Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c8ab4a60-8b10-3451-9421-0d3ab5dc3a12.roa
File: c8ab4a60-8b10-3451-9421-0d3ab5dc3a12.roa (raw, json)
Hash identifier: gIGVMCjjstHlLgE5HOlQSLyu6VNI7xc6UiDOMV2M+oA=
Subject key identifier: 9B:C0:6B:A2:B7:4F:C4:68:F9:BD:2A:73:B4:97:C7:B3:C9:0F:A4:C0
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848037AC3290E9FFCBBD2EAAC00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c8ab4a60-8b10-3451-9421-0d3ab5dc3a12.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 20115
IP address blocks: 71.9.32.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7a:c3:29:0e:9f:fc:bb:d2:ea:ac:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=11efa88c-8aa8-44d2-9030-d0bb30af2002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:32:27:f3:ce:09:8d:40:30:ff:27:81:18:80:
62:96:77:a0:c0:c1:fd:28:40:ae:3c:f2:3c:e3:fa:
9c:4e:33:65:83:e3:d0:f2:28:a8:be:a9:5e:e2:0e:
5b:a7:58:46:a5:31:d2:3b:7c:a4:a7:5d:df:3b:7e:
96:7f:c9:8a:fc:63:26:27:e3:fa:21:65:e6:b3:c4:
75:8e:25:71:a4:25:6b:93:2c:2f:2a:e3:b3:d8:f4:
f3:f6:e8:ab:23:73:19:d3:bd:9a:bd:85:29:6a:d3:
96:11:e7:bc:dd:49:1f:c5:fe:0f:21:89:66:42:a6:
8f:bc:af:83:bb:14:55:34:34:44:de:3d:1e:c6:c1:
3f:16:6e:d2:96:93:b6:05:ef:6b:00:3b:d3:d1:13:
d8:34:fa:38:d4:e3:0c:ba:41:56:09:f2:bd:b2:53:
0e:4a:03:26:27:06:a2:44:7e:31:fc:95:b9:14:5a:
2f:57:9b:ca:67:85:76:c3:d1:d0:d6:de:6c:82:3a:
68:a2:a8:f2:04:a6:d5:ff:5e:fd:f8:b6:b7:09:12:
52:fc:a5:7c:c8:07:db:74:f1:f9:a5:62:26:5f:dc:
4d:f7:02:b6:7d:9a:90:3d:68:a9:44:11:7e:09:45:
12:d6:b6:3c:37:44:c1:2e:8c:7e:2a:c7:9c:cf:d4:
42:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C0:6B:A2:B7:4F:C4:68:F9:BD:2A:73:B4:97:C7:B3:C9:0F:A4:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c8ab4a60-8b10-3451-9421-0d3ab5dc3a12.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.9.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:8d:dd:b9:15:f2:26:f1:e8:d4:43:f5:8b:90:97:62:fd:32:
37:97:77:14:02:01:4b:1f:37:ee:8d:09:46:aa:57:a8:81:d4:
31:bb:2f:ea:cd:07:f2:8e:06:06:3d:67:70:f2:17:86:6f:5c:
44:d2:84:fb:25:94:27:1f:f0:14:c9:f3:48:38:ea:2a:f6:e4:
c9:92:bf:9c:8c:15:4e:07:73:ea:72:e3:04:13:14:da:49:96:
be:39:4d:2a:4d:43:43:c3:69:f4:a7:cb:ba:fd:72:34:ab:b0:
05:29:e7:30:0b:32:e7:2e:c7:e5:f7:df:b4:e4:4f:44:c5:e3:
86:40:2e:20:67:c3:92:64:06:95:29:75:df:1b:e8:e6:b3:55:
ea:1e:8b:00:93:62:15:0d:63:be:cc:97:62:df:9d:d6:13:77:
63:6b:09:95:1c:9f:b2:5d:5d:a6:cb:63:71:15:3d:d8:61:04:
0c:35:bc:ce:c5:95:56:64:6a:29:e5:d6:3e:89:9a:44:91:b4:
86:89:8a:dd:14:c5:92:40:94:56:2c:49:35:48:c6:e2:96:bb:
75:40:f7:4d:b8:27:f4:e2:fc:24:04:d9:ea:e3:ea:11:f8:f4:
7b:5d:e6:81:2f:3f:e4:e0:3f:df:e3:7a:d2:89:e5:48:26:2d:
dc:2a:b2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:25:33 2025 by rpki-client