Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a1ecb0c9-28e2-3d5f-a224-63f69c3a6b3b.roa
File: a1ecb0c9-28e2-3d5f-a224-63f69c3a6b3b.roa (raw, json)
Hash identifier: lnMCcIRBuKrdV4c0nJxAbw+oIgHnD910tHaIiLQ4tzc=
Subject key identifier: CB:5A:F2:10:95:1F:42:0E:07:50:05:2B:FF:A0:0D:3C:22:D4:31:B0
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848037B5DBDE01BFFEF668C7D80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a1ecb0c9-28e2-3d5f-a224-63f69c3a6b3b.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 40640
IP address blocks: 71.94.212.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:5d:bd:e0:1b:ff:ef:66:8c:7d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=21fe460c-087f-43b2-bfca-30c3180253a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0d:48:8d:ff:5d:ff:c4:24:a0:b4:c9:5c:65:
d7:23:c9:b2:a1:42:21:a6:a5:c5:99:24:97:8b:24:
47:48:a5:da:3f:66:25:72:5a:fa:57:eb:ff:ef:1e:
cf:3a:16:8b:0e:e2:45:67:ab:a3:a9:e9:86:38:d7:
9e:e6:73:cd:b7:e5:93:78:20:89:1e:da:1e:ff:20:
29:e1:70:6d:69:a1:ab:45:32:34:fe:c9:c5:7f:a1:
1d:cf:c8:0e:45:e7:19:dd:35:ff:b8:04:db:7b:b0:
30:97:60:7e:8e:23:4e:67:df:d7:fe:6d:c7:84:1c:
2c:b4:5b:b6:e0:c6:8f:bf:de:e2:6f:a5:50:cf:96:
f2:36:9d:43:d2:a9:9e:1c:ca:d2:24:72:00:01:73:
2d:bd:44:49:23:53:f2:7b:0f:53:3f:83:dd:49:ac:
f3:72:cb:3c:11:93:03:75:40:62:08:21:3e:a1:ea:
37:9f:cd:68:3e:73:d9:89:33:03:32:3d:88:8b:43:
34:7b:66:6b:be:70:f8:07:23:37:3e:82:f4:39:10:
45:a0:25:7f:98:dc:e5:99:9f:3c:74:7c:54:fe:65:
a3:ca:15:19:b9:12:85:1c:0c:15:09:83:f6:1f:81:
b0:5f:2c:82:8f:07:50:1e:e6:93:f6:18:a4:5c:83:
70:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:5A:F2:10:95:1F:42:0E:07:50:05:2B:FF:A0:0D:3C:22:D4:31:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a1ecb0c9-28e2-3d5f-a224-63f69c3a6b3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.94.212.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:5c:5f:46:3d:9d:b2:ba:87:81:f0:d8:14:62:7d:6c:5f:7b:
73:b7:a4:3e:a5:e4:f7:85:cf:d0:97:28:78:45:e6:bc:60:dd:
d1:88:78:44:7f:1d:16:98:e8:d7:73:5c:f3:6e:b5:c6:5b:3d:
77:5f:f2:71:14:49:18:d7:7c:7b:ab:2b:c6:62:0c:bb:c9:71:
76:4b:16:69:d2:5b:2f:02:49:fa:46:f4:08:20:a4:0e:59:ec:
1d:9d:b2:94:d6:45:58:45:d9:91:63:6e:e9:b0:2e:b1:53:4f:
1d:62:1e:7b:5d:e5:97:9b:ec:a6:0d:f1:24:b0:71:30:d7:95:
45:c9:c7:e2:79:f3:ae:42:94:21:bf:6a:0b:1e:17:37:da:ce:
88:16:4b:fa:c1:ad:c7:aa:0a:61:df:1b:0b:0a:70:28:82:15:
82:52:de:d5:90:cf:fb:50:97:e2:a6:51:93:09:db:93:73:b1:
0b:b8:67:1a:1a:19:c4:0e:2b:33:e6:cf:1b:2a:4e:3a:58:90:
bd:83:63:f1:37:59:8f:88:ab:4d:cc:1f:b3:a1:95:8c:77:c1:
42:c9:8c:28:94:d5:cd:32:52:fe:9a:26:c0:74:d9:a7:37:f9:
a7:6d:98:8f:32:6f:ac:d1:b3:7d:5d:53:a8:a5:92:ca:8b:7c:
e8:c2:e5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:27:23 2025 by rpki-client