Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/38a505c0-0eb0-3cbb-bc92-98f004332e3a.roa
File: 38a505c0-0eb0-3cbb-bc92-98f004332e3a.roa (raw, json)
Hash identifier: uy7/FY60qYAQUVwWjJQpjgLYjiVq6WafpKJ4RRkGcbg=
Subject key identifier: E3:67:1D:C1:4F:C4:52:B4:2E:4F:8A:E0:8F:AE:BF:5A:0D:EC:F2:20
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848037B49219B4F6C28E7E74BC0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/38a505c0-0eb0-3cbb-bc92-98f004332e3a.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 20115
IP address blocks: 97.87.192.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:49:21:9b:4f:6c:28:e7:e7:4b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=4c79f442-7be9-4fe7-8bbc-91b0b0db5159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c9:a8:84:4f:2f:2c:81:61:98:0a:e1:9c:52:
43:43:7f:b9:eb:2f:c9:ae:84:14:c7:6b:05:3d:ed:
21:0a:e2:a0:0c:c6:cf:2e:75:f5:fa:52:c1:ba:4f:
93:17:1a:69:eb:d6:5a:62:30:41:81:f0:7a:11:d3:
7e:6a:54:40:32:17:c9:cc:46:97:c7:66:d6:d9:e9:
c8:a4:e9:78:1b:d3:03:71:5c:30:3c:d3:c1:26:2f:
d2:6f:48:9b:76:82:eb:53:c9:d4:b9:99:3f:cb:d0:
d9:e4:aa:cd:17:71:eb:46:5c:11:31:89:74:78:4d:
42:5f:cb:4b:f3:9e:f6:0d:31:11:5d:90:03:a0:31:
b4:55:94:c8:0c:27:4b:35:4e:a7:d4:99:f1:ad:02:
e6:f3:14:95:54:33:1c:ab:52:f9:75:88:b5:2a:b4:
b2:78:be:c3:31:10:75:58:26:94:77:ee:25:d5:aa:
51:cb:95:97:e5:51:ab:f2:1e:4c:69:3a:a2:72:a8:
11:79:df:21:7c:45:f6:84:82:64:a2:d1:99:fe:b4:
33:76:6c:e4:f8:9e:f9:8c:99:a5:5d:82:57:07:24:
5b:1d:ee:45:d2:7b:d0:a5:aa:a5:21:27:f9:df:86:
5d:92:97:6d:30:7b:f7:d8:8b:97:af:14:03:00:90:
c1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:67:1D:C1:4F:C4:52:B4:2E:4F:8A:E0:8F:AE:BF:5A:0D:EC:F2:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/38a505c0-0eb0-3cbb-bc92-98f004332e3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
97.87.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:30:65:c4:8c:31:8f:3c:e5:c4:d2:ff:57:91:31:f9:90:0d:
d4:51:8a:c1:08:ee:80:9f:ce:42:0e:d3:f7:6c:9c:35:22:64:
71:b4:bc:66:78:79:1c:13:89:f3:91:e9:5c:8d:a9:65:84:6a:
fb:5e:be:4f:ef:4e:af:b7:b7:55:37:f4:e9:0e:ce:ee:2a:54:
30:31:56:c0:1c:29:50:ee:63:33:79:74:d2:3b:bd:ae:19:53:
b5:19:4d:31:70:88:b1:e0:3a:14:ea:72:a9:c9:9a:f7:5e:fc:
e6:3e:93:65:e9:4c:f9:2a:fd:06:0b:0e:5d:00:24:6d:2e:c9:
da:fb:b5:ee:8d:b2:dd:7e:1b:e0:16:bd:c0:c2:d3:45:8f:6f:
da:b8:c6:93:de:53:e0:fc:33:40:21:e7:97:d2:a1:be:8e:c7:
f2:80:94:dd:c2:f0:20:37:02:b1:bb:6e:4d:97:7a:3d:09:53:
8b:ad:2a:a4:ac:70:f2:05:18:71:b8:f8:44:e5:36:83:73:bb:
2d:50:3b:ed:5a:42:a3:73:53:c5:41:0d:31:3f:a8:4b:12:88:
2b:cb:11:11:91:72:34:48:b1:99:64:8d:f0:21:c7:08:3f:aa:
40:2b:8a:af:4e:ee:43:2d:52:a4:10:0e:c7:ad:5c:b4:0f:0a:
55:72:bd:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:24:19 2025 by rpki-client