Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f23f5204-3dae-3cd7-a838-dc6e9e0e0684.roa
File: f23f5204-3dae-3cd7-a838-dc6e9e0e0684.roa (raw, json)
Hash identifier: VHeYj3XmP4cXQHqqAjmcgt5IzK3zVRvmOYj8Zug1vgM=
Subject key identifier: 13:66:BA:C5:1D:3B:9B:5B:28:E4:56:BE:3F:FA:28:9E:E4:4C:1A:BA
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F432858497C3EF3126EB2FFA3DE292AC0
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f23f5204-3dae-3cd7-a838-dc6e9e0e0684.roa
Signing time: Fri 11 Apr 2025 01:00:48 +0000
ROA not before: Fri 11 Apr 2025 01:00:48 +0000
ROA not after: Thu 10 Jul 2025 01:00:48 +0000
asID: 8069
IP address blocks: 20.33.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:7c:3e:f3:12:6e:b2:ff:a3:de:29:2a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Apr 11 01:00:48 2025 GMT
Not After : Jul 10 01:00:48 2025 GMT
Subject: CN=e99555f1-8e0f-4540-97ac-e3d000d9d9d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e1:f2:1b:c8:94:97:5c:35:43:94:75:35:26:
75:b0:f9:19:04:c4:ea:ec:35:ba:96:63:6b:a3:21:
dd:6b:8c:6a:be:05:2b:89:ee:77:d5:9e:a3:4d:22:
27:2b:f1:27:08:56:7a:9a:66:7b:0a:fc:21:2e:2b:
06:d9:36:4b:1e:8d:0b:dc:f2:31:91:6f:6a:6d:c6:
45:9c:b1:1f:73:b7:d3:4b:55:3d:48:ed:c4:e8:bc:
50:7b:4a:3f:4a:49:93:d6:ce:bc:b2:ba:b9:f2:18:
9a:6a:84:e2:56:15:52:d4:ee:83:76:46:6a:58:a8:
6c:80:a5:c5:50:06:0d:cf:86:ac:5c:99:58:6e:ab:
91:fb:bf:8c:93:a0:c6:23:c1:32:f9:cc:c6:d3:68:
b9:c7:ba:a8:bf:b4:ee:b0:ff:42:7f:61:b2:0d:e4:
5f:ad:1c:1f:9c:58:9d:65:a0:da:1e:5a:5e:a3:bb:
42:22:32:46:c8:cd:63:0c:30:2a:c4:22:22:87:29:
f6:46:72:01:eb:3b:5c:05:08:61:46:13:5d:df:79:
65:7c:0a:6b:94:05:07:f9:ad:4a:94:5f:ef:2e:e9:
89:34:c6:01:57:21:b2:e9:31:d9:60:4a:3e:49:c6:
a7:6c:ee:08:d7:d3:e2:02:a4:c0:bd:3f:a8:9a:91:
4a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:66:BA:C5:1D:3B:9B:5B:28:E4:56:BE:3F:FA:28:9E:E4:4C:1A:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f23f5204-3dae-3cd7-a838-dc6e9e0e0684.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.241.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:c5:55:ea:f2:d4:cc:39:71:7c:2a:ac:dc:d4:7e:98:48:e5:
f7:e6:e1:32:d9:ee:4a:f9:51:86:58:45:9e:55:f1:a2:40:f1:
dd:25:65:a5:c6:18:48:09:a2:f4:c0:68:ff:ed:2c:58:e2:5d:
a9:70:b7:38:9f:ee:6a:1e:55:d6:85:cb:ea:9a:6c:67:ee:a9:
bd:ac:1b:a5:7e:0b:fd:95:3f:d2:b1:b4:f4:a1:00:cc:85:8f:
0a:a8:87:fa:63:e7:01:12:6d:b9:f5:ee:8d:41:ad:7e:dd:1b:
40:b6:f0:d8:20:a9:f5:40:da:94:85:fc:09:19:c2:77:1e:3c:
18:b7:08:71:d6:c7:62:3d:49:6f:63:9c:15:fe:65:d8:e0:7b:
d3:ec:d7:24:66:34:f3:07:fd:66:75:66:25:d5:7e:85:9a:2a:
31:79:b7:26:72:40:11:35:b5:33:75:c6:0c:c4:47:bc:35:88:
5e:c4:0a:ff:1a:3a:c7:41:fe:79:0d:b4:4d:2a:20:8e:c8:c6:
95:48:03:34:86:13:94:55:42:b1:2f:1a:d4:7f:4e:95:10:ef:
9f:8e:5d:27:7a:6f:32:38:01:32:d8:84:ac:6d:08:aa:1f:52:
41:3c:80:b6:ae:ad:3f:71:ab:a2:03:22:de:a6:1d:2e:86:cf:
9a:b5:d7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:30:20 2025 by rpki-client on console.sobornost.net