Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3faafe1a-71af-3304-a819-56f707a0e5ee.roa
File: 3faafe1a-71af-3304-a819-56f707a0e5ee.roa (raw, json)
Hash identifier: fqy2NL6jqgd8+F5DHt6XhbpYnh0iGvupNF3/k0U/oPE=
Subject key identifier: 8B:C9:1E:7D:B2:E6:25:4A:83:7F:2A:42:FF:C5:BD:74:2F:56:BD:7C
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848037ACE96CA6881061FFC5980
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3faafe1a-71af-3304-a819-56f707a0e5ee.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 20115
IP address blocks: 75.137.64.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7a:ce:96:ca:68:81:06:1f:fc:59:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=d9f6a3e7-60e3-4b6b-bb9e-ca03165bcb2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:8f:4e:54:94:23:8b:75:89:00:e3:dc:39:d5:
8e:47:fc:94:ff:b0:c2:9a:15:ea:b9:19:59:d1:8a:
50:33:55:f7:9e:87:81:21:79:35:d6:68:2a:b5:59:
ea:e2:c2:02:c5:4a:4d:fe:6b:fb:9f:aa:71:01:4b:
85:0c:97:8c:79:4e:3b:5f:e5:7b:9d:e1:2d:12:9f:
f4:2e:da:4f:29:f6:4a:02:fd:fc:3c:8f:d0:60:53:
ed:8d:78:f7:81:40:bd:0a:f3:1f:07:5e:69:80:9f:
2a:6a:a2:e3:06:d3:fa:8b:40:4b:d4:0d:5c:54:f7:
5d:04:71:e4:01:2b:e1:0a:14:69:3d:49:c6:6f:fa:
4a:24:50:72:90:0e:51:28:d3:8f:5e:40:a3:49:47:
97:1e:d6:08:09:37:97:d0:a9:63:f5:73:3b:c5:9d:
c2:03:37:b5:37:ed:b0:e0:14:66:92:7c:bd:ea:8d:
5a:5f:5e:14:90:9b:4b:b3:5d:08:55:e5:b4:c4:b9:
df:b4:8d:8f:c9:fd:43:19:ae:e0:72:cf:ae:d1:f9:
2c:71:a3:72:01:c6:68:c3:95:ff:73:f1:3d:6a:34:
aa:29:43:07:01:8d:f9:77:78:d6:07:e7:1d:39:e3:
fd:f3:50:67:ae:44:fb:fd:a1:52:e5:39:70:5c:9f:
70:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C9:1E:7D:B2:E6:25:4A:83:7F:2A:42:FF:C5:BD:74:2F:56:BD:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3faafe1a-71af-3304-a819-56f707a0e5ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
75.137.64.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:a9:6f:d1:a1:3d:40:c0:73:27:71:a4:1b:70:06:37:15:87:
a1:94:20:ae:cc:80:b9:90:a0:20:67:e2:6c:23:65:a3:a3:cf:
bc:aa:9d:d4:9d:d0:d6:7e:a7:3c:bd:db:18:ad:b9:37:09:5b:
6e:ab:0d:92:87:bf:dd:0d:1a:98:dc:21:dc:0b:89:68:e2:0e:
83:49:68:e2:48:db:7b:dd:dd:06:54:27:b4:95:31:56:f4:74:
13:9a:cd:df:3e:58:61:a9:4e:9d:bf:ae:fa:83:40:72:31:4d:
76:fc:03:4a:7f:a8:56:1b:1c:de:fe:35:b3:3d:39:c5:cb:4e:
9b:89:05:46:77:bf:09:72:97:ad:85:b2:29:a0:75:7a:43:ca:
01:37:39:38:b9:65:58:e9:7e:dd:2f:d1:9c:cf:a1:76:cc:65:
41:31:24:db:06:74:5f:a1:d6:4c:1a:b0:98:05:3b:48:e2:6e:
9b:fb:55:09:5b:b0:95:4e:0f:7d:10:b6:99:ec:25:2d:e2:45:
f0:42:7d:be:eb:85:12:23:c5:53:ec:4d:ad:d8:f1:08:74:37:
3f:50:9a:10:6f:40:e6:65:0e:46:07:55:1d:09:f2:d9:23:c8:
78:91:e7:90:92:b0:31:14:ca:0b:0f:e6:b9:58:7e:ef:c3:7b:
5b:15:de:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:32:45 2025 by rpki-client