Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ce0e4a7e-c4eb-3b2f-accf-ab8a4d2ad258.roa
File: ce0e4a7e-c4eb-3b2f-accf-ab8a4d2ad258.roa (raw, json)
Hash identifier: MzwDb+j9bv6w8mMS2CbjJqtB8GFVQxt2RN4jhGx+Xwc=
Subject key identifier: 96:A5:E4:B2:C5:9E:FC:22:66:19:6F:A6:15:48:D5:27:1F:6A:AB:48
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848037B21A95F37D66898E0E4C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ce0e4a7e-c4eb-3b2f-accf-ab8a4d2ad258.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 20115
IP address blocks: 24.158.208.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:21:a9:5f:37:d6:68:98:e0:e4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=36b30826-f00d-4e7b-9438-e4bb15bf8842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d3:f8:8f:03:0a:ea:dc:52:61:48:90:83:86:
20:16:d0:43:d2:d1:fe:3b:a9:37:2c:63:33:04:da:
43:6f:43:01:01:8a:75:21:8c:87:ff:61:20:9a:44:
e0:10:84:15:b3:0a:8e:cf:c4:7e:f3:01:1d:3e:be:
48:57:d2:fc:f2:66:cd:b9:ea:e8:e5:40:27:c4:c2:
61:5c:2c:18:9e:9c:41:dd:38:1b:c4:34:ef:fd:cb:
bb:8c:42:45:9e:d6:7a:0e:ee:f9:05:61:e7:4c:74:
a1:a6:cd:72:8b:be:9f:e9:fe:c1:43:bf:1a:55:14:
40:06:bd:a2:fa:fb:2b:9b:ac:a7:fb:59:95:cd:e4:
a3:c1:7d:b2:93:cd:3a:1c:93:05:d9:f5:6e:e3:11:
c7:89:69:36:08:51:fd:5c:8c:0e:0d:b8:c3:c8:b4:
6e:52:b9:b1:dd:e2:37:0a:40:1a:8d:58:06:c2:55:
e5:12:b6:af:70:2b:13:f7:6c:a8:fe:8a:ff:49:64:
0c:15:13:9e:b8:3d:a5:cb:a3:e8:19:0b:6a:d1:ed:
ba:29:41:a7:80:90:2e:0a:61:21:d2:85:41:ae:3c:
04:93:d5:07:41:41:d9:72:99:7b:71:36:4f:8e:ae:
c1:01:be:75:20:5d:21:47:28:2b:01:dd:56:eb:82:
8f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A5:E4:B2:C5:9E:FC:22:66:19:6F:A6:15:48:D5:27:1F:6A:AB:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ce0e4a7e-c4eb-3b2f-accf-ab8a4d2ad258.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
24.158.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
db:37:60:e3:2a:4b:90:4a:1d:bd:da:73:4d:02:f6:8c:c6:46:
9f:4e:b1:35:23:02:ed:f1:1e:09:18:78:54:5e:1f:26:77:42:
a0:cb:fc:ef:00:f4:7e:06:4f:d1:39:ed:95:c8:2f:d6:cb:e1:
9d:c2:50:fe:b5:5a:11:fb:cc:4a:66:3c:da:96:43:a3:89:d0:
e2:3a:f9:00:c7:95:1f:70:b3:33:87:71:cb:7d:d5:22:8b:d7:
54:68:52:58:6b:6c:33:cb:b9:61:76:b2:6a:f6:e0:9f:3e:b0:
70:bf:e8:a1:ec:a7:81:33:a5:77:a7:91:3f:c4:b9:a9:82:3f:
2d:6a:d5:75:c0:ad:5f:18:48:05:ee:fa:a5:9b:1f:9f:1f:03:
0d:8c:e6:b9:c0:7c:a8:55:a3:66:97:87:e9:19:b1:6f:c4:9c:
15:06:23:f5:ee:cc:7a:ba:05:2f:00:87:60:9c:2e:8c:a8:fa:
88:8b:22:15:d1:6b:3b:df:94:a1:55:e1:67:7c:52:24:46:1a:
91:e4:94:74:22:dc:b5:5c:ac:93:08:b8:02:11:df:d9:3f:f8:
ca:2d:17:89:f7:86:f1:fc:e8:cd:c0:f9:8b:04:64:cb:b5:62:
45:50:b0:eb:ec:b7:c0:34:14:e8:7e:9c:7a:e2:49:90:e3:ce:
39:2b:ff:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:22:09 2025 by rpki-client