:cb:16:04:81:37:bf:c1:c4:77:6e:
2f:d7:31:28:1a:13:f5:6b:07:79:75:9a:00:e8:6c:
21:06:ca:5e:a9:61:5a:55:50:48:b4:c2:0c:c1:2a:
bd:b8:57:9a:ce:d5:e0:de:9d:70:11:9d:6b:e3:e2:
32:67:87:af:64:53:ab:a3:a5:e0:ee:bf:a5:f7:6f:
8f:2c:ed:43:40:74:f8:53:25:0a:e4:ad:65:ac:20:
a4:54:9b:01:00:35:6d:33:8f:33:f9:77:d1:1b:06:
be:fb:83:b6:e7:ee:73:6a:bb:06:a7:51:7a:28:63:
c3:04:25:07:28:4e:3c:d1:eb:a2:26:5d:68:d4:1f:
93:07:11:30:ca:31:9a:a7:35:c4:8f:06:f1:99:c5:
f6:07:26:0c:cd:d6:17:64:24:82:c5:ba:54:69:39:
da:78:f0:4e:b0:b3:a4:36:fd:34:56:8f:95:9e:2b:
6c:16:99:7e:3e:d8:2b:ef:38:8d:f5:f1:a1:54:f8:
ac:bc:03:44:82:73:7a:9c:ee:69:3c:6f:d3:56:14:
bd:c7:12:d5:62:5d:82:1a:f4:c8:2b:58:3d:94:2f:
1e:8b:2a:1f:d1:82:7f:62:b9:20:db:7b:00:52:7d:
64:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:3E:B6:5D:97:21:1A:BA:E5:D9:A5:88:D4:CC:2C:C2:1F:32:5B:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5c842db2-d012-3551-87ea-7b6b22348b27.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.239.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:05:87:37:e4:ca:85:48:1c:a2:99:2d:44:a2:c4:91:e2:6e:
2b:23:45:df:85:74:56:35:5d:bc:2f:92:f4:a9:4f:9b:ae:02:
24:ed:da:c5:36:90:0f:b1:ad:f9:ce:a2:55:5d:4f:00:b1:9b:
0d:d0:64:e3:c3:1e:32:ff:39:a0:51:78:25:78:8c:53:f4:d6:
19:a6:96:32:05:46:6c:62:83:b1:f9:12:ea:a6:fd:15:78:bb:
4c:41:cc:10:ea:76:72:67:5a:21:ac:e2:3b:af:36:34:a1:c1:
cb:c4:14:54:08:7d:3f:41:4e:95:2b:19:3b:56:c8:40:b5:c1:
a9:78:51:07:80:5b:25:5c:0a:41:2b:60:6a:ff:00:67:cc:c4:
25:80:01:bf:fb:a1:52:6a:5d:87:25:0d:ab:0f:f4:fc:1a:58:
a4:a3:b9:fc:3a:69:91:16:39:54:c3:0e:0b:ea:2f:51:6b:fa:
e1:21:19:16:d8:98:60:7b:04:2c:4c:30:8e:60:1f:67:4b:5f:
e8:46:04:4b:75:64:66:47:62:68:fa:9f:fc:e0:6e:eb:25:ce:
38:4f:9c:03:89:82:ab:b7:72:d1:3a:1f:a2:99:00:3e:6d:4a:
bd:31:aa:8f:36:97:18:8e:51:05:17:8f:80:d4:ab:d9:71:03:
dd:50:0b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:30:17 2025 by rpki-client on console.sobornost.net