Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d41f8e85-27b5-3749-9a93-7782152c0949.roa
File: d41f8e85-27b5-3749-9a93-7782152c0949.roa (raw, json)
Hash identifier: 8bHae2L4mYU0OI4w9XfSnZ6mRMOeTahh6R5aQSZujjM=
Subject key identifier: 71:21:27:32:56:F7:AC:47:3B:72:DE:23:1F:1B:EB:A8:A9:B8:AB:6A
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848037AA3E34EFFE62C69DCBA80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d41f8e85-27b5-3749-9a93-7782152c0949.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 20115
IP address blocks: 24.159.96.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7a:a3:e3:4e:ff:e6:2c:69:dc:ba:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=3aa64fd0-4a8e-4976-af31-db6d65291221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9a:f8:d4:f4:a9:5e:e9:f8:6b:5c:24:2c:ac:
65:8d:ca:8b:d1:7b:98:af:29:45:b2:0f:05:bd:f4:
70:41:ac:75:b1:3a:21:00:f6:f4:bd:4b:4d:c5:b2:
87:b3:f9:10:13:0e:7a:5e:71:8d:93:80:f7:dd:d1:
a8:72:86:c6:f7:c4:e2:c1:9f:06:f9:01:b3:6c:61:
92:06:94:66:6c:da:93:42:b1:5f:b7:ea:b7:66:09:
6a:91:5e:dd:9c:96:e7:e1:d7:74:5f:38:9b:dd:f6:
88:c2:d6:50:cf:cf:01:1c:cd:60:e1:a1:18:78:b1:
49:e8:99:7d:a4:fe:26:ec:4e:32:cd:05:e9:1b:25:
38:d1:bc:cd:6b:4e:43:d2:69:e4:e1:62:5d:ab:68:
33:10:40:24:1d:bb:04:b6:05:e6:f3:93:e7:82:27:
0c:4d:7d:06:4d:36:85:cf:d9:49:ae:35:5c:12:f1:
d0:d3:b2:b7:c4:8d:fb:cd:d3:18:9d:3d:e0:9a:ca:
0b:a0:98:60:d5:16:78:29:d4:26:ad:98:4e:0e:29:
4f:1b:3b:6d:6c:df:26:f3:67:4e:af:7c:6e:72:2a:
db:d0:b1:94:0d:3f:c2:d5:79:14:db:50:af:94:35:
a5:f9:3a:7a:33:dd:7c:75:03:4d:40:e9:15:3f:30:
48:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:21:27:32:56:F7:AC:47:3B:72:DE:23:1F:1B:EB:A8:A9:B8:AB:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d41f8e85-27b5-3749-9a93-7782152c0949.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
24.159.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cc:b7:8a:e1:b3:f5:f1:5b:eb:4c:dd:e2:6a:a2:f8:8b:98:8e:
28:0e:90:ee:3e:da:3f:b7:60:9f:6f:0e:b4:42:ac:e2:3c:e2:
6c:4e:b3:9b:6b:fe:9e:93:9e:6c:08:46:2e:0f:9a:67:fb:19:
1c:23:1a:fb:f3:c7:52:50:7f:d9:4a:5f:b3:70:75:a2:55:71:
4a:10:a7:4b:a3:21:81:a3:ec:3c:9c:54:74:52:02:17:22:af:
1b:8b:80:86:d0:b6:32:8d:7d:ff:fa:80:2b:f1:a8:a2:a8:f6:
4f:fd:2d:6c:f7:1c:22:d2:be:b5:ee:1b:36:c8:b6:95:9d:f2:
8d:72:57:45:12:de:be:d2:89:08:e9:a5:68:45:24:d1:8a:32:
36:42:7b:09:39:07:08:22:bc:b2:65:5d:93:6f:06:23:02:21:
bd:e7:04:49:70:b8:70:62:28:cf:ab:dc:49:35:8a:3c:6b:1c:
7f:31:cd:6e:dc:c6:fa:5b:70:76:2e:5f:be:ef:89:64:4d:49:
88:bd:49:73:2f:0c:0a:19:ca:13:25:24:5b:8e:37:71:cd:d4:
a0:69:32:57:77:af:79:a9:53:19:01:6e:13:3a:58:c6:f9:6d:
5f:09:6a:54:c6:4c:8e:9c:2a:e8:53:2c:c9:59:34:4e:aa:7c:
93:66:d6:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:55:59 2025 by rpki-client