Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1dfd87fe-08cc-36ee-87a1-2a136a7b768f.roa
File: 1dfd87fe-08cc-36ee-87a1-2a136a7b768f.roa (raw, json)
Hash identifier: KurzKAyXDzrqr9gOk8mqjQjkHODdnUaoEj1h2ysXyJw=
Subject key identifier: C1:5F:D6:84:3F:62:7A:8D:96:E4:84:80:7C:3E:7D:96:58:CB:55:5B
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848037B40C4DED19229235C2900
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1dfd87fe-08cc-36ee-87a1-2a136a7b768f.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 20115
IP address blocks: 68.117.120.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:40:c4:de:d1:92:29:23:5c:29:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=788b41f4-392c-438f-a250-11dc17f162b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e9:bb:3a:4e:51:e4:ef:62:8b:9d:f1:75:6d:
f9:6b:7b:df:fc:e2:7a:c9:be:9b:88:11:f3:24:ae:
bf:08:10:74:03:51:2d:c5:65:a2:27:8f:fd:3a:0b:
2b:c9:3b:19:eb:6d:ff:b6:9f:6c:2f:45:77:68:bd:
60:f4:37:df:c1:20:38:0d:45:fa:dd:1b:59:9f:4e:
fb:0c:52:07:33:f8:c1:cd:95:3f:53:cd:2a:67:e2:
0d:87:ff:d6:16:5a:66:7f:eb:3a:d8:bb:38:98:0e:
1a:c1:f0:a9:d3:13:85:56:fb:36:19:2d:59:1f:61:
7b:cd:e2:a0:6b:6c:57:80:41:23:10:a4:91:78:2b:
42:53:b0:dd:d7:5a:c3:0a:05:b9:16:61:80:93:af:
51:ec:89:f1:9a:d4:77:9f:2b:ba:31:45:0c:ea:c4:
1c:58:e9:f4:d7:80:e0:12:97:fe:c2:f0:cd:b0:fa:
e7:01:9a:f4:5e:15:91:ee:ef:63:f9:98:3e:96:c8:
dd:0a:8b:8d:51:d2:1b:3e:5b:18:1c:47:d1:67:36:
60:11:7c:47:d9:25:d4:7c:90:27:a7:a2:99:6e:fa:
92:89:65:5f:e1:ab:db:65:b1:05:2a:5f:2f:77:6d:
9a:8b:4e:49:b7:ca:d3:1f:65:3d:96:79:b8:07:fc:
12:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:5F:D6:84:3F:62:7A:8D:96:E4:84:80:7C:3E:7D:96:58:CB:55:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1dfd87fe-08cc-36ee-87a1-2a136a7b768f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
68.117.120.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:31:e7:20:8a:c5:50:ac:86:03:41:1c:d9:d2:af:e5:80:b7:
47:e4:9b:85:7c:0d:42:ab:97:fc:75:17:0e:df:d6:ed:06:e1:
7f:c5:2e:6a:bd:1e:4a:d3:25:5d:b1:51:cc:ad:5f:fd:48:bb:
2e:24:bc:f1:7d:25:ec:a4:8d:92:6b:ba:ea:4c:e6:e4:73:60:
d4:af:80:cb:e8:69:03:5f:cb:ee:c1:ef:d9:07:1e:8b:a9:29:
59:68:19:e7:fa:82:f8:63:e0:10:39:83:34:1e:9a:17:b5:fa:
9e:17:59:b9:7c:1c:f9:0b:63:cc:69:9c:ac:26:67:b9:a6:e3:
19:b7:31:48:37:a8:30:ef:0c:5b:59:07:d8:b9:0a:95:f1:02:
92:7e:30:56:7f:ef:67:c1:d0:ab:d9:cc:19:2a:31:76:6d:6b:
fc:e0:27:c1:dd:17:34:67:4e:41:50:82:40:0c:1e:89:89:14:
9f:e2:6e:04:c5:07:8b:f6:fe:35:05:39:2d:04:11:fa:78:a3:
bb:2b:1a:ca:88:4d:5c:48:bd:01:58:fb:10:8a:27:0c:12:b4:
7d:91:3e:58:2c:41:a1:60:d4:6a:cb:ee:76:ec:8b:a4:30:5e:
b8:ef:f8:1c:47:a9:4b:dc:5d:01:1b:bd:c3:35:ad:d3:bd:d7:
c1:57:32:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:27:28 2025 by rpki-client