Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d788fc99-fa38-3c04-8fc4-7eb6bb125dc2.roa
File: d788fc99-fa38-3c04-8fc4-7eb6bb125dc2.roa (raw, json)
Hash identifier: SDPf2wqc+Qrxx7g+lb+quyJD83mLbUOSq6lYFFdUSz8=
Subject key identifier: 90:B9:F3:6E:F2:73:C4:5C:33:02:65:10:02:77:57:7D:06:48:87:4E
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F432858493AA3E63418DD7C4D8B29EFE0
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d788fc99-fa38-3c04-8fc4-7eb6bb125dc2.roa
Signing time: Tue 18 Mar 2025 13:00:50 +0000
ROA not before: Tue 18 Mar 2025 13:00:50 +0000
ROA not after: Mon 16 Jun 2025 13:00:50 +0000
asID: 8069
IP address blocks: 20.33.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3a:a3:e6:34:18:dd:7c:4d:8b:29:ef:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Mar 18 13:00:50 2025 GMT
Not After : Jun 16 13:00:50 2025 GMT
Subject: CN=94b9a128-47c8-42cd-8ae3-01963022e2db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b9:56:8b:cc:c4:44:fd:d9:6b:aa:23:d2:59:
98:a4:5e:27:e8:55:3f:2e:29:05:bd:71:bb:63:bb:
c2:81:fd:9c:43:50:14:e6:3c:3d:26:82:a5:6f:7c:
0d:50:4c:f6:b0:c0:5f:f9:45:4d:1a:85:1c:2b:52:
18:48:6f:e7:76:c3:81:b0:f0:05:a5:fc:4e:ae:e8:
78:37:5f:08:45:27:08:6e:a3:5f:a2:cc:4b:5e:27:
76:a0:87:74:69:da:20:27:74:b5:5c:e3:0f:f3:49:
48:3a:54:99:f1:c2:4b:38:bb:5b:19:dc:4b:c2:ef:
99:8d:24:dc:b2:ac:8c:fa:11:85:5e:42:3c:b6:03:
15:e7:2d:a5:d6:e9:4b:b5:25:9f:2f:c1:34:96:a6:
df:72:e7:42:73:02:25:8d:5c:d1:70:ad:70:de:a2:
5f:93:38:30:80:54:76:68:aa:e2:fc:1f:1c:dd:54:
9e:d1:c5:ae:52:47:b9:16:17:ec:83:60:68:3d:fa:
7c:d4:88:ae:0a:76:76:2c:fd:e2:bb:b1:f2:22:ac:
64:0b:f6:de:3a:1d:bf:a8:5b:06:70:40:75:34:aa:
4e:eb:22:df:f2:41:b2:47:9d:91:e8:90:a8:4a:7e:
46:98:c5:00:17:1a:ce:0a:2d:5e:4d:3f:f3:a8:dd:
2b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B9:F3:6E:F2:73:C4:5C:33:02:65:10:02:77:57:7D:06:48:87:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d788fc99-fa38-3c04-8fc4-7eb6bb125dc2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.112.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:08:60:4e:4b:ea:4c:be:9f:77:19:ed:8a:d3:09:cb:fb:63:
9d:fd:e8:f8:a8:72:59:59:14:24:93:6e:68:b7:24:fd:29:38:
ae:6a:41:49:e2:ca:25:df:5e:8e:ed:45:0d:5b:ce:4b:b7:46:
fe:d8:ef:26:7c:4b:1f:35:ca:b7:5a:8b:f9:e7:90:52:7f:22:
53:53:9d:db:58:45:52:9f:b2:ad:1a:a1:c1:6e:97:2a:6b:bd:
0e:7a:74:f7:9c:55:cf:07:39:f5:8f:b4:53:36:3f:3b:7e:63:
82:3d:b6:be:d9:3b:f4:f9:3c:fd:0c:c5:41:28:d5:36:a7:6f:
29:c5:31:38:84:c6:75:0f:2c:f2:05:de:6f:7e:19:f5:bc:8c:
2a:f2:b2:49:0b:31:51:2d:63:8b:56:b4:cd:02:97:4d:09:e6:
db:8c:98:21:8f:f3:ac:77:f9:d9:b1:e9:f9:ea:a0:9e:63:dc:
12:e6:0c:e7:3b:14:b7:16:8c:b5:13:cf:d8:69:f3:e3:ca:82:
e0:1f:7c:3f:53:de:06:70:09:2e:02:b9:96:32:38:54:e6:b5:
bf:a4:1c:75:dd:61:1b:7e:38:a6:67:76:08:37:99:ec:26:27:
65:41:c4:4e:eb:71:9b:66:70:72:87:0d:18:26:ba:15:b1:4e:
09:64:47:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:30:19 2025 by rpki-client on console.sobornost.net