Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ede11131-09a5-3938-9e03-0196812fb57b.roa
File: ede11131-09a5-3938-9e03-0196812fb57b.roa (raw, json)
Hash identifier: DWW70cTWvrf2qM/QLvHl1jBLCgcv03kJLoDPgDA5+MM=
Subject key identifier: 26:8B:A2:D7:31:7A:75:E7:FF:3A:E3:6D:AE:F0:9A:A3:3A:CC:8B:20
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F432858497C3EF385E669293F71483240
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ede11131-09a5-3938-9e03-0196812fb57b.roa
Signing time: Fri 11 Apr 2025 01:00:48 +0000
ROA not before: Fri 11 Apr 2025 01:00:48 +0000
ROA not after: Thu 10 Jul 2025 01:00:48 +0000
asID: 8069
IP address blocks: 20.33.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:7c:3e:f3:85:e6:69:29:3f:71:48:32:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Apr 11 01:00:48 2025 GMT
Not After : Jul 10 01:00:48 2025 GMT
Subject: CN=4c7d35b3-154f-4422-866a-7bcbeb94d063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:b4:7f:d8:f2:de:3a:6f:fb:df:80:cc:0e:5b:
5b:26:af:8e:fc:dc:e1:9a:e8:ef:f5:2d:02:66:a7:
21:17:0d:4a:4a:bd:7d:c1:b7:46:34:12:d5:54:4c:
45:b0:8e:c2:99:53:3e:bf:9b:10:18:e5:93:53:8d:
a0:c5:e4:06:23:6f:aa:e1:26:57:99:03:36:26:8d:
21:7b:a2:80:73:41:f1:a6:e2:5b:49:3e:a1:fe:f7:
c9:7f:99:91:dd:9a:61:9d:d5:96:eb:be:51:c5:c2:
61:bf:25:98:9f:12:19:b5:34:70:2e:f5:cf:75:fb:
04:16:e9:91:44:4e:8e:63:c9:1f:12:96:32:42:4c:
84:51:dd:07:a5:cb:9d:85:10:d0:09:f5:be:ac:3c:
2f:6d:64:24:21:a2:95:34:ea:33:a9:9c:1a:4a:ea:
6b:86:ec:d3:fa:52:9a:96:7d:7d:6c:44:b3:db:04:
e5:20:1e:59:1c:57:86:f6:35:48:a6:60:01:e7:9a:
5a:11:bc:d0:1c:92:53:87:13:9f:76:57:73:69:28:
c6:ca:c2:06:94:1e:b6:98:98:14:54:a8:23:26:b9:
64:26:48:79:6d:71:55:c7:a5:95:36:8c:05:22:31:
18:c4:c8:5d:80:98:a0:d3:fe:e7:c5:f4:5f:2c:3f:
6d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:8B:A2:D7:31:7A:75:E7:FF:3A:E3:6D:AE:F0:9A:A3:3A:CC:8B:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ede11131-09a5-3938-9e03-0196812fb57b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.249.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:09:a4:72:48:a6:63:ea:71:14:70:bb:bd:7b:89:d1:2a:85:
80:5c:98:89:a5:58:2f:1b:be:f6:02:6f:a9:16:31:a1:d2:d2:
ae:60:ca:4d:2e:46:ef:25:53:57:dd:ba:03:b7:56:11:9c:55:
55:c6:fc:3e:ed:96:c7:4a:81:2c:5d:35:10:c6:31:6b:58:b1:
92:1e:38:be:06:82:c9:3e:ec:a3:ac:c6:20:f0:bf:dc:94:89:
1d:40:d8:6c:c3:60:9e:60:1b:cc:f8:c1:ca:99:c8:df:30:b9:
e7:5e:ef:8e:82:b3:80:31:0b:8f:63:ba:b2:e2:00:6f:cf:a6:
4e:c1:66:85:b6:7e:40:04:69:5b:d7:19:8e:9e:c4:05:8e:20:
a7:66:35:91:2c:be:32:8f:08:48:0c:a1:d4:9d:20:28:ff:f8:
81:d6:d6:da:77:e1:3f:19:8d:5c:22:8d:90:1a:c4:b0:42:aa:
2f:de:aa:a8:9e:7c:bc:8f:7f:20:dc:6f:49:66:5e:e7:fe:a2:
b9:04:18:c5:45:70:7b:57:70:2e:84:43:f7:f5:70:56:9e:64:
e6:a9:95:97:d8:52:62:e7:6f:b2:b2:4e:88:f5:68:9a:c1:1a:
d6:68:05:3f:a7:79:10:ee:ff:cf:d9:78:62:54:b5:04:5c:4e:
51:cb:99:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:30:20 2025 by rpki-client on console.sobornost.net