Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cb95dcb5-036c-3bfa-828a-cd844f666ac2.roa
File: cb95dcb5-036c-3bfa-828a-cd844f666ac2.roa (raw, json)
Hash identifier: vckf8aMFc/n0YjBSiQ/QGuLCo5J6wRnzm4e90lHuaGg=
Subject key identifier: D3:9E:B5:AC:CD:E9:5E:76:06:09:32:03:37:D5:D0:B1:1C:96:E8:DD
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F432858496A19B16F9AABBF349F57A880
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cb95dcb5-036c-3bfa-828a-cd844f666ac2.roa
Signing time: Fri 04 Apr 2025 13:00:59 +0000
ROA not before: Fri 04 Apr 2025 13:00:59 +0000
ROA not after: Thu 03 Jul 2025 13:00:59 +0000
asID: 8069
IP address blocks: 20.33.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6a:19:b1:6f:9a:ab:bf:34:9f:57:a8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Apr 4 13:00:59 2025 GMT
Not After : Jul 3 13:00:59 2025 GMT
Subject: CN=43218717-b90c-4856-8589-a270b5355ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:07:6a:69:0f:35:18:fa:6f:3a:b9:d1:38:94:
3c:cf:7b:6b:59:43:a2:88:b8:48:c1:80:e1:28:66:
b0:c0:dc:d6:1f:25:e6:df:f6:db:4f:79:76:f5:a1:
81:44:b0:59:fe:9f:7a:0e:3e:30:9f:17:ba:6f:35:
27:60:b1:b9:45:cd:e2:11:7e:f3:94:53:50:bd:03:
3b:91:e0:a7:d6:e1:66:67:d0:df:ec:d2:a3:ae:2f:
45:49:3e:00:6a:55:c8:ca:84:1a:8f:41:ec:3f:ae:
3b:7d:cf:b9:45:30:ac:ae:68:d2:87:ac:a7:e7:81:
75:88:70:60:98:bf:dd:ba:8e:76:12:27:ca:16:a6:
f5:a0:9a:97:a4:b1:91:60:81:39:c2:4e:c3:41:d3:
ff:4f:18:eb:fc:77:2a:32:f0:b6:f5:52:f3:90:63:
2f:74:ec:ea:e3:6a:2d:24:b5:53:71:e0:5f:1b:e9:
c4:36:aa:8d:bb:3b:3c:ab:79:0f:23:8d:0c:04:69:
87:b7:f4:00:5b:dc:96:b4:f1:f0:3c:f6:80:36:ba:
13:9c:3e:a3:bd:05:95:bd:5a:97:0d:c0:5d:ba:68:
d4:01:16:0e:7c:ad:e2:04:68:56:d9:47:c6:c6:31:
ee:34:92:54:1b:8f:6e:a8:7d:7c:ad:16:5c:84:64:
4d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:9E:B5:AC:CD:E9:5E:76:06:09:32:03:37:D5:D0:B1:1C:96:E8:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cb95dcb5-036c-3bfa-828a-cd844f666ac2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.148.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:f9:d8:ab:06:fa:e3:66:7d:91:ca:bd:4b:45:6d:51:09:3c:
ba:eb:2a:f1:52:4b:8a:10:2c:5f:58:e4:b6:70:08:34:a4:1c:
58:f9:56:b9:57:c0:4f:e1:06:09:63:e0:1e:7c:e0:71:a8:2d:
23:2b:06:38:02:e8:05:20:ee:b9:ef:2e:fc:3a:4d:d5:9b:1b:
69:fe:b3:f1:de:39:c6:af:98:e3:c6:2b:9a:5a:c5:be:84:01:
ca:75:89:77:84:e1:fd:eb:f2:dc:95:cd:84:f8:2d:c8:b9:4b:
04:00:96:c6:21:06:5d:70:a9:b7:a9:47:20:6f:52:f6:73:d9:
8a:b7:71:ad:ec:50:c3:60:9c:ae:f4:8b:90:90:00:8d:68:f5:
1c:51:a5:bc:68:43:7d:6e:ec:d1:50:73:9e:56:da:00:25:9a:
c4:7d:16:15:fb:b7:53:6a:3c:3f:9a:88:bc:a8:5b:30:2c:0c:
5c:36:cd:bf:b6:f2:b9:f2:0f:d6:3a:f6:ed:58:b7:37:68:95:
36:a3:53:d0:e5:a1:2f:d2:6c:c7:d8:2b:70:2b:d7:65:0f:f9:
e2:71:d5:6a:79:4e:8e:69:72:02:7c:a4:97:8f:57:fc:58:ca:
56:8c:92:f8:65:c3:42:f9:bd:23:c0:94:0b:9f:9e:da:f7:1c:
9c:f8:f4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:30:19 2025 by rpki-client on console.sobornost.net