Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d4129406-dd3e-3148-ac93-7b555346075c.roa
File: d4129406-dd3e-3148-ac93-7b555346075c.roa (raw, json)
Hash identifier: 1zJX0znTbXAnU6vXm5QB3rHE0OwdzHv7rs6n3IW0nl8=
Subject key identifier: 5F:CA:04:02:9D:B9:5F:E6:FB:D1:F5:3B:62:7D:DE:CF:F9:74:92:6F
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848037B38E920B84B3FC642EB80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d4129406-dd3e-3148-ac93-7b555346075c.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 20115
IP address blocks: 159.235.128.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:38:e9:20:b8:4b:3f:c6:42:eb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=8290e42a-1912-4a84-8b07-42a5357a0b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a9:85:19:2b:fb:f9:76:3f:41:15:65:b3:1f:
ab:84:95:5a:be:69:88:b6:35:9e:96:73:63:22:8f:
9d:51:87:d2:ca:b9:91:77:24:31:ff:5c:2d:91:32:
bc:d7:d7:e7:39:7a:3f:97:16:1f:1c:61:73:19:f5:
3c:05:e1:5e:a4:ab:a5:75:35:97:9d:a8:fe:a8:6b:
1d:ea:5a:8d:38:d1:bc:ad:95:3d:95:e8:c6:92:f7:
e8:2f:ab:fc:96:24:34:b3:ce:d4:44:be:68:fe:6a:
61:32:d3:09:92:97:4c:eb:75:0c:c7:e9:93:bc:2f:
d0:1e:a0:7e:b4:f9:79:b1:1c:15:ad:59:e6:a8:ee:
4f:2f:79:94:50:55:fd:a2:fb:c3:34:80:f0:9b:45:
a0:b4:c5:20:a8:3a:ba:e8:3f:7a:18:16:ed:e6:66:
05:b2:c1:17:3f:0b:fe:63:c6:22:23:f1:e2:fe:89:
1e:7c:ff:8c:b8:46:ed:f7:f1:b4:26:e3:04:f6:a1:
ff:77:eb:02:40:be:92:78:43:49:8e:d8:3c:99:3b:
47:43:12:a2:ea:95:e7:84:3b:cc:76:bd:d1:71:80:
ad:35:0f:1a:61:32:7c:a8:3d:ab:89:87:60:d7:6f:
68:bc:96:cd:8c:a8:7b:bb:8c:7b:fb:cf:e4:04:4f:
7a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:CA:04:02:9D:B9:5F:E6:FB:D1:F5:3B:62:7D:DE:CF:F9:74:92:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d4129406-dd3e-3148-ac93-7b555346075c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
159.235.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:87:6e:47:0d:40:92:58:d5:5b:f1:7f:c4:86:18:bc:b7:7f:
4f:70:70:39:07:dd:b4:27:b6:7a:7c:3b:b8:02:11:47:6a:48:
5d:a1:3b:68:34:ac:10:06:02:d2:c2:43:f4:ea:44:1a:d6:33:
7d:d6:97:be:9f:7b:a5:e0:32:b4:2d:53:91:a7:74:ad:fb:ae:
84:56:9e:33:93:7d:03:02:33:6c:ba:8d:0e:40:5d:a3:10:7c:
a7:37:a7:ea:ce:90:f9:c8:6f:99:78:0f:8f:4b:f3:78:0b:ce:
6c:e5:c8:68:d9:0d:ba:6d:45:6d:6d:18:2f:f0:e4:ac:dd:72:
8f:ed:1d:20:dd:a8:b3:ce:6b:92:2c:1c:30:14:e7:66:02:89:
d5:50:35:c1:7d:84:18:94:3f:72:86:9e:44:9d:8a:e8:da:1c:
6c:62:d9:bb:f2:0e:be:72:5e:ea:10:b6:e5:c2:fc:c4:68:61:
ed:b1:03:10:e8:62:d2:90:c2:08:af:e2:ef:ca:57:0a:d8:75:
29:b8:f7:09:fb:6a:87:26:87:ba:6f:cf:95:97:e1:34:57:87:
93:11:71:7b:aa:5a:6d:6a:23:15:3f:e0:62:83:d4:81:cd:57:
4b:3a:0f:22:41:31:c2:e9:0d:be:ae:f5:16:9a:b3:16:fa:7e:
8e:46:be:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:27:50 2025 by rpki-client