Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/291391cf-6a8e-3175-a12f-0cb0e16a9b7a.roa
File: 291391cf-6a8e-3175-a12f-0cb0e16a9b7a.roa (raw, json)
Hash identifier: hFlA18jbpOFcs3OjCrSkDJBt+pfidpO85nA5cuuD3UU=
Subject key identifier: 8E:C0:CF:9B:D4:44:50:21:9C:05:BB:1F:31:FD:3E:24:EA:28:7B:8C
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848037B3AC1D38E2AE85E343540
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/291391cf-6a8e-3175-a12f-0cb0e16a9b7a.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 20115
IP address blocks: 47.44.168.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:3a:c1:d3:8e:2a:e8:5e:34:35:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=12b4f8f3-2029-4bf7-8e2a-7394c6abfd27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:81:2e:df:9d:dd:d5:1f:a9:11:a7:d7:da:54:
6c:f6:21:92:97:ac:18:cd:70:40:df:5a:30:bb:b5:
3f:e2:14:8d:c9:9f:24:d1:29:df:dd:f5:b1:2b:e9:
ff:77:1d:3b:69:9a:02:47:c0:00:6d:fc:55:9f:28:
07:1c:85:52:c2:9f:82:14:f6:97:ba:2e:2a:b7:9e:
dd:a5:93:5f:76:b6:61:f9:0d:27:15:44:1b:08:f9:
19:a6:3c:5e:8a:58:04:40:07:eb:79:5d:05:a7:2b:
59:38:77:a9:3e:f7:ec:52:c1:ae:34:31:ea:00:f3:
21:83:70:55:01:82:80:be:27:7e:c0:8e:9a:e5:1f:
71:f2:66:c7:db:c1:8c:03:c9:ef:ae:42:02:c1:36:
bf:5d:bf:c0:c2:7d:f9:f7:1c:82:e4:be:a2:37:e8:
b0:0e:9e:b2:65:3e:40:ba:fe:59:8f:92:f2:d0:88:
33:3c:45:25:b0:ae:57:c8:95:7b:c5:0f:d9:b1:ce:
55:4e:22:d9:39:d6:95:d2:30:dd:20:cf:3c:22:4b:
2c:ed:f5:d3:32:7e:e8:aa:86:d8:6b:28:74:56:a8:
67:14:5b:ea:d3:2b:24:9d:47:a1:79:8a:d5:49:f8:
05:3a:50:ff:cc:42:35:fa:a5:62:3e:26:8f:26:5e:
df:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C0:CF:9B:D4:44:50:21:9C:05:BB:1F:31:FD:3E:24:EA:28:7B:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/291391cf-6a8e-3175-a12f-0cb0e16a9b7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
47.44.168.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:b6:5d:53:a7:e6:a4:68:6d:6e:85:75:23:81:e8:4d:80:b3:
48:42:0e:01:64:a4:f9:75:eb:5b:b7:ba:70:f2:81:33:9b:e0:
ef:1d:e9:d1:b1:04:4c:1b:2f:47:c1:fd:ec:00:c9:af:d1:5d:
1d:14:5e:94:68:9c:88:b1:99:08:01:31:08:e0:35:95:98:15:
f1:8c:1d:48:b0:96:d3:16:a0:0f:3a:cd:32:3a:cb:a6:29:1a:
a7:96:81:5d:e0:c5:df:3a:a0:d5:58:70:55:a8:98:7e:48:e9:
d7:a6:92:ed:78:97:f5:cc:46:43:3c:d7:45:58:cf:bd:ac:70:
25:9b:10:2c:62:b1:a1:8c:87:11:77:02:14:88:76:ab:7d:61:
c3:d7:c7:a7:99:c4:c3:57:50:15:62:e5:cb:ef:11:8f:23:1c:
0b:6d:b1:d2:c5:f1:8a:15:0f:c3:ab:5e:31:b8:a4:34:53:cb:
b5:54:ea:1d:37:d0:2d:ca:2a:0b:a3:ad:21:13:29:a3:76:1b:
94:bd:7b:50:ff:8c:0a:88:28:84:fd:c0:60:6f:6f:3f:29:81:
7e:30:39:57:83:8a:74:f1:8d:31:e1:e1:a8:fd:5d:3f:73:5d:
db:12:45:b6:b7:10:be:dc:59:fe:84:2f:b0:c6:44:ec:bd:50:
5e:58:d7:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:25:22 2025 by rpki-client