Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d5664382-66a9-3f59-be80-50a7761b609b.roa
File: d5664382-66a9-3f59-be80-50a7761b609b.roa (raw, json)
Hash identifier: lHdVJ2ZEM1/kJ9MPxMxd6qRMTwJbztDxynp8PEP1GjU=
Subject key identifier: F9:95:61:BA:57:19:E5:DE:6C:37:D4:14:22:44:C0:AE:7C:DA:12:49
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848037AA383549894089BFDA240
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d5664382-66a9-3f59-be80-50a7761b609b.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 20115
IP address blocks: 71.88.16.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7a:a3:83:54:98:94:08:9b:fd:a2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=89439068-5226-4e3b-a2b8-cb62036c544a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:69:ef:24:27:2c:30:d4:a6:ed:d2:4b:18:7c:
80:7e:d8:0c:83:da:7a:e3:4d:ed:47:aa:58:ef:c1:
8c:7c:26:6d:d8:61:0c:c8:87:e8:ae:d3:a6:5a:bc:
ee:46:a7:2c:f9:39:14:e8:66:1e:2f:1a:d8:9e:ca:
76:43:93:17:0b:3c:b4:9a:35:4c:71:6f:c0:53:03:
07:1e:21:4a:65:b7:9d:4a:14:e9:ab:fb:af:eb:56:
08:08:76:55:d2:52:03:b4:85:e6:89:75:9e:0c:d2:
53:81:1b:f9:bc:be:5c:dc:cc:29:b6:43:fb:8b:ab:
37:26:fb:96:09:3b:13:d9:a1:80:0a:6c:9d:ee:f0:
03:d3:1d:00:83:67:be:ea:8f:b9:9e:66:88:c0:69:
fa:2e:fd:93:b5:ec:83:85:bf:84:2d:3d:5c:06:36:
26:fd:a5:27:e0:d4:c0:0d:6e:7a:61:97:4a:e0:aa:
9a:51:b3:07:8e:0b:cc:0e:0b:33:4f:47:80:82:f2:
2c:0f:8d:ea:68:50:84:7d:14:15:c1:0d:73:54:f1:
e6:d2:d8:ed:ce:3d:ec:72:ab:6b:b7:96:a3:8f:f4:
da:6e:7e:a8:3c:9e:c4:b2:25:f6:68:e4:1a:3e:c3:
d3:ab:f9:88:11:5d:67:50:48:66:e6:cc:1c:f4:27:
5f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:95:61:BA:57:19:E5:DE:6C:37:D4:14:22:44:C0:AE:7C:DA:12:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d5664382-66a9-3f59-be80-50a7761b609b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.88.16.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:39:b1:b7:8f:ae:32:01:1c:dc:df:50:e8:bd:1c:b1:9c:5f:
39:44:e0:6d:b3:f8:9b:63:72:0b:70:77:7e:49:e5:7c:f7:7c:
97:28:c9:fa:10:cb:7b:9d:38:b8:0e:ef:a0:79:d3:8e:18:2a:
df:96:b5:f5:21:06:dc:76:24:bb:42:ae:d9:a8:a9:fc:20:3d:
2d:3f:76:71:b4:89:17:35:a9:8d:3f:e1:5a:a3:73:ae:da:2d:
fb:f3:aa:41:08:22:37:26:e3:af:ae:de:8d:8e:b1:2c:d8:53:
82:35:98:f8:3a:5e:63:63:c3:c4:17:61:2e:cb:45:de:87:e0:
8e:6d:07:dd:bf:ad:2f:c2:4f:8d:ba:63:22:cb:4e:4c:4c:2f:
5d:fd:8a:3d:32:0d:bb:33:11:d6:c4:69:d3:58:d0:b5:ff:b7:
4c:51:94:7c:00:bf:39:7c:52:96:f2:ba:33:18:20:b2:01:34:
74:38:36:28:fe:0e:55:e7:b5:98:b4:45:2a:fb:a1:14:33:cf:
14:66:67:1a:59:69:b4:e7:81:85:1e:d0:8b:fa:f7:23:d8:9d:
8b:cf:b6:ad:35:05:8f:a5:af:dc:72:44:13:a2:12:2b:ec:29:
39:e7:b6:9e:5d:d6:61:98:a9:b5:e8:e0:7b:f6:aa:e8:a4:5e:
8b:d0:1d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:42:13 2025 by rpki-client