Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3236e884-9d88-3e42-b8f1-7033cbbc5e2c.roa
File: 3236e884-9d88-3e42-b8f1-7033cbbc5e2c.roa (raw, json)
Hash identifier: weOYSYBRIiX8cXi2R+xFI1a49HIXpZj2HKy0p+A8j5A=
Subject key identifier: 19:4A:BA:28:71:1D:1C:15:11:51:A7:49:88:0C:17:C6:FE:51:51:1D
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848037AA05F69E3066520B9BB80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3236e884-9d88-3e42-b8f1-7033cbbc5e2c.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 20115
IP address blocks: 24.216.32.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7a:a0:5f:69:e3:06:65:20:b9:bb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=70108e67-90bf-45a2-b30a-0d1cf85ed5f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ba:66:70:aa:1d:99:3e:1f:2a:0a:3a:46:0f:
13:81:b0:99:f7:ea:53:ef:d6:df:05:e9:7c:31:12:
c6:97:24:ee:e6:5f:f9:1b:22:cc:b6:07:ef:5e:93:
56:f4:e9:80:be:e8:5e:ad:32:9b:7c:2c:84:25:32:
81:4f:8f:d6:16:35:66:26:b9:96:87:13:f4:4d:6a:
80:8f:0d:0e:f7:ed:01:a2:f9:b5:e5:37:d4:bf:34:
c6:ad:25:20:68:7c:68:e7:6d:6a:9a:79:08:ea:e6:
16:5d:ec:de:20:4c:59:c9:ef:4e:6b:67:3c:f4:83:
58:5c:86:e5:85:d3:79:83:0f:f3:68:ee:06:b5:10:
99:ab:1e:11:a7:b7:84:86:cd:36:c3:f8:50:47:e6:
97:81:0b:95:e3:78:0f:0d:f7:1b:82:fe:a3:2d:13:
ef:d3:cc:0e:2f:55:30:e3:08:ff:53:42:ff:af:0e:
93:c5:13:e5:db:82:3b:ba:26:fe:fe:e8:09:4e:52:
8c:44:72:07:ba:28:4e:13:4f:51:83:6b:51:20:5a:
79:df:8b:a4:50:5c:cc:4f:1a:fe:03:2b:b5:15:3b:
69:37:c3:e9:60:e1:dd:6b:b6:a6:02:40:da:7f:7c:
02:9a:f7:5b:03:0d:0d:80:8d:c5:6d:ef:51:42:da:
fd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:4A:BA:28:71:1D:1C:15:11:51:A7:49:88:0C:17:C6:FE:51:51:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3236e884-9d88-3e42-b8f1-7033cbbc5e2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
24.216.32.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:ef:8e:69:20:39:15:b9:72:f8:7c:00:2a:8a:f8:36:01:58:
0f:9f:43:36:90:6c:7c:39:3f:46:e4:92:ce:c9:5a:61:f3:d8:
59:55:d0:1e:f5:fe:7a:e1:9e:96:61:6b:54:7f:36:7c:52:be:
e5:e5:3d:25:6a:68:d3:21:dc:79:21:e6:74:c3:a8:0e:5b:e9:
45:70:28:d0:48:9d:53:9b:38:be:37:b1:98:6f:d7:2a:3d:b6:
0b:be:74:18:62:0c:58:55:de:1d:03:63:d8:3b:5b:41:b8:cc:
9a:e5:9b:ec:d4:40:08:3c:18:a6:36:c4:51:0a:e0:6e:6b:96:
2e:b6:52:03:c8:db:52:89:dc:21:13:e0:c0:20:e4:3c:e3:fb:
8e:0e:a3:b3:19:a3:52:c5:b7:e5:6f:a6:72:34:93:6e:61:76:
28:bb:01:ce:ac:44:78:e5:87:94:32:3e:8f:21:77:55:16:6f:
df:6a:12:ff:d3:c9:ab:f6:ba:b4:f0:ea:0b:de:13:ac:f7:b5:
0f:9d:33:b8:87:b4:09:d7:92:79:35:2a:e6:02:a6:3a:73:3f:
6a:ea:e1:96:35:98:e7:00:34:e8:51:45:b6:d0:90:a9:81:75:
f5:da:57:b2:1a:e2:83:eb:c5:f6:5c:fa:0d:93:b4:9a:c6:33:
d5:11:53:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:39:22 2025 by rpki-client