Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d4a0852e-de74-312e-9a78-d07763f519c2.roa
File: d4a0852e-de74-312e-9a78-d07763f519c2.roa (raw, json)
Hash identifier: 3rnDi+I0NpYQ/3BAuKWZ0LAJC5bIb3oX+puaEy1pLko=
Subject key identifier: D0:D7:17:32:7B:5E:AD:69:7F:BA:2D:8D:EC:FF:2B:48:63:2E:57:31
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F432858497C3EF320848716053E83C820
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d4a0852e-de74-312e-9a78-d07763f519c2.roa
Signing time: Fri 11 Apr 2025 01:00:48 +0000
ROA not before: Fri 11 Apr 2025 01:00:48 +0000
ROA not after: Thu 10 Jul 2025 01:00:48 +0000
asID: 8069
IP address blocks: 20.33.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:7c:3e:f3:20:84:87:16:05:3e:83:c8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Apr 11 01:00:48 2025 GMT
Not After : Jul 10 01:00:48 2025 GMT
Subject: CN=aab8f715-cb8e-4eb6-bc4a-6d7e1effe3f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:22:4e:5c:b1:46:29:cb:d9:a6:e4:a7:2d:cb:
20:75:44:1e:e4:a0:a0:33:db:8e:6e:32:23:b3:5f:
0e:e7:3e:89:8c:c8:0f:93:92:f5:60:29:20:a8:63:
99:f2:79:0e:fd:2a:eb:30:eb:70:9d:a0:bf:80:41:
a6:7d:31:7c:39:73:70:4d:8f:fe:71:4d:c9:f1:6f:
90:ee:cb:b2:bb:ac:2f:43:30:c3:a3:88:4e:bd:6c:
0e:14:4e:04:b2:a0:21:5a:e4:8f:91:4b:37:31:b8:
a9:24:7c:e6:ec:83:cf:55:7f:c8:c4:12:c6:68:b5:
f3:1b:d5:05:6e:ce:32:5c:07:55:b0:dc:40:62:f3:
83:f8:e0:20:c4:0f:43:c3:50:8a:d7:6d:57:d6:92:
8a:26:d1:5a:e3:df:20:8a:90:c9:cd:13:39:76:6f:
d6:a2:51:97:84:4f:6c:a6:e3:62:74:6b:62:ef:61:
e5:e7:a8:b0:af:9d:72:d9:19:d4:62:e9:06:80:46:
64:a9:04:80:fe:81:f7:1d:fb:6c:9e:b4:df:ac:a6:
b7:c4:9c:62:fe:32:02:36:9a:ce:40:83:82:d7:38:
a8:7d:8d:3d:04:f6:ce:e9:47:36:26:2a:b1:78:83:
ae:76:c7:bd:cc:80:bc:d8:7f:9e:f9:b1:97:50:bb:
4a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D7:17:32:7B:5E:AD:69:7F:BA:2D:8D:EC:FF:2B:48:63:2E:57:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d4a0852e-de74-312e-9a78-d07763f519c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.242.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:a0:92:3f:a5:66:55:4a:f7:a1:41:3f:ed:6d:af:cf:30:49:
3b:19:72:47:a3:95:8e:08:db:78:9b:b6:1f:17:62:16:1c:6f:
5c:d9:3e:82:b0:a3:4b:b3:13:b2:8d:c1:b9:37:8e:e5:7a:c7:
a4:9b:29:cf:7b:d6:ee:fb:a8:36:5f:8e:2f:9b:8e:b4:d7:2e:
09:2e:db:6d:5c:ed:a3:8b:4b:fe:69:0b:6c:0f:f8:e6:f2:be:
92:d2:97:fa:f4:db:ca:d8:ee:0d:35:6b:08:62:93:6d:e0:f6:
a8:90:2b:d5:6f:c8:3d:a4:d8:5f:31:8c:d5:1b:9f:e2:23:66:
46:b5:e7:da:37:74:ea:21:84:57:5c:47:5e:a4:d8:b4:4a:57:
d6:dd:f4:24:3e:fb:e6:1d:ae:40:fe:42:4b:37:b4:0b:be:2d:
98:3f:c5:69:ba:86:f7:50:62:5d:58:52:98:c6:f3:5b:96:2e:
89:77:4f:c9:f4:3a:da:7c:c8:64:0a:d5:56:12:bb:5a:19:14:
3f:72:df:74:1c:9f:f8:91:e8:2b:71:aa:a8:1d:31:31:85:7f:
ba:a8:6c:94:b8:f7:4c:59:ea:ab:cd:fe:3b:cd:de:29:14:d9:
5d:a2:59:92:1d:21:a6:0e:26:0c:c6:db:05:a8:65:4b:e8:22:
22:00:8b:6c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl8PvMghIcWBT6DyCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1
ZWVhMB4XDTI1MDQxMTAxMDA0OFoXDTI1MDcxMDAxMDA0OFowLzEtMCsGA1UEAxMk
YWFiOGY3MTUtY2I4ZS00ZWI2LWJjNGEtNmQ3ZTFlZmZlM2Y0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SJOXLFGKcvZpuSnLcsgdUQe5KCgM9uObjIj
s18O5z6JjMgPk5L1YCkgqGOZ8nkO/SrrMOtwnaC/gEGmfTF8OXNwTY/+cU3J8W+Q
7suyu6wvQzDDo4hOvWwOFE4EsqAhWuSPkUs3MbipJHzm7IPPVX/IxBLGaLXzG9UF
bs4yXAdVsNxAYvOD+OAgxA9Dw1CK121X1pKKJtFa498gipDJzRM5dm/WolGXhE9s
puNidGti72Hl56iwr51y2RnUYukGgEZkqQSA/oH3HftsnrTfrKa3xJxi/jICNprO
QIOC1ziofY09BPbO6Uc2JiqxeIOudse9zIC82H+e+bGXULtKIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNDXFzJ7Xq1pf7otjez/K0hjLlcxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy
ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZDRhMDg1MmUtZGU3NC0z
MTJlLTlhNzgtZDA3NzYzZjUxOWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky
M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl
NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz
ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACKgkj+lZlVK96FBP+1tr88wSTsZckejlY4I23ibth8XYhYcb1zZPoKw
o0uzE7KNwbk3juV6x6SbKc971u77qDZfji+bjrTXLgku221c7aOLS/5pC2wP+Oby
vpLSl/r028rY7g01awhik23g9qiQK9VvyD2k2F8xjNUbn+IjZka159o3dOohhFdc
R16k2LRKV9bd9CQ+++YdrkD+Qks3tAu+LZg/xWm6hvdQYl1YUpjG81uWLol3T8n0
Otp8yGQK1VYSu1oZFD9y33Qcn/iR6CtxqqgdMTGFf7qobJS490xZ6qvN/jvN3ikU
2V2iWZIdIaYOJgzG2wWoZUvoIiIAi2w=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:30:19 2025 by rpki-client on console.sobornost.net