Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e794736c-e567-3e33-9613-3ca6fdffe5e0.roa
File: e794736c-e567-3e33-9613-3ca6fdffe5e0.roa (raw, json)
Hash identifier: ue+EH/0mkZQ1uaaOkTHK2aZL09dPuW2tagT97ILFdII=
Subject key identifier: CD:54:7D:DD:FB:DC:23:46:FC:CA:DC:82:59:37:5D:48:C8:16:B8:B1
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F432858497C3EF44061F9F2A589599440
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e794736c-e567-3e33-9613-3ca6fdffe5e0.roa
Signing time: Fri 11 Apr 2025 01:00:48 +0000
ROA not before: Fri 11 Apr 2025 01:00:48 +0000
ROA not after: Thu 10 Jul 2025 01:00:48 +0000
asID: 8069
IP address blocks: 20.33.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:7c:3e:f4:40:61:f9:f2:a5:89:59:94:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Apr 11 01:00:48 2025 GMT
Not After : Jul 10 01:00:48 2025 GMT
Subject: CN=28916b95-1aa9-4350-98da-8a77825ea334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:25:58:60:2c:8e:39:42:02:6f:c1:20:9c:90:
43:63:19:39:af:24:05:d0:59:97:93:90:c7:48:2a:
e5:85:16:01:eb:6c:1c:64:a0:91:cd:cd:c3:46:fc:
d7:bc:80:91:2d:6c:1c:18:ca:c5:2e:ce:21:30:3a:
1a:a7:30:0a:0e:bb:e7:56:65:20:cd:85:52:fc:5d:
93:ab:d4:5a:b5:79:22:ea:56:ad:f5:22:21:22:f8:
b2:59:df:e4:bf:84:a2:c0:a5:f3:43:aa:e4:36:d7:
66:6b:db:60:18:6a:8d:3c:8f:43:5b:b7:df:ae:18:
95:14:9f:3a:63:90:aa:63:5a:16:c8:a6:f2:36:98:
a0:4b:90:19:2a:08:07:07:bc:99:42:11:c3:60:c4:
bf:c4:13:82:aa:19:79:a3:70:35:1c:67:ab:a3:81:
83:fb:4c:6b:98:98:1a:02:15:a0:be:76:9b:af:7d:
e2:96:2f:72:98:13:32:b6:36:ce:46:ef:58:92:0e:
0a:dc:f6:bd:ee:5d:84:2d:8f:89:cc:7a:6e:5d:81:
9d:d3:ee:af:64:de:51:de:a9:8b:f3:d9:d2:36:8f:
b8:ba:25:83:77:e1:47:28:8a:60:da:08:38:bf:1e:
78:c0:92:18:1c:39:c3:89:7c:f6:21:c2:d2:b8:d9:
fb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:54:7D:DD:FB:DC:23:46:FC:CA:DC:82:59:37:5D:48:C8:16:B8:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e794736c-e567-3e33-9613-3ca6fdffe5e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.92.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:e9:c2:e7:0a:a7:a1:f7:0d:16:64:07:05:47:a8:81:0e:0d:
4f:b1:aa:3c:44:98:f6:03:dd:aa:01:f4:98:ab:a6:a2:08:f7:
d2:83:5c:8e:6c:50:36:3b:e7:a5:d9:4d:d9:3a:23:ef:10:f5:
76:39:35:f5:78:60:61:e1:66:9a:bc:15:3e:01:c5:ff:ec:4c:
9b:b9:23:4b:42:43:43:87:72:88:82:3a:c4:d3:dc:61:ec:e8:
36:39:c1:b5:e3:66:58:64:55:e2:b1:0b:8b:35:0d:e2:4d:29:
20:01:87:fe:b1:ef:26:b2:f9:84:aa:c4:c1:41:c0:7e:2d:82:
f5:a2:81:81:61:33:de:8c:87:2f:d7:29:da:25:16:75:a8:ec:
18:55:86:1f:68:e7:07:06:b1:a9:35:ee:96:89:cc:86:d2:4f:
eb:a8:25:67:c6:1b:c8:ec:02:1d:58:65:bd:f8:4c:9c:4a:17:
99:11:39:1f:bd:8d:80:43:8f:b2:70:26:2a:e7:9c:ab:51:36:
54:59:d9:7a:e9:e7:a7:ef:3b:c0:98:77:4a:f3:59:d7:01:13:
92:a0:94:54:25:06:2f:12:74:76:ec:56:fb:d7:1e:fb:2f:38:
98:77:47:7e:57:ad:5f:f6:c7:4e:9c:31:a1:04:1f:54:60:57:
08:70:3d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:30:19 2025 by rpki-client on console.sobornost.net