Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/5aa2afea-60d3-3b4e-a2eb-5e93610b9a7c.roa
File: 5aa2afea-60d3-3b4e-a2eb-5e93610b9a7c.roa (raw, json)
Hash identifier: M2IrJYmiyBsXAvPJU20M7+sr1T4csv+gjrn/pFm8iek=
Subject key identifier: 94:54:AA:64:1B:8E:DD:C7:29:D9:DE:AF:C5:11:4F:42:B9:72:E1:AB
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848037AA5291494302697F42F80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/5aa2afea-60d3-3b4e-a2eb-5e93610b9a7c.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 20115
IP address blocks: 71.87.192.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7a:a5:29:14:94:30:26:97:f4:2f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=cdd21b8e-4275-4c95-a32c-e07829a6a4fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:19:3a:f2:77:e2:d0:b8:6e:68:39:83:fb:8a:
3f:79:29:bb:28:6f:8c:46:c3:ac:a5:67:bb:c4:72:
f4:29:26:d9:8a:7f:c0:7a:e7:c6:3b:21:81:10:9c:
63:d8:0f:72:2d:58:0f:3b:a3:ce:1a:ef:75:cb:76:
25:10:b0:19:b2:bc:42:e2:e5:f8:6f:76:7a:ff:e4:
25:7a:2e:b6:ea:d2:7d:dd:34:b2:10:ef:50:79:0a:
2f:45:c5:e6:83:f9:36:0f:6d:ae:9e:9d:cd:e6:80:
64:4a:50:23:d2:28:37:c1:b1:84:ed:c4:51:3a:90:
20:8c:4f:07:4c:f5:87:d6:93:3a:25:b3:a9:e2:2a:
04:54:76:7e:93:a6:79:36:78:6c:cf:b1:85:5f:65:
d5:b0:a9:39:63:a4:86:9b:b0:58:42:e2:2b:b0:68:
ca:b3:b0:69:79:31:c8:65:7f:f1:de:10:63:7d:80:
18:9b:7e:82:5c:5f:d1:9f:07:62:10:08:4a:d1:0f:
37:03:f7:a4:ec:13:6d:4f:a9:5e:e6:23:6c:a2:6f:
9f:80:97:a7:a9:64:52:47:29:8d:30:85:2d:f3:e2:
d8:e6:18:db:7e:1a:5b:51:16:9e:3e:88:83:8c:b5:
91:c6:72:dc:da:46:64:4d:92:39:cb:2b:0a:67:05:
70:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:54:AA:64:1B:8E:DD:C7:29:D9:DE:AF:C5:11:4F:42:B9:72:E1:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/5aa2afea-60d3-3b4e-a2eb-5e93610b9a7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.87.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:61:16:f5:89:f6:58:c5:44:ad:d4:66:02:bb:98:e0:e3:69:
c2:e2:d2:f0:79:6e:68:8f:5b:4d:9c:a3:6f:68:d6:0c:ec:4c:
27:7a:16:18:48:85:ce:2a:f5:82:7c:a2:53:59:7a:f1:f5:ba:
c7:c6:0a:21:bc:1f:f7:05:68:d7:4a:7e:73:c3:1d:8d:da:29:
e6:cc:be:ee:03:9d:c0:03:af:e9:bc:9c:72:e9:10:c1:f5:47:
de:9d:95:e4:9e:57:c5:65:39:83:60:e9:63:d9:4d:f6:90:54:
2c:26:91:30:c7:7b:22:19:54:32:23:a2:a7:0c:b4:1f:58:e5:
ff:2c:70:05:95:27:da:8d:4b:0a:35:4e:fc:5d:95:cc:ef:8a:
f7:88:16:2b:ff:a1:92:ca:63:84:2e:a6:59:25:2f:e2:be:b2:
b5:d1:84:2f:d7:81:1e:07:22:c4:98:e7:27:c1:45:64:81:94:
53:bd:47:16:86:af:54:6c:d6:cb:ec:2e:70:ef:aa:d4:ce:86:
fc:7d:44:b3:ae:3e:3d:3d:05:f0:8e:3b:58:04:c6:4c:66:72:
44:81:a3:5b:9b:7c:c4:ee:7b:09:6e:48:d2:b7:4e:15:9d:ac:
8e:15:30:52:a7:ec:87:27:25:20:68:13:61:19:c4:5b:dd:9c:
50:a5:d8:9f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgDeqUpFJQwJpf0L4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI0MTEyNzAyMDAzOVoXDTI1MDIyNTAyMDAzOVowLzEtMCsGA1UEAxMk
Y2RkMjFiOGUtNDI3NS00Yzk1LWEzMmMtZTA3ODI5YTZhNGZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihk68nfi0LhuaDmD+4o/eSm7KG+MRsOspWe7
xHL0KSbZin/AeufGOyGBEJxj2A9yLVgPO6POGu91y3YlELAZsrxC4uX4b3Z6/+Ql
ei626tJ93TSyEO9QeQovRcXmg/k2D22unp3N5oBkSlAj0ig3wbGE7cRROpAgjE8H
TPWH1pM6JbOp4ioEVHZ+k6Z5Nnhsz7GFX2XVsKk5Y6SGm7BYQuIrsGjKs7BpeTHI
ZX/x3hBjfYAYm36CXF/RnwdiEAhK0Q83A/ek7BNtT6le5iNsom+fgJenqWRSRymN
MIUt8+LY5hjbfhpbURaePoiDjLWRxnLc2kZkTZI5yysKZwVwRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJRUqmQbjt3HKdner8URT0K5cuGrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNWFhMmFmZWEtNjBkMy0z
YjRlLWEyZWItNWU5MzYxMGI5YTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER1fAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEFhFvWJ9ljFRK3UZgK7mODjacLi0vB5bmiPW02co29o1gzsTCd6FhhI
hc4q9YJ8olNZevH1usfGCiG8H/cFaNdKfnPDHY3aKebMvu4DncADr+m8nHLpEMH1
R96dleSeV8VlOYNg6WPZTfaQVCwmkTDHeyIZVDIjoqcMtB9Y5f8scAWVJ9qNSwo1
TvxdlczviveIFiv/oZLKY4QuplklL+K+srXRhC/XgR4HIsSY5yfBRWSBlFO9RxaG
r1Rs1svsLnDvqtTOhvx9RLOuPj09BfCOO1gExkxmckSBo1ubfMTuewluSNK3ThWd
rI4VMFKn7IcnJSBoE2EZxFvdnFCl2J8=
-----END CERTIFICATE-----
Generated at Sat Apr 26 03:48:41 2025 by rpki-client