Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8f5e1ead-d580-3cde-825c-58796930a302.roa
File: 8f5e1ead-d580-3cde-825c-58796930a302.roa (raw, json)
Hash identifier: 15lzIcY/TXVRg9rmzjc2Mv6LwOnIVgE5E9/L6IXGGQ8=
Subject key identifier: 5A:E6:C8:F4:58:6F:31:20:E6:19:15:63:26:24:A7:9B:97:00:23:29
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848037B40F2EF84D0C65485F540
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8f5e1ead-d580-3cde-825c-58796930a302.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 20115
IP address blocks: 68.118.20.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:40:f2:ef:84:d0:c6:54:85:f5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=c3f332de-fef0-4e33-bfa2-bfafb8d59d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:21:1f:13:43:49:8c:70:7c:37:5d:97:16:5a:
5d:3e:06:8d:16:9b:25:78:15:08:86:50:a3:79:ba:
f3:fc:58:17:7a:22:1d:06:2e:85:92:2a:96:d8:4f:
77:d8:8a:73:ec:01:12:78:3c:6d:66:be:59:c5:c0:
06:b4:b9:59:2c:4d:ee:43:99:25:a1:28:a0:60:4c:
b7:02:95:7b:4f:e3:7c:0a:d8:b8:6b:3c:a4:65:73:
16:07:7c:13:99:2c:2b:5f:1d:4c:8a:bd:bb:f2:13:
2a:64:c2:1f:02:e5:34:54:46:26:23:e4:53:27:cc:
7e:1f:22:e4:c8:57:01:e0:7a:60:6e:f7:a9:44:f6:
bb:bd:41:86:3d:72:e9:af:50:8b:46:60:ff:5b:03:
38:26:be:c8:de:11:d8:0d:0f:66:d8:e2:83:46:c1:
18:51:16:a8:dc:a2:6a:bb:42:7e:a7:ca:5e:45:a4:
2b:11:2f:e2:57:e4:03:8e:c1:ee:0e:bf:d4:58:3f:
82:aa:46:f6:d8:a6:88:f2:cc:c1:28:47:11:e2:90:
a8:1f:a5:1a:8f:e4:42:b5:f5:d5:69:0e:31:18:f2:
83:c2:3f:e3:6e:cc:3c:77:74:8f:14:a8:30:b9:58:
5a:f8:e0:38:4e:59:2a:00:15:28:63:0e:d4:ed:76:
2e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E6:C8:F4:58:6F:31:20:E6:19:15:63:26:24:A7:9B:97:00:23:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8f5e1ead-d580-3cde-825c-58796930a302.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
68.118.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:81:18:c9:96:88:38:c5:58:30:df:e8:a2:a6:f7:cf:e8:c8:
36:17:6c:8d:57:12:63:38:42:f9:71:94:d3:88:b3:8b:eb:31:
b9:ee:9c:ca:85:ab:54:bf:22:09:d0:7d:a4:b9:01:05:82:74:
56:a0:26:10:d0:d5:47:8f:d2:92:99:76:7e:c5:67:11:16:4f:
3b:79:d5:0b:09:41:04:8c:c6:1b:87:3a:18:50:00:3b:66:2b:
33:98:5a:dd:16:41:bc:67:b1:ed:ba:78:f1:ee:18:22:6f:34:
04:68:fd:9e:88:04:f0:80:78:d1:c6:62:ce:bc:a0:b5:e5:8e:
0e:72:6e:4c:30:dd:5d:1c:42:5e:d9:a8:b8:69:54:60:84:9f:
fc:46:d3:ad:3b:a5:71:d5:52:98:c6:52:a9:56:33:d9:41:3c:
78:8c:db:19:65:bc:a3:7e:9e:df:62:f9:bc:63:f3:8f:39:ac:
5d:fc:fa:db:92:c8:2b:69:ed:86:15:b6:e1:a4:91:ab:56:a1:
3a:2c:65:23:c5:a8:f2:9e:7e:51:8c:52:eb:c6:11:cb:ea:63:
71:07:af:d4:80:63:38:07:53:32:63:e3:78:60:0f:01:82:c4:
3d:03:3d:9b:73:9c:90:59:1c:96:3f:ea:21:f1:65:7f:71:2d:
f2:fb:5e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:55:27 2025 by rpki-client