Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3ddba9c1-1c9e-3c8c-8afb-3fa461ccda2b.roa
File: 3ddba9c1-1c9e-3c8c-8afb-3fa461ccda2b.roa (raw, json)
Hash identifier: 8aSnA4D4q6sJDU5379wZedW6/HdC9WSf4u3XWV02Njk=
Subject key identifier: ED:E6:FF:44:2D:E6:65:62:2F:0C:C0:1A:B8:5A:1E:BA:51:7A:BF:FB
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848037AC520A6A578C90024A0C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3ddba9c1-1c9e-3c8c-8afb-3fa461ccda2b.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 20115
IP address blocks: 71.87.0.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7a:c5:20:a6:a5:78:c9:00:24:a0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=a1b06dda-b6ca-4b09-924e-7b054db5ca2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3f:d4:54:9b:a2:19:92:3e:c1:cd:17:81:76:
80:1c:33:a4:6e:b8:a7:7f:f9:1e:70:a4:e7:15:4e:
5f:89:f9:ae:f4:83:0e:e9:53:b1:83:fe:74:a5:5b:
cc:a4:80:48:bf:ed:1a:1f:b2:18:c9:85:90:46:a8:
97:0b:34:8c:7b:be:4a:29:8b:23:ba:ea:a3:5e:06:
15:b2:7c:30:a7:20:5d:0f:ac:72:30:d1:0d:21:64:
44:13:ff:0d:4a:c3:51:18:6d:04:a0:67:02:1e:60:
e7:34:b0:32:46:5e:ae:f3:69:4c:29:3e:46:89:60:
82:68:fb:c0:3d:d1:4a:b2:49:30:61:50:a0:58:de:
5b:74:fd:63:74:de:b7:62:35:23:15:18:75:60:56:
cb:0e:45:fa:6e:5f:e4:df:a5:e7:df:d4:ab:42:15:
6c:dc:93:cb:8e:d2:ba:d7:54:00:2e:f3:46:bf:fb:
7f:a8:99:d0:b0:e7:ae:bc:52:70:53:d7:41:21:2d:
f9:38:59:4b:77:dd:ef:7d:ea:96:86:ee:8b:fc:f8:
fc:bc:50:ba:58:20:ae:ac:79:48:a4:5d:53:c6:d1:
3a:04:a2:2f:b4:d3:73:8d:ff:f2:a7:4d:f7:b8:10:
5f:e6:23:03:76:5f:ec:7f:14:67:65:14:5b:2f:49:
32:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E6:FF:44:2D:E6:65:62:2F:0C:C0:1A:B8:5A:1E:BA:51:7A:BF:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3ddba9c1-1c9e-3c8c-8afb-3fa461ccda2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.87.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:fe:40:d4:6f:66:6e:56:3a:6c:bc:3d:76:3a:2b:80:e1:3d:
9f:33:67:e0:b9:8c:2b:73:f5:94:39:ba:2f:ef:ae:f6:c5:6b:
a8:c7:e5:66:8b:74:1f:b3:ec:0e:b6:5f:8e:be:72:53:8a:b0:
f4:8f:7b:23:3c:d1:4d:97:c3:f7:0c:a0:0a:4a:a4:90:f9:7d:
b1:6d:a2:86:24:7e:da:2e:83:e3:17:d5:03:e5:e3:7d:d3:d5:
58:d7:cc:b8:21:5a:a3:7f:ad:31:3f:2f:2d:6a:14:2e:42:43:
ff:fc:ea:d0:54:af:cb:28:31:a5:83:b3:36:78:e7:ed:c2:f4:
fc:7a:21:ae:c7:99:fb:cc:06:45:f4:b9:26:cf:55:ee:0d:90:
54:c0:cd:93:41:10:a8:95:31:63:85:06:fe:86:37:30:ba:24:
89:9e:46:6b:b9:d3:ac:d5:0d:39:1b:23:98:b6:0d:a7:fa:c5:
76:6a:1f:e6:c9:e4:41:f4:66:38:d7:9e:d5:7e:01:da:03:6f:
53:be:cf:c8:66:12:76:6a:e1:b1:b0:2e:83:d3:3f:b1:c2:7f:
97:ec:6c:6d:a2:5f:cc:b6:b0:e9:e5:aa:23:62:d1:49:a9:52:
37:21:d4:ba:82:3a:fb:fe:11:c0:80:2f:ea:07:71:fb:bc:7a:
15:05:af:1c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgDesUgpqV4yQAkoMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI0MTEyNzAyMDAzOVoXDTI1MDIyNTAyMDAzOVowLzEtMCsGA1UEAxMk
YTFiMDZkZGEtYjZjYS00YjA5LTkyNGUtN2IwNTRkYjVjYTJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlD/UVJuiGZI+wc0XgXaAHDOkbrinf/kecKTn
FU5fifmu9IMO6VOxg/50pVvMpIBIv+0aH7IYyYWQRqiXCzSMe75KKYsjuuqjXgYV
snwwpyBdD6xyMNENIWREE/8NSsNRGG0EoGcCHmDnNLAyRl6u82lMKT5GiWCCaPvA
PdFKskkwYVCgWN5bdP1jdN63YjUjFRh1YFbLDkX6bl/k36Xn39SrQhVs3JPLjtK6
11QALvNGv/t/qJnQsOeuvFJwU9dBIS35OFlLd93vfeqWhu6L/Pj8vFC6WCCurHlI
pF1TxtE6BKIvtNNzjf/yp033uBBf5iMDdl/sfxRnZRRbL0kywQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO3m/0Qt5mViLwzAGrhaHrpRer/7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvM2RkYmE5YzEtMWM5ZS0z
YzhjLThhZmItM2ZhNDYxY2NkYTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGR1cAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJD+QNRvZm5WOmy8PXY6K4DhPZ8zZ+C5jCtz9ZQ5ui/vrvbFa6jH5WaL
dB+z7A62X46+clOKsPSPeyM80U2Xw/cMoApKpJD5fbFtooYkftoug+MX1QPl433T
1VjXzLghWqN/rTE/Ly1qFC5CQ//86tBUr8soMaWDszZ45+3C9Px6Ia7HmfvMBkX0
uSbPVe4NkFTAzZNBEKiVMWOFBv6GNzC6JImeRmu506zVDTkbI5i2Daf6xXZqH+bJ
5EH0ZjjXntV+AdoDb1O+z8hmEnZq4bGwLoPTP7HCf5fsbG2iX8y2sOnlqiNi0Ump
Ujch1LqCOvv+EcCAL+oHcfu8ehUFrxw=
-----END CERTIFICATE-----
Generated at Sat Apr 26 01:20:17 2025 by rpki-client