Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/85a501f7-6576-30eb-bae9-089a76033a22.roa
File: 85a501f7-6576-30eb-bae9-089a76033a22.roa (raw, json)
Hash identifier: b8EVw0ViCDrpwh8kMEG7RwdUrVbrMGiFjalnd9AjnjY=
Subject key identifier: 1F:EC:B3:B2:53:15:FF:5F:11:76:71:7F:71:EC:84:41:FC:1E:47:E0
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F432858493673BCDFD8B75B7EE1F87CC0
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/85a501f7-6576-30eb-bae9-089a76033a22.roa
Signing time: Mon 17 Mar 2025 01:00:37 +0000
ROA not before: Mon 17 Mar 2025 01:00:37 +0000
ROA not after: Sun 15 Jun 2025 01:00:37 +0000
asID: 8069
IP address blocks: 20.33.120.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:36:73:bc:df:d8:b7:5b:7e:e1:f8:7c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Mar 17 01:00:37 2025 GMT
Not After : Jun 15 01:00:37 2025 GMT
Subject: CN=d6fd0d00-906c-4b3e-ab3b-3f21b52161d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:9e:c2:b3:80:01:58:35:67:e0:64:b0:a3:9a:
b8:4a:68:7a:bd:36:26:e4:23:9a:57:11:6a:6c:2b:
43:5b:fb:57:fd:c6:4a:72:d8:4d:2a:d3:42:aa:0a:
9e:c1:a8:df:03:e5:9b:e4:34:38:13:43:c1:21:cf:
1c:19:0f:e6:d8:1c:c0:dd:1b:6f:32:4f:19:b7:b0:
c2:b7:23:87:d9:39:1b:89:90:b5:e5:ff:40:86:ea:
fb:3c:33:70:b7:21:c5:4f:58:d6:2a:de:b5:0c:7d:
d1:71:2b:12:da:93:30:9a:4c:c9:63:fe:3a:79:67:
c1:10:52:56:a4:7d:e3:d4:88:44:eb:34:6a:17:26:
04:be:d6:73:db:ed:b5:71:8f:3a:43:4a:b1:26:8d:
72:7b:52:5a:c4:1f:89:28:7d:94:49:f7:77:40:0a:
ce:73:8e:9f:26:3b:86:a6:bc:55:73:74:9b:fd:f1:
81:d8:2e:99:45:d5:b5:d5:ff:38:d9:b2:fe:96:0f:
2d:55:02:98:3d:c7:b4:d5:16:e8:30:d7:3e:b5:39:
57:8b:93:f4:50:b8:45:93:bc:83:8e:b2:6b:0d:68:
4d:eb:c0:dc:06:26:64:98:d6:58:9f:c2:53:3f:f0:
24:d3:be:15:e8:71:62:9f:f0:2e:94:e9:28:f5:51:
04:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:EC:B3:B2:53:15:FF:5F:11:76:71:7F:71:EC:84:41:FC:1E:47:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/85a501f7-6576-30eb-bae9-089a76033a22.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.120.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:57:94:a8:fb:51:11:3b:2e:20:c5:98:df:2a:07:8d:63:78:
75:1f:24:a2:89:f9:b0:a8:66:85:71:bf:82:f7:67:ec:c5:08:
3e:ee:5a:df:c6:af:af:ec:51:7a:dd:49:99:82:b8:22:1c:d9:
12:1e:a9:f0:c2:90:99:dd:d0:eb:5c:53:95:00:42:14:43:83:
c6:5e:6a:1a:7b:d1:86:d0:96:01:34:64:be:f7:99:60:cd:58:
7c:21:98:00:31:49:a0:eb:1b:48:d1:75:17:9b:02:b5:c6:2c:
67:a4:18:0a:c0:93:75:e4:ce:80:58:36:76:96:a0:9f:d1:82:
a2:f5:7a:62:16:6f:48:f5:f2:bc:c6:04:8f:e9:a4:47:96:ba:
20:3c:f4:f3:40:84:2f:33:c4:87:c2:0f:0d:c1:6e:a7:77:c3:
3e:4b:a3:2d:14:d0:06:41:c0:f5:1b:92:03:08:bb:e3:3c:2a:
4a:7f:be:9e:ab:3b:24:d1:04:00:c3:6d:2b:88:40:b7:9d:ee:
0d:9d:14:7b:f6:76:7d:60:06:75:03:4f:f5:d5:3f:11:56:1a:
44:b3:5b:76:63:33:c0:ef:2d:89:0c:71:ad:c8:d7:5e:20:2d:
4b:c8:40:59:90:55:55:17:48:e3:d1:08:2a:14:df:84:d6:f7:
6d:d4:87:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:30:18 2025 by rpki-client on console.sobornost.net