Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/645afe38-01a9-317d-8dfb-7a3572c02350.roa
File: 645afe38-01a9-317d-8dfb-7a3572c02350.roa (raw, json)
Hash identifier: JMPeJFmQhK+yt9D5ry3YyyFWwlx+x4Iz27LHlfpeICE=
Subject key identifier: FC:83:DE:F1:AE:EF:13:21:9B:72:AC:EE:76:FF:69:81:44:4D:8E:06
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848037B3E0280470899D1F45480
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/645afe38-01a9-317d-8dfb-7a3572c02350.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 20115
IP address blocks: 68.117.160.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:3e:02:80:47:08:99:d1:f4:54:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=15929cde-53e1-4bd5-9041-bde497060b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:00:c5:07:39:d9:43:21:ea:d7:bc:eb:b6:cd:
f9:ac:61:27:e5:19:c9:2d:14:83:fa:e4:0c:6d:f2:
cc:7b:9a:04:45:35:a9:5e:23:69:c4:42:90:a8:55:
ea:78:2b:74:2a:82:95:a0:c8:ca:b3:71:ee:cc:e6:
07:d6:6a:ad:4f:58:da:8c:68:ee:c1:47:31:aa:ef:
33:7d:46:36:9d:f6:b5:78:65:57:2c:54:1b:43:ce:
88:d0:27:2d:26:6d:ed:19:26:70:d3:e9:33:78:86:
23:ac:b4:ab:98:f9:01:75:66:63:fe:a4:95:18:cf:
d9:22:68:2a:de:75:1a:a1:43:cc:7c:8e:c3:33:3d:
17:38:4e:cd:13:9d:74:41:eb:70:b3:91:b7:8b:a0:
6d:c3:a4:c1:f7:63:0c:6c:02:aa:32:a4:15:f5:80:
2f:9f:a2:5f:e7:41:04:04:08:24:76:6f:ac:fd:d0:
5f:23:7b:6d:86:a3:42:26:1a:f2:d8:24:d5:6e:75:
be:f7:dc:fc:a7:6d:e0:b2:b1:cb:2a:24:b9:40:83:
52:a7:fa:cc:a5:8e:70:96:f2:e3:23:32:62:21:21:
0d:0a:86:d0:f2:4c:78:fc:56:18:34:da:6f:77:21:
2f:cd:80:29:59:5c:35:e4:6b:eb:7f:e0:35:cc:ee:
94:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:83:DE:F1:AE:EF:13:21:9B:72:AC:EE:76:FF:69:81:44:4D:8E:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/645afe38-01a9-317d-8dfb-7a3572c02350.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
68.117.160.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:40:f5:54:09:76:1f:25:60:11:19:66:6f:13:35:0d:c0:3b:
85:d8:67:60:a7:53:e9:f5:f8:99:e6:0b:4d:93:e4:f9:27:31:
94:8d:b0:fb:de:fa:1a:c4:83:e7:0b:03:fa:75:fb:fb:f2:7d:
29:45:c4:3a:7a:dd:e4:90:9a:1d:2c:35:85:2f:39:49:b8:35:
9e:49:2d:78:55:ae:3b:b3:20:54:45:24:14:26:fb:ab:dd:94:
af:8b:52:83:84:e6:77:b6:0b:b9:59:2e:90:0e:d4:0e:66:ca:
4d:5e:40:b6:8a:93:3f:85:9b:a6:00:64:80:30:91:0a:8d:46:
95:12:19:81:ff:8c:4e:b8:d0:c0:1e:62:d0:4e:b1:5b:19:44:
52:0b:94:a8:eb:25:bb:2a:d1:9f:f9:4d:40:bf:ea:4a:86:40:
94:c7:51:2d:ca:35:b0:8e:65:a6:d2:55:fe:9f:87:28:dd:b8:
10:d5:81:9b:72:10:62:5c:53:02:a3:cd:18:0e:41:a1:fb:5e:
8d:cb:40:92:75:fb:b8:da:ca:c9:03:76:af:93:41:c7:75:e8:
69:e7:10:66:26:39:73:fc:73:f2:83:e2:ef:87:78:05:55:68:
77:4d:b3:5c:bc:0b:09:18:80:82:95:5f:b9:93:5f:f6:bd:50:
13:9b:a4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:51:29 2025 by rpki-client