Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9caa7aa3-b255-3974-b8be-616a9cf7b8f2.roa
File: 9caa7aa3-b255-3974-b8be-616a9cf7b8f2.roa (raw, json)
Hash identifier: gNHUi81Cz/+YwqPEYmE/FbRtNYYLOe7uYu+tlBszpnM=
Subject key identifier: 70:5D:02:41:98:C8:70:54:33:3F:DE:E0:D2:95:12:95:50:6F:86:90
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848037AC0AB86EE2DF7BC73F8C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9caa7aa3-b255-3974-b8be-616a9cf7b8f2.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 20115
IP address blocks: 68.189.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7a:c0:ab:86:ee:2d:f7:bc:73:f8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=36e77f7a-a6a4-46c7-82e3-df38b5b3f0b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f7:f7:1b:78:3c:b8:72:4b:15:e0:fb:a3:4e:
7b:89:f5:a0:89:43:67:a1:2f:15:33:38:2a:88:a7:
46:3e:2e:a4:b6:fe:b6:c2:f6:05:f7:f9:0c:35:70:
d1:6e:01:bc:f9:f3:f8:89:75:49:d7:73:22:d1:82:
82:d0:2c:26:c3:61:bf:93:5d:1f:98:1f:22:89:45:
51:f2:92:8f:af:28:06:3c:65:29:a0:11:fd:f6:18:
48:d2:31:4c:d4:fc:77:89:b6:fb:d5:a8:f0:a3:4a:
d4:e7:cf:03:96:68:f0:d2:21:ce:52:a3:86:0b:c9:
5a:12:4c:ae:15:9a:32:3f:c8:c8:b7:ce:f6:3f:f4:
a8:74:c7:4b:9f:0a:ed:37:95:bd:5f:44:75:7f:5a:
db:9e:e8:8d:84:6d:c4:5d:cf:d9:1c:45:51:ff:1a:
ba:46:f5:3c:98:e2:3b:63:d8:9e:34:ae:19:62:d9:
a5:dc:34:bb:f4:c9:14:b2:e2:34:e9:bb:4d:90:46:
9f:e6:eb:61:58:06:95:f8:9a:b0:f3:b2:8d:6d:8d:
12:f9:62:06:ab:e2:96:a0:d2:94:af:5f:23:93:ad:
b0:db:f4:6e:0c:b0:be:ca:8f:67:3a:58:0a:5d:df:
ab:09:9f:75:99:c4:dd:ac:80:e6:6c:10:11:ff:ec:
4e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:5D:02:41:98:C8:70:54:33:3F:DE:E0:D2:95:12:95:50:6F:86:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9caa7aa3-b255-3974-b8be-616a9cf7b8f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
68.189.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bc:fc:cd:56:ec:23:67:33:56:9b:a9:9e:14:cb:71:b2:9b:7e:
a9:0b:f0:77:a6:ae:b0:06:4f:3f:12:1f:a9:9b:97:5c:11:94:
53:8f:9e:9d:17:eb:43:e2:7e:1c:43:18:cd:33:b9:f5:9c:cc:
77:1e:27:15:9c:18:22:97:8f:fa:cb:17:bb:36:5c:c1:7a:d3:
6c:d4:aa:83:49:62:8a:d7:a7:7c:c4:e8:5d:e8:90:1f:52:13:
79:52:a9:1e:57:8c:d1:2a:f6:43:5b:5d:df:27:5c:05:98:6f:
12:ca:b8:fc:94:cc:1a:dd:a4:26:3a:0a:c6:f2:f7:78:1b:42:
82:7f:9a:92:5d:51:c8:56:f6:4f:0b:c8:29:9c:81:11:71:4e:
1b:6a:38:27:1b:90:ef:2d:e7:81:d1:c6:1c:41:a3:5e:5b:32:
79:e8:a9:2c:42:ce:35:fb:13:3c:e9:c8:cb:dc:6c:99:75:55:
32:d4:35:21:75:bc:5c:c2:07:54:a8:be:c6:f3:6b:7f:3b:de:
d1:9f:4c:c2:74:e7:c6:50:88:a7:a0:36:ff:38:c9:89:38:da:
8f:3c:38:a4:c7:5c:4b:d1:c9:cf:90:fe:ae:73:f1:a0:a0:76:
d2:36:65:29:9f:b1:cf:7f:4c:22:27:8f:0e:4a:09:dc:31:a1:
2b:76:98:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:33:28 2025 by rpki-client