Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c5219478-4150-3efc-b41e-7b4c3af4cdbd.roa
File: c5219478-4150-3efc-b41e-7b4c3af4cdbd.roa (raw, json)
Hash identifier: we1atTKBOoSPbSBeJ8LiErCJHvTbrIMGrxikUITbCW4=
Subject key identifier: 25:15:1D:50:D9:71:A7:9F:C2:B7:FB:68:96:39:5F:60:2F:D9:20:AF
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848037AC2F7B8970983F4D00F00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c5219478-4150-3efc-b41e-7b4c3af4cdbd.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 20115
IP address blocks: 71.9.112.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7a:c2:f7:b8:97:09:83:f4:d0:0f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=d41234e8-54e4-4ccb-9b0b-d203ed5c2224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ce:3f:a1:c5:4b:6b:2a:7f:49:a2:91:1e:cc:
5a:f0:e0:76:36:01:ee:2b:9a:f6:56:c9:8b:d3:37:
89:fb:c3:ce:de:24:44:10:9e:35:c1:81:cf:c4:82:
87:9d:74:4d:dc:fb:85:1f:dd:e1:f8:c7:5a:c7:b7:
cd:dd:b1:0b:0b:4a:7a:d5:3d:12:8f:19:96:a6:cc:
bb:1a:84:8c:bb:75:25:9b:96:a0:9a:93:05:77:48:
f3:51:aa:08:25:a3:c8:6f:c6:3e:fe:1f:b8:79:75:
6f:ca:af:59:62:1d:db:bd:e2:b9:0a:d3:9c:25:bc:
9d:9c:32:e1:6e:24:73:68:ef:68:78:71:92:ad:98:
94:b3:54:5c:d6:c8:46:4f:02:a2:76:56:1c:d8:40:
95:e3:30:82:41:8b:8a:ee:01:0c:ce:9c:42:c5:d9:
f3:b2:e8:26:bd:a0:d4:a7:a9:04:68:17:c8:de:75:
fd:c2:7a:91:d7:ee:84:d6:0a:70:dc:bd:d0:cd:20:
b4:44:00:bf:cd:92:dc:c1:6f:bc:fd:42:9f:2e:b0:
e7:03:5f:f1:8d:b6:e5:c2:b5:f7:97:70:2a:6f:5f:
c0:3f:62:2f:dd:76:e7:11:33:39:78:44:02:00:40:
a8:17:3b:77:c9:49:a1:c7:28:9b:e9:d4:78:a7:1f:
71:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:15:1D:50:D9:71:A7:9F:C2:B7:FB:68:96:39:5F:60:2F:D9:20:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c5219478-4150-3efc-b41e-7b4c3af4cdbd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.9.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d0:59:b9:59:e5:e1:78:a9:d3:ce:d8:60:41:40:b8:2e:6b:0a:
8d:a7:f9:da:10:93:2a:42:22:7e:64:10:fe:59:e5:27:be:68:
ec:60:8b:21:06:47:bd:7f:7e:03:b7:87:5b:92:e7:75:de:33:
39:7f:4d:91:bb:bb:26:ce:bb:01:90:e4:f8:d8:bb:42:96:60:
61:e6:28:4a:3c:c2:b8:21:b0:c5:a6:a0:30:40:d9:1f:d9:60:
6a:d9:4b:4e:10:4f:d8:3f:45:18:56:62:3e:51:a3:1e:fb:56:
8b:f5:c5:a6:a0:eb:47:a2:00:38:fa:12:c8:91:09:12:c7:97:
3e:b7:42:86:7b:5e:f1:91:20:5f:6a:5d:0c:6f:ef:de:e6:b9:
5b:a5:c6:9a:24:20:b3:c8:8d:f8:ea:79:d6:46:25:89:ec:89:
0d:36:9a:53:93:da:58:b4:51:aa:61:b3:9e:7b:72:49:d3:a4:
e6:9e:02:32:d0:4b:4c:4e:cc:c0:94:ec:82:c8:2a:07:14:0f:
bb:f7:a0:47:67:0c:1a:a1:a0:0f:d1:ed:7d:1e:5b:aa:b7:8e:
48:93:01:56:72:c6:79:ca:dc:ad:e9:a9:66:cc:76:bc:8d:c6:
ca:1a:33:be:63:82:ab:d4:63:59:de:54:fb:78:a6:a5:0e:a0:
c9:5c:38:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:19:53 2025 by rpki-client