Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/924c7cef-503b-399b-b9d7-08e6b515abbf.roa
File: 924c7cef-503b-399b-b9d7-08e6b515abbf.roa (raw, json)
Hash identifier: DJw9ProqX6qj/d5kYBsX9wbl9WqQ+tz6wBWUFz8v+Ww=
Subject key identifier: 32:3E:EF:72:07:0A:82:7C:BD:77:06:9C:52:28:F0:EB:3C:7B:55:3E
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848037B36B4CCB6592A23DD6A80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/924c7cef-503b-399b-b9d7-08e6b515abbf.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 20115
IP address blocks: 66.188.96.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:36:b4:cc:b6:59:2a:23:dd:6a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=eefdd9b9-94c4-4457-bb60-a6e5846887f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:6f:63:af:2a:bd:92:19:df:f0:cb:7b:91:7a:
d8:f2:0f:eb:c7:0b:82:11:7d:e3:ec:7d:a9:2d:65:
d1:4f:96:d6:1f:f0:8c:71:5e:aa:56:75:31:9c:cd:
f6:82:f1:e0:67:9f:5f:e4:ab:1a:c6:c3:89:fd:b2:
36:79:25:f3:e2:ed:d7:96:6f:55:3c:c3:46:ce:cf:
85:0c:62:37:97:f3:95:5b:c2:9c:4a:66:f3:44:7c:
40:0c:24:a2:2b:a9:b4:3d:e5:eb:7d:09:26:66:c4:
a5:12:9d:2b:bd:f2:41:47:bc:73:8f:e2:3f:88:22:
7f:75:33:44:6f:00:68:46:6d:2c:a3:cc:7a:69:72:
d6:0c:e4:1e:a7:36:d4:69:7c:d6:7c:54:13:93:47:
b8:ea:ac:30:1f:43:9c:4e:06:ea:57:a5:12:d1:43:
4b:f3:69:3a:8b:1b:13:02:bf:b5:85:61:89:2d:8b:
d5:80:04:20:a9:d4:f5:87:d7:c0:84:4e:89:ed:f1:
06:e7:73:0d:ec:2d:6e:8c:54:24:2e:14:4e:8a:58:
59:cb:04:f4:01:15:23:ab:e6:5b:97:f4:24:0d:3f:
70:90:a5:04:3a:d7:5b:8b:a3:68:a1:9b:c7:92:1a:
c4:4c:f6:02:02:f2:a2:f0:5c:55:5e:19:9d:61:d2:
b5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:3E:EF:72:07:0A:82:7C:BD:77:06:9C:52:28:F0:EB:3C:7B:55:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/924c7cef-503b-399b-b9d7-08e6b515abbf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
66.188.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:e2:c2:bb:19:32:32:b5:03:59:96:ee:21:e5:2d:eb:8c:d7:
b4:6b:f3:ab:79:8f:4a:d0:2c:c5:ba:c0:53:52:1b:bf:8e:36:
ce:12:7f:b5:42:19:ba:ff:f7:f1:b9:d1:ee:a3:0c:75:90:bc:
f7:46:ee:8f:ea:26:02:c4:c2:bd:39:74:4b:1e:b1:97:8e:2f:
79:f8:9f:ab:0a:93:a1:9d:cf:c2:92:41:4b:bb:1f:70:68:dc:
b2:a8:05:a5:68:8f:c5:f0:22:b6:76:77:87:7e:c6:8d:db:ea:
79:5d:5d:bb:e1:17:61:14:7a:7a:05:ae:25:14:36:7f:dc:62:
07:47:e8:b3:9c:29:02:92:8f:8e:21:59:d0:36:84:03:85:6a:
b1:ef:ca:7f:2d:81:8e:94:dc:c9:7d:28:0e:3f:6c:4b:b7:c0:
c3:45:fb:8c:69:80:a9:7c:e2:6b:63:05:60:b8:aa:30:8d:9a:
67:d1:ad:c5:ea:01:83:22:9a:5b:25:56:d1:97:35:13:23:a6:
4d:35:99:1f:2a:3f:7f:3f:fc:2e:8f:5b:e8:b0:37:87:31:b9:
a2:d5:66:77:0b:37:7b:22:a5:f0:84:8b:fa:cd:82:c2:88:37:
22:09:a6:57:7b:4b:45:98:06:f5:32:1d:69:64:96:c6:0a:ff:
b8:6b:58:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:28:37 2025 by rpki-client