Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/11d5ec39-b3d0-3b72-865a-dcf18f41441f.roa
File: 11d5ec39-b3d0-3b72-865a-dcf18f41441f.roa (raw, json)
Hash identifier: ZVj9+D+uJPAgYvtVKsYIQ9GS8+ihtxsm03rvN8xhU7k=
Subject key identifier: E4:B2:01:73:5F:D2:47:67:52:E1:95:0C:FF:A0:30:0A:AE:14:B5:92
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848037B25C3FACB1FF7B4A3CA00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/11d5ec39-b3d0-3b72-865a-dcf18f41441f.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 20115
IP address blocks: 24.213.8.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:25:c3:fa:cb:1f:f7:b4:a3:ca:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=ead011f3-5cc4-49e6-a660-9329271812bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:41:3c:b1:a1:52:3a:f7:21:66:19:d8:00:e3:
22:22:10:ca:ca:8e:eb:0e:82:6e:0a:22:3e:d6:7f:
c0:5b:03:4b:71:0e:17:3c:5a:cf:61:07:01:c5:6f:
d2:0f:84:53:07:35:05:fe:91:ba:29:93:f5:77:a6:
b4:c8:df:cb:ca:ca:f8:80:6d:53:5a:44:5b:a8:6e:
73:f0:05:28:ec:c3:75:6e:68:c6:97:cb:e9:45:16:
52:8f:5d:9f:64:65:5f:06:18:a4:ac:ee:f6:18:4e:
bc:cf:98:8f:b6:bf:12:a7:e5:09:07:74:da:49:04:
c0:04:7a:d7:fa:e8:7f:f5:b5:c3:57:b5:9b:d8:90:
b6:66:d7:93:c2:5e:3a:14:58:d8:c1:6f:35:d3:21:
0e:94:cf:f5:2a:26:3b:8a:79:3b:04:aa:c2:59:1b:
b5:b9:78:44:c4:c1:12:87:ec:b3:e2:2a:1a:e8:c9:
a0:11:97:09:cd:35:6e:4a:5e:25:31:bc:56:ea:f6:
87:6b:ba:b6:36:9d:d0:5e:95:0c:a7:e7:83:de:f0:
ce:f4:e8:b1:d9:52:d1:25:c3:99:18:ed:9c:a9:5f:
e8:e5:b8:d8:4d:51:41:70:28:62:0e:ab:a4:a7:ee:
31:50:84:af:6d:39:8d:6b:3d:14:71:4e:18:32:d1:
49:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B2:01:73:5F:D2:47:67:52:E1:95:0C:FF:A0:30:0A:AE:14:B5:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/11d5ec39-b3d0-3b72-865a-dcf18f41441f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
24.213.8.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:6c:89:c9:d8:cd:3a:28:0e:fd:90:d7:36:0b:f9:8f:5a:d7:
12:a8:8b:5e:16:c6:8f:ee:4b:11:71:79:16:7c:16:ee:59:dd:
04:05:c8:f8:b1:c4:50:0a:67:73:2b:e6:76:c1:45:30:32:12:
9c:30:06:f2:34:fa:82:3f:c6:20:26:02:b0:9f:75:14:cd:95:
15:13:32:ff:20:1b:30:c9:2b:1a:9d:60:9f:1d:3c:bd:bf:af:
0d:93:5f:10:25:14:78:10:53:83:67:a3:59:b8:e7:0b:b6:e1:
d9:bf:2e:f1:a5:eb:88:0e:e8:89:51:17:bc:b7:5e:29:56:67:
06:03:4c:8d:68:4e:26:13:47:90:cd:ec:d1:c4:58:87:e3:f8:
9a:dc:6e:8e:02:39:14:fe:0a:e7:28:04:2a:c4:78:c2:ab:54:
12:fa:0b:45:92:58:fe:bb:19:0a:d8:e9:bb:3c:1f:67:99:72:
06:01:07:ca:8e:56:86:74:c3:d4:2c:24:f6:97:b1:ca:7a:d3:
6f:71:21:3d:bb:f2:5e:40:7b:51:09:c8:7e:0e:d1:d8:1d:fa:
50:04:a1:a9:25:54:a4:64:b6:f0:40:6d:44:58:37:40:9e:98:
42:ee:7e:7b:4c:68:90:8c:85:14:28:fc:5e:27:1b:e8:f3:53:
b2:d4:98:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:43:40 2025 by rpki-client