Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/adce9981-1640-3807-863a-5100ced68525.roa
File: adce9981-1640-3807-863a-5100ced68525.roa (raw, json)
Hash identifier: kMNyI6jXdk+oxOZ3WjelKPvVdZGwh1NBmawus1m248o=
Subject key identifier: 60:AA:47:6E:67:AD:1F:0D:DF:F5:EE:84:93:85:B5:D0:A9:49:D9:70
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F432858497C3EF3DB0170856CA4C6C800
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/adce9981-1640-3807-863a-5100ced68525.roa
Signing time: Fri 11 Apr 2025 01:00:48 +0000
ROA not before: Fri 11 Apr 2025 01:00:48 +0000
ROA not after: Thu 10 Jul 2025 01:00:48 +0000
asID: 8069
IP address blocks: 20.33.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:7c:3e:f3:db:01:70:85:6c:a4:c6:c8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Apr 11 01:00:48 2025 GMT
Not After : Jul 10 01:00:48 2025 GMT
Subject: CN=bd6be1b4-2a6e-42d8-99af-cd626102348d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:be:b9:f1:c2:11:4f:06:32:a6:8b:2c:bb:a1:
43:1b:e9:26:aa:c8:58:52:45:5e:c2:a8:5e:5a:c7:
23:f3:73:6f:28:3c:98:ad:06:71:2a:5d:d2:0d:41:
10:d2:1c:44:c7:72:5f:ec:3f:fc:fc:72:05:ed:d2:
89:70:d8:39:6a:3a:c3:5f:12:79:55:02:d9:b8:38:
ae:a1:fa:22:55:64:b0:83:16:b8:59:d4:0e:4f:a3:
2f:7d:3b:a6:6a:d9:9c:65:b0:60:59:ca:70:a6:c6:
6e:a3:17:2a:a5:a0:da:80:b9:8a:65:24:ae:ca:b3:
91:08:3f:b5:9e:14:a6:da:bc:fa:d8:30:ec:75:63:
90:2f:80:a1:8f:03:26:63:f2:2f:31:0c:6b:06:1e:
50:23:f4:fa:f5:fa:31:21:60:cc:3d:34:94:78:d3:
0c:2c:55:e6:de:62:3c:59:1f:0a:d7:b0:d8:cb:37:
18:55:31:1d:71:e2:c8:ac:70:e4:86:53:44:29:86:
28:f2:73:30:6b:96:ed:65:13:fb:c6:2f:f9:1b:48:
52:46:aa:79:33:9f:1c:c0:09:d3:05:04:c0:cb:33:
6a:85:f5:e2:13:d9:1d:51:22:54:b6:2a:44:11:7f:
ed:6c:09:c0:41:d1:f3:a6:a5:58:21:80:ee:24:24:
66:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:AA:47:6E:67:AD:1F:0D:DF:F5:EE:84:93:85:B5:D0:A9:49:D9:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/adce9981-1640-3807-863a-5100ced68525.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.255.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:3c:1c:6b:b8:46:11:d9:34:1d:87:70:88:c9:5a:61:f0:6c:
ee:9b:21:bf:fd:64:9c:c1:0f:ae:3f:b0:76:f8:38:02:b0:d1:
fc:60:e4:65:18:2e:57:c0:65:02:1a:b0:77:bb:93:a6:d1:f4:
af:ae:40:9a:ef:b3:ac:41:d3:ec:50:45:a2:4f:07:ed:3f:ae:
d8:16:d5:84:a4:c4:57:f7:70:09:e0:fa:b0:f5:b8:86:58:93:
6d:2c:ad:36:a6:0d:15:5c:49:7b:cc:59:7e:f9:ae:f2:33:4d:
ea:d3:0e:7a:76:8f:47:59:dc:3a:15:b9:25:cd:4b:91:55:16:
fb:7d:7a:c0:1e:2a:c1:84:2a:69:1a:de:46:e2:79:54:97:e9:
ae:16:15:5d:73:7d:56:0e:19:57:6f:3f:40:d4:b9:fb:6e:e6:
09:82:6a:8c:d0:a7:c2:8a:b1:4d:b6:e3:8c:28:7c:62:9c:e9:
0b:aa:45:45:fb:ca:7d:5f:b2:54:cc:b4:d5:29:a2:9b:eb:34:
07:65:b8:0d:59:17:22:9f:e8:28:5f:a3:ef:d8:fb:e5:02:1b:
c6:3d:33:94:4d:2c:34:bf:58:cc:57:dc:68:82:8b:d0:ad:92:
28:40:a8:7f:a7:d2:7e:de:56:fa:96:38:2d:a2:28:02:72:75:
af:8b:01:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:30:19 2025 by rpki-client on console.sobornost.net