
Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e0a983e4-3360-3f43-af95-dfcb084edaa1.roa
File: e0a983e4-3360-3f43-af95-dfcb084edaa1.roa (raw, json)
Hash identifier: 7vmddLjFAPaeLHW/k1Aof6m/J53OS2Mzmbfz3htwOyQ=
Subject key identifier: 2B:88:87:E9:E9:2D:89:74:24:56:A4:AF:AF:80:AB:CE:1C:48:30:EB
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F43285848F22C25E98120AE46DDFD4FA0
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e0a983e4-3360-3f43-af95-dfcb084edaa1.roa
Signing time: Thu 20 Feb 2025 14:00:52 +0000
ROA not before: Thu 20 Feb 2025 14:00:52 +0000
ROA not after: Wed 21 May 2025 13:00:52 +0000
asID: 8069
IP address blocks: 20.33.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:2c:25:e9:81:20:ae:46:dd:fd:4f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Feb 20 14:00:52 2025 GMT
Not After : May 21 13:00:52 2025 GMT
Subject: CN=15ebb4f6-daf0-4b70-b204-c57f86145050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:75:ba:f5:21:75:19:d6:74:d0:62:73:80:3a:
ae:43:da:10:54:fe:a4:bd:64:20:c7:ec:c8:78:44:
d5:e4:87:7a:1e:1b:9d:67:a0:82:0e:85:72:55:65:
c9:ed:bd:62:f7:8b:72:14:3e:03:20:e7:54:62:e8:
62:0c:f9:ff:5b:fe:e4:85:1d:a0:60:9a:e2:c2:a0:
08:16:f5:85:a1:67:3e:8e:cb:a7:61:2c:c0:2b:0a:
c9:bf:a0:aa:c9:57:78:06:03:c5:e5:29:b8:6a:44:
50:e3:e9:87:67:57:ff:4d:60:a7:08:21:de:4c:26:
a3:a6:5e:08:40:e1:c7:97:7b:a8:a6:69:e0:c4:10:
b9:30:77:07:8a:cb:12:0c:b3:13:85:23:ba:8f:3d:
e4:6f:75:6c:b3:80:32:9d:10:90:ee:29:ad:48:8b:
f3:e7:21:d9:ac:0b:5b:1d:0a:d0:2b:12:8b:3b:71:
4f:58:e4:90:85:88:1e:05:de:3d:4b:17:7c:97:f7:
35:af:51:d4:ac:20:27:58:6a:2b:f1:4a:e3:ca:55:
65:e1:63:43:cb:2d:25:ed:74:53:36:35:88:80:27:
da:a3:45:2e:73:62:8b:94:bf:3b:0e:5d:7a:1d:5d:
a1:4c:6f:c2:ad:50:44:bc:99:33:5f:91:26:fb:7d:
55:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:88:87:E9:E9:2D:89:74:24:56:A4:AF:AF:80:AB:CE:1C:48:30:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e0a983e4-3360-3f43-af95-dfcb084edaa1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.140.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:3e:d1:90:3f:72:cd:0e:6b:ce:6c:ae:5c:c2:fc:2c:62:1f:
2c:53:4b:1e:b6:eb:ad:04:80:0b:1b:f5:cc:72:d7:76:50:54:
01:dc:1c:dc:2c:37:44:f4:cd:d5:ad:7c:32:ed:84:c1:14:4b:
23:cb:0c:e8:f8:f4:68:05:3d:3d:05:42:54:b0:bb:89:c8:71:
c8:48:9d:6b:68:77:47:d4:d6:72:45:35:c6:77:8e:94:47:d2:
39:ba:e9:a8:95:e7:06:20:80:04:56:61:55:f1:41:90:7d:09:
54:66:41:0d:12:bc:31:65:a7:92:2f:bc:d4:21:9d:05:b4:9e:
12:fd:65:06:9c:f9:8f:70:9d:12:9b:1f:22:52:44:ec:44:43:
bb:e3:e0:e1:b0:00:71:0c:46:67:16:12:cd:aa:dc:41:b4:e5:
6e:f0:83:33:c7:1e:01:3d:9a:bc:b8:77:39:0e:2b:a7:db:54:
77:08:a2:64:d0:df:02:f5:49:6e:73:43:ce:13:d5:d5:d9:61:
53:77:50:6a:53:33:46:d4:b5:d7:67:ea:da:5a:fd:95:27:ca:
14:e7:55:24:93:1c:b9:2c:09:15:d3:25:43:ff:bf:91:f9:b5:
95:f3:28:52:b4:b0:e1:e7:b2:a4:a1:95:b2:b9:ae:d2:46:5b:
c9:ed:93:f6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLCXpgSCuRt39T6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1
ZWVhMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk
MTVlYmI0ZjYtZGFmMC00YjcwLWIyMDQtYzU3Zjg2MTQ1MDUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHW69SF1GdZ00GJzgDquQ9oQVP6kvWQgx+zI
eETV5Id6HhudZ6CCDoVyVWXJ7b1i94tyFD4DIOdUYuhiDPn/W/7khR2gYJriwqAI
FvWFoWc+jsunYSzAKwrJv6CqyVd4BgPF5Sm4akRQ4+mHZ1f/TWCnCCHeTCajpl4I
QOHHl3uopmngxBC5MHcHissSDLMThSO6jz3kb3Vss4AynRCQ7imtSIvz5yHZrAtb
HQrQKxKLO3FPWOSQhYgeBd49Sxd8l/c1r1HUrCAnWGor8UrjylVl4WNDyy0l7XRT
NjWIgCfao0Uuc2KLlL87Dl16HV2hTG/CrVBEvJkzX5Em+31V0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCuIh+npLYl0JFakr6+Aq84cSDDrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy
ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZTBhOTgzZTQtMzM2MC0z
ZjQzLWFmOTUtZGZjYjA4NGVkYWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky
M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl
NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz
ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEQ+0ZA/cs0Oa85srlzC/CxiHyxTSx62660EgAsb9cxy13ZQVAHcHNws
N0T0zdWtfDLthMEUSyPLDOj49GgFPT0FQlSwu4nIcchInWtod0fU1nJFNcZ3jpRH
0jm66aiV5wYggARWYVXxQZB9CVRmQQ0SvDFlp5IvvNQhnQW0nhL9ZQac+Y9wnRKb
HyJSROxEQ7vj4OGwAHEMRmcWEs2q3EG05W7wgzPHHgE9mry4dzkOK6fbVHcIomTQ
3wL1SW5zQ84T1dXZYVN3UGpTM0bUtddn6tpa/ZUnyhTnVSSTHLksCRXTJUP/v5H5
tZXzKFK0sOHnsqShlbK5rtJGW8ntk/Y=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:30:19 2025 by rpki-client on console.sobornost.net