Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b25feacb-c6d1-3f49-a001-45b463b7c6a8.roa
File: b25feacb-c6d1-3f49-a001-45b463b7c6a8.roa (raw, json)
Hash identifier: 8s+pWObD5NkkjwJ8Npx/+4/DXf6KohkPwBJg5fIy9bk=
Subject key identifier: 63:C0:97:BF:F8:DD:EA:11:27:7B:35:64:66:5F:CF:C3:44:FB:59:31
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848037B1A9A8AF57F60B9EA4BA0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b25feacb-c6d1-3f49-a001-45b463b7c6a8.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 20001
IP address blocks: 170.151.128.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:1a:9a:8a:f5:7f:60:b9:ea:4b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=a8900a7f-96cd-4533-9ee8-d668dd8ef00f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:54:70:0c:aa:57:9b:f9:97:df:ce:58:4e:81:
d3:91:7f:3d:a1:7d:2d:81:67:ca:79:16:a9:4a:e6:
4c:aa:62:3b:4a:4d:e0:52:6c:c9:3b:47:7c:98:8b:
08:39:22:73:06:47:4a:5d:a1:f6:b7:f9:43:f6:2d:
6d:cb:6d:c1:0b:92:44:5c:61:68:e7:cf:fe:04:26:
51:e8:96:a1:10:b9:ab:f0:0b:6e:ce:67:8c:26:ba:
6b:18:bd:4b:a9:90:89:16:d9:a1:ac:fd:c4:0f:b6:
05:b1:8e:7c:a8:d0:4f:9c:a5:f5:4b:7e:e7:9c:75:
3f:17:00:44:46:a3:93:3f:53:8e:88:39:d1:7a:69:
f3:7a:ba:a9:49:45:da:8a:3d:73:2f:9a:55:46:2c:
1e:bf:ea:44:2a:51:5d:82:c9:2b:fb:48:08:81:b7:
03:00:96:66:6e:be:2b:80:aa:bb:b1:e6:c5:a0:b1:
37:d6:a1:9d:9d:4f:69:e9:7b:17:b4:12:74:2d:4d:
8e:65:76:28:d0:ce:d0:fa:40:00:78:02:a9:67:bb:
6c:25:5f:2a:0b:64:e7:3b:be:c3:2f:68:eb:41:8c:
2c:06:e6:bb:e7:69:d3:10:53:57:ec:1f:28:1f:06:
f4:bc:6e:45:61:23:a1:c2:43:2d:54:e9:a7:76:ee:
5f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C0:97:BF:F8:DD:EA:11:27:7B:35:64:66:5F:CF:C3:44:FB:59:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b25feacb-c6d1-3f49-a001-45b463b7c6a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
170.151.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c0:e3:cb:b8:71:6c:1c:f0:f0:a9:bd:8a:9c:c0:08:28:00:f6:
a5:e7:30:39:f8:54:c8:52:71:5d:38:1f:78:79:1c:6c:33:85:
84:6f:d7:3c:47:59:4a:f5:fd:cc:ce:b0:97:78:a4:c9:8e:dd:
bd:a3:ff:0e:99:f5:86:a3:7b:f1:f3:64:9e:15:66:91:41:63:
18:a0:84:52:5c:13:8e:5f:81:b7:43:51:95:bb:17:bd:ba:fd:
b8:ea:4d:43:fd:16:6c:d9:10:32:2c:c4:f5:a4:4d:ea:7e:20:
6c:5c:56:cd:3d:d5:96:91:87:97:91:21:ef:98:aa:65:fe:5e:
c0:41:27:a7:2a:4f:f3:d0:6b:3f:63:5f:e6:12:48:04:03:d8:
20:69:e6:dc:6c:50:6d:2a:96:f4:da:9c:93:13:a1:91:d3:a0:
32:97:cc:07:3c:42:89:5f:f4:cb:f1:8a:2f:1e:ad:37:80:09:
84:13:2b:26:b9:e6:81:8b:28:40:ce:fd:ad:4e:7f:dd:5f:0b:
a5:26:d9:c5:91:3b:50:ca:e7:8b:bd:47:6d:68:8c:af:6e:c7:
15:28:02:b3:a7:5e:3a:75:ae:3e:52:2b:54:9f:4d:73:f3:1d:
8d:5d:7b:85:e8:af:72:43:a3:09:59:4f:fa:fa:d7:f9:36:bb:
5c:79:16:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:43:24 2025 by rpki-client