Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0f21b7e8-8347-3600-bf55-b802708f450e.roa
File: 0f21b7e8-8347-3600-bf55-b802708f450e.roa (raw, json)
Hash identifier: SqyedRyYVqzRccSCCnmA7zNi2JdK5rcsFssw4jUB29U=
Subject key identifier: 67:37:65:D0:D5:0C:D6:1D:B5:A0:10:99:E4:75:AA:17:C0:36:C4:02
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848E2D1F6B738B455DF3D347500
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0f21b7e8-8347-3600-bf55-b802708f450e.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20115
IP address blocks: 24.159.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:f6:b7:38:b4:55:df:3d:34:75:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=454b0fbd-e9d0-4410-bd3b-06635eea280a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:b9:f3:68:06:a8:f1:35:d3:e6:be:f7:c8:86:
32:82:56:b9:a9:64:af:69:66:73:95:e1:e4:f4:a9:
e0:ab:8f:41:a7:27:0b:0f:59:29:9f:b4:8b:33:36:
85:ed:86:3a:7f:a3:42:10:90:0a:16:54:bc:e9:ab:
3d:6e:34:60:f4:7b:f4:ed:e4:a6:e0:d9:07:42:d7:
82:c6:8a:56:85:40:d5:11:1a:66:18:c0:e4:46:79:
74:2f:9b:07:60:78:a3:c8:9d:e1:b5:f4:b7:56:2d:
3c:7d:0b:b3:84:fc:20:6d:8f:df:e5:63:44:4e:67:
bf:d3:8e:c8:81:a8:c6:da:a7:24:f7:2c:31:75:b2:
09:3e:c6:bd:37:16:78:ea:89:6d:3e:53:58:16:11:
1a:21:71:98:5c:b3:3c:b9:5c:27:93:74:0a:13:65:
b1:ab:60:40:17:80:e7:56:a4:97:c6:62:0b:2f:8c:
1e:0f:b0:ac:e7:25:b9:8f:82:26:ae:e6:ad:a7:c4:
bc:d7:e0:67:05:61:65:83:de:40:20:be:14:76:38:
f4:1c:79:00:cb:46:49:63:fe:5f:02:7d:d7:8e:22:
b8:b9:44:5e:2f:a7:39:5a:8e:97:cd:45:17:fb:32:
de:66:d0:76:46:31:b1:bb:b8:6e:da:b7:cc:b5:47:
22:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:37:65:D0:D5:0C:D6:1D:B5:A0:10:99:E4:75:AA:17:C0:36:C4:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0f21b7e8-8347-3600-bf55-b802708f450e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
24.159.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:0e:95:64:9e:06:4e:98:dd:82:40:c1:bf:a1:ad:fb:cd:f5:
33:9d:51:80:8a:f7:f3:bc:c5:6a:da:2b:ab:20:ff:75:9e:a6:
2b:7b:ba:99:42:e8:f1:e1:a7:fb:0e:e4:70:e5:73:13:41:0c:
9b:5f:d0:26:9e:5c:7f:d4:fd:a6:04:d8:7c:ff:67:17:4a:f2:
fb:5c:f8:a1:0d:06:03:60:2b:08:af:7a:ff:2b:61:fa:14:9e:
67:d8:8a:2b:f9:e1:f7:53:7b:f8:7e:97:81:b9:f4:4f:33:d2:
6c:6d:90:fc:49:2a:86:14:54:ec:db:d1:73:6d:c6:d4:24:ad:
e3:9e:d6:54:8a:cf:0a:c0:9e:9f:39:3b:8e:56:a4:34:a1:a6:
b2:11:b7:6f:1c:f6:06:f8:19:cf:af:d1:68:69:b0:8f:bf:b6:
c8:da:9e:e1:dd:3a:7c:a3:83:59:30:3e:96:9c:a1:9b:ca:47:
d2:87:b8:50:3a:0d:ec:ff:81:ef:17:d5:d7:26:94:5a:83:1e:
2b:5d:3d:da:34:fe:fc:22:76:52:b8:e4:ec:8a:75:7e:bb:2a:
13:9d:d2:56:fc:47:ea:9e:2e:d9:3d:d1:1b:2f:55:1a:ea:ec:
f0:23:42:a7:bd:e8:4d:0f:8b:7c:b8:fb:c1:63:80:1c:70:80:
f6:ca:2b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:20:36 2025 by rpki-client