Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/628b6158-a17d-3d6e-8752-71761eeb9967.roa
File: 628b6158-a17d-3d6e-8752-71761eeb9967.roa (raw, json)
Hash identifier: KEDT3DOLTxEd6gdVAHBdEX4SF2IDwqBFhLG5ie/JgSw=
Subject key identifier: 2B:DD:3C:D6:09:5A:08:25:1E:BD:46:7F:87:E9:F2:27:84:6B:23:8C
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848037AAEB68AD2F37061AB5000
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/628b6158-a17d-3d6e-8752-71761eeb9967.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 20115
IP address blocks: 47.44.128.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7a:ae:b6:8a:d2:f3:70:61:ab:50:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=51e16465-a41c-415a-b39e-a9457b5f459f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:1c:d8:87:4b:94:42:e3:17:fa:ed:bf:22:12:
de:57:17:e9:b9:d4:8c:c9:e6:08:de:1d:44:88:b1:
7f:87:e5:18:07:16:85:79:0f:f1:58:e7:9a:57:89:
bc:10:51:98:00:d6:36:56:4a:9e:1f:a0:78:f9:dc:
3c:21:31:fa:f9:e5:52:44:07:a4:59:c5:26:61:3a:
c5:21:41:09:7d:a4:30:67:66:0f:f0:5f:b3:ea:1b:
a8:bf:c7:78:04:e4:ef:b1:20:5e:44:de:7b:75:a3:
42:48:a3:08:5c:53:12:2a:a0:04:e5:ba:94:ab:d4:
19:c3:45:93:4a:bd:77:4b:b9:a1:e9:1b:a4:dc:ce:
67:3a:a2:b0:eb:90:81:18:5e:4f:b9:fa:1c:3a:4e:
cc:fd:89:d0:12:2d:95:7e:4b:18:a6:e8:38:5d:c9:
70:17:3e:c7:9a:ee:4c:69:10:8e:cf:de:8c:db:d8:
ae:85:74:41:4e:3b:7f:88:16:8b:90:eb:03:a0:7a:
f6:c5:d0:dd:a4:79:46:37:54:19:0c:54:65:c0:52:
77:c9:87:19:47:14:4d:cb:29:54:58:a9:ae:07:ac:
46:9a:11:70:49:ce:22:9e:11:e8:f8:ac:78:82:99:
cb:7e:09:51:25:45:cb:45:01:b2:ab:9a:3b:cb:d4:
e5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DD:3C:D6:09:5A:08:25:1E:BD:46:7F:87:E9:F2:27:84:6B:23:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/628b6158-a17d-3d6e-8752-71761eeb9967.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
47.44.128.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:9f:21:59:87:18:56:4c:fc:88:07:ed:41:d8:d2:e7:50:7d:
03:4a:92:fc:86:bb:0b:06:b7:38:c8:0d:00:ad:3f:03:c7:52:
e1:47:d0:0c:7d:a6:cd:81:04:ce:16:24:62:d2:3b:1c:58:38:
b5:c0:c4:87:65:4d:6a:d8:ff:6c:2e:a9:3e:41:f3:9c:1f:ae:
d7:9e:03:04:c4:2b:23:8f:ec:7a:97:96:b6:90:09:b0:7d:e8:
80:0f:b6:b8:ec:0e:6e:11:3a:23:ed:c5:9c:a1:7d:aa:72:15:
46:63:a7:2b:e9:fb:87:cf:75:63:34:94:03:9c:09:a4:71:e2:
3d:47:97:aa:07:bc:3a:65:50:d1:f4:31:14:b3:98:dd:20:a8:
1d:49:d9:f9:e6:1b:aa:a3:b1:26:50:b5:b4:27:c9:27:91:14:
7f:7f:0c:fe:09:e3:c6:d4:52:8b:c6:14:fb:ea:25:10:33:d6:
1c:c7:d5:72:6c:1b:0c:df:9f:fc:94:62:91:44:39:30:42:71:
e4:f4:0f:59:f8:41:9e:47:0b:05:01:8e:0b:0f:cf:e9:fa:5a:
ba:db:04:29:d4:e5:11:11:31:66:f3:ff:46:fb:42:5c:7a:4c:
40:40:39:ce:00:99:b0:59:70:f4:d7:d0:eb:04:a6:a5:b1:05:
d8:6a:67:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:44:10 2025 by rpki-client