Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/89b4b5fb-f0f5-39a1-b7a0-55b7057db622.roa
File: 89b4b5fb-f0f5-39a1-b7a0-55b7057db622.roa (raw, json)
Hash identifier: XBfWi+7J3CWJh/YhKprbR49oQz7Tf1Owzhb3hAC76Uw=
Subject key identifier: A1:20:51:99:E8:99:81:B9:CF:AD:1A:8C:38:4C:00:24:94:9C:91:33
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848037AC108C42CF8D416C8D680
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/89b4b5fb-f0f5-39a1-b7a0-55b7057db622.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 20115
IP address blocks: 68.191.160.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7a:c1:08:c4:2c:f8:d4:16:c8:d6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=3a95290e-4d9c-41f5-b883-9b4c7748d756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:9f:cb:b2:a5:4a:09:01:b6:d1:ad:36:52:03:
0b:2b:e5:4f:f0:ef:dd:fb:35:44:64:13:e6:9b:1d:
5e:e1:3f:27:8b:94:17:e5:69:cf:bc:89:7e:42:c7:
db:66:1f:88:12:eb:aa:86:5a:27:fa:3b:60:37:73:
e5:1b:be:0e:f7:1b:f4:1c:75:ef:c6:1c:e2:bc:96:
eb:7d:88:79:0a:4a:52:fe:f9:9c:fd:f8:24:94:52:
39:67:32:71:90:f4:2c:85:87:fa:36:14:5c:9c:f3:
eb:f0:40:29:22:af:bf:3a:88:48:e2:dc:7e:56:c2:
00:49:0d:2c:2a:9f:f6:53:22:56:64:c2:fa:2d:e4:
8c:d7:b2:fb:f4:03:e3:fd:e6:e6:95:8e:56:f0:8b:
28:0f:68:7b:54:a1:2e:59:fd:d8:59:b0:09:52:ab:
56:58:26:7f:26:f0:85:f5:12:d4:be:a3:a4:14:28:
09:9d:57:c4:13:4c:da:9e:b8:07:9c:76:78:cd:7e:
1c:93:34:a2:c4:b7:60:d1:03:f5:94:fe:ab:6a:d5:
20:05:62:d4:97:2b:83:8a:4e:f7:38:54:e4:a9:f9:
b5:7d:00:16:7a:64:12:05:cd:8a:4b:3f:37:3b:17:
77:11:aa:80:00:b3:0d:7b:09:38:52:07:37:fa:b6:
72:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:20:51:99:E8:99:81:B9:CF:AD:1A:8C:38:4C:00:24:94:9C:91:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/89b4b5fb-f0f5-39a1-b7a0-55b7057db622.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
68.191.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:85:14:b3:d9:bf:2b:b8:6a:50:58:94:41:d2:49:5d:fd:c1:
26:c1:08:9f:4c:1f:c2:47:0c:a8:16:ac:87:0f:4e:5e:1a:6f:
09:82:89:34:72:77:09:d1:c6:09:43:1c:26:79:e2:ea:b6:fd:
f4:3d:2b:3b:8e:13:7b:0b:49:77:e1:0f:5d:64:6e:6e:5d:5d:
18:43:23:71:72:d3:db:51:1c:4b:03:06:e1:58:67:32:3e:7e:
3c:c4:13:78:8f:2f:e2:f6:fb:80:7c:ae:cb:f4:4e:26:c4:54:
32:7c:93:67:11:15:68:3b:26:a2:63:24:0e:c8:6a:0e:7b:62:
e6:6f:70:5a:db:9b:1d:a6:8c:a0:61:e0:7b:04:ea:12:73:43:
85:1b:0d:a4:52:85:d2:a2:ef:e3:a6:6c:0c:1a:11:56:bc:de:
da:0d:94:5c:e9:42:24:7b:26:03:eb:3b:b0:fc:c4:c7:3e:f5:
45:f1:c7:f3:58:0a:90:e4:a7:af:86:05:83:49:f1:be:91:3c:
f6:7b:e3:fa:2f:58:18:ff:ba:35:44:ba:94:ed:52:93:34:ab:
9f:1f:94:d5:0c:31:ef:78:4f:59:74:13:83:9a:e9:53:7e:2d:
23:af:93:70:37:f8:ff:d7:13:f4:e7:84:54:4d:59:18:a7:3f:
53:a6:5d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 06:05:27 2025 by rpki-client