Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d3fac9e2-6989-36fe-a9d9-5c9ac98733f1.roa
File: d3fac9e2-6989-36fe-a9d9-5c9ac98733f1.roa (raw, json)
Hash identifier: JY1ib3b5xYQhCjXvA3HZrTmhrZVWCSbP27SeR9AXMco=
Subject key identifier: 44:5B:CE:75:D9:02:05:33:FA:17:A1:21:1A:3E:50:A0:49:7E:73:55
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848037B420BC1B4FA748F67F480
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d3fac9e2-6989-36fe-a9d9-5c9ac98733f1.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 20115
IP address blocks: 68.191.0.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:42:0b:c1:b4:fa:74:8f:67:f4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=3588ade0-1374-4464-9951-4bf4f517488e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:31:19:86:e8:3c:af:75:a5:39:3b:1f:3c:ee:
a4:20:f6:61:8d:03:06:17:92:e4:1d:11:7e:4b:ca:
5d:25:d7:2c:40:64:0f:54:57:05:37:ab:e8:89:ab:
0d:f4:fd:19:16:86:4f:85:3a:be:17:84:37:2a:2c:
54:14:ce:11:50:98:a2:3b:9e:c2:f6:df:99:26:24:
36:4f:62:7f:e7:7a:77:cf:68:97:37:7d:1e:32:75:
80:66:96:a7:8e:e1:71:9f:c2:2a:7f:0d:50:b3:48:
29:e8:8a:74:9b:0b:aa:ca:32:e9:bb:4e:b1:54:c3:
71:2a:9b:13:3d:4f:ca:34:f1:ba:8a:23:d3:ca:f4:
49:0d:b0:92:56:00:1c:8f:50:14:61:1b:4f:9a:55:
ca:fa:47:b5:e8:39:ea:8a:00:c9:98:a6:dd:cd:7f:
1f:83:fb:86:b6:c3:d4:5a:fa:7c:c0:50:bc:6c:a4:
df:34:be:45:be:ea:d6:b4:c2:02:bb:2e:79:aa:57:
f1:ea:c6:96:0b:b7:16:8c:af:6e:3a:ec:5e:82:d4:
30:39:84:b8:e1:e5:1f:b5:39:7b:c2:80:b8:39:ef:
8c:dd:13:d4:4c:08:23:46:dd:ae:8c:bf:95:a1:50:
8a:62:4e:98:ff:0f:dd:21:21:7f:ac:ad:ab:2f:46:
05:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:5B:CE:75:D9:02:05:33:FA:17:A1:21:1A:3E:50:A0:49:7E:73:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d3fac9e2-6989-36fe-a9d9-5c9ac98733f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
68.191.0.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c8:ad:7a:01:5e:34:cd:3f:fa:97:d6:fc:03:be:09:7d:a1:43:
65:aa:2e:df:1e:e4:c3:71:11:ae:ba:6e:34:f2:c3:1a:de:d6:
14:7a:78:c3:37:de:8b:9b:b8:a9:e6:a0:b8:9b:0e:5c:0f:c2:
18:c0:1f:75:18:af:1e:eb:23:e2:3d:44:54:fa:fa:19:70:f5:
78:80:cf:c7:1d:86:d0:ba:a8:0b:2f:0a:b5:11:18:41:22:45:
52:d6:91:ed:0e:9c:cc:86:0a:16:60:29:22:1e:87:79:8a:76:
93:d7:8e:ca:68:8b:4f:b5:59:7e:09:64:19:21:c3:45:c3:98:
5e:5b:a7:4d:0e:9d:67:0e:22:ef:9e:0a:63:27:ed:1c:08:26:
39:64:74:c3:b7:0a:25:b6:89:6e:d7:5e:83:5e:b7:39:7b:80:
68:df:3d:2b:b1:20:ff:dd:76:af:72:8e:cd:98:b9:a8:56:c6:
58:a9:0b:61:d8:0c:c2:5c:43:31:c6:ca:b4:b2:e6:dc:3f:38:
14:4e:a8:59:92:5b:9b:76:f2:6a:67:be:e5:65:4e:bb:32:27:
88:67:c0:59:74:f3:e6:6b:79:03:8e:de:1f:82:04:44:18:ff:
06:48:4e:ba:1b:5c:15:0a:4b:60:26:57:00:d7:a9:99:72:68:
0b:4f:f7:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:28:28 2025 by rpki-client