Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1017918a-1b0e-37fd-9b5f-02799e08bebe.roa
File: 1017918a-1b0e-37fd-9b5f-02799e08bebe.roa (raw, json)
Hash identifier: YEh/behSh2glHKPc+BBP+OWSx9HHP5tia4huEd4R6Rs=
Subject key identifier: 5E:2B:48:A9:8F:F5:48:A3:FC:03:4F:A7:03:54:55:B0:9D:FD:22:AC
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848E2D181D08A4B3618945E2700
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1017918a-1b0e-37fd-9b5f-02799e08bebe.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20115
IP address blocks: 71.13.120.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:81:d0:8a:4b:36:18:94:5e:27:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=2a238068-e274-427d-8504-d488ebddcf5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ba:f4:b3:e1:13:20:b0:0e:8c:26:65:bd:83:
02:96:89:51:d6:fd:26:c0:eb:7b:2c:84:73:9d:38:
d5:69:bf:4e:56:d7:18:52:82:4b:33:53:d4:50:5c:
6c:f7:7c:c1:fb:ef:14:a5:07:17:d7:ee:9b:95:83:
ac:26:a4:6d:9f:dc:5c:af:8f:88:f1:04:37:c5:15:
28:a0:b8:d5:e4:cf:24:7c:c1:92:e6:75:a5:c3:77:
da:64:9e:2b:be:db:a5:60:af:79:6e:c0:8a:50:a7:
52:1d:c9:1f:e4:0d:79:f6:81:21:78:74:c2:b4:21:
d8:f8:7b:e4:8f:06:13:59:b9:a5:98:76:41:ea:14:
0e:e5:0c:ad:06:e4:26:38:8e:f2:68:19:00:d0:ef:
a1:4f:a9:07:4b:06:fb:c4:c4:0b:56:d3:4e:42:1b:
ff:b1:7f:75:74:df:87:e4:7f:50:4d:0e:e0:2a:7e:
a1:d2:a9:34:3a:86:2c:33:1f:b0:8f:38:6f:4b:76:
99:e4:3c:15:10:ae:ad:c4:f2:d9:9c:41:27:b6:02:
7b:af:b1:24:05:a5:8d:de:fb:44:ee:0d:c4:c1:5c:
a7:61:29:3f:e9:4f:10:87:17:2d:ee:0f:44:66:01:
af:75:f9:d8:85:38:25:4f:d1:cd:80:61:c9:54:29:
06:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:2B:48:A9:8F:F5:48:A3:FC:03:4F:A7:03:54:55:B0:9D:FD:22:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1017918a-1b0e-37fd-9b5f-02799e08bebe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.13.120.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:70:b2:10:c6:18:ff:bd:41:09:64:2a:c6:05:39:da:f0:fe:
12:20:b3:33:74:9a:ab:e7:d2:ed:03:3f:49:36:cf:0f:cb:4f:
ff:3a:19:c0:5b:88:21:28:ca:55:47:76:63:6f:c0:db:6e:dd:
94:af:b4:d3:ba:86:e3:b3:b9:9d:67:36:27:11:b6:ba:19:5b:
7d:48:a7:1e:e6:a6:1e:90:5e:68:c3:2f:ec:1e:75:94:57:e3:
e7:53:9f:2b:03:32:83:af:a9:f1:f0:34:0b:99:47:40:a8:87:
4c:98:bd:3d:ca:89:69:7e:b2:90:1e:be:9b:00:8e:8a:8d:c6:
13:92:ad:f4:6a:a8:b1:46:2d:89:01:7f:4b:c4:c5:f9:89:d1:
5a:87:aa:14:14:4e:e5:fd:fb:df:97:ac:da:49:27:8c:d1:a7:
e4:7f:85:fb:35:ad:ac:b0:50:11:46:d4:06:b1:9a:c9:7d:0e:
7e:76:fb:f7:8f:21:3b:b8:f7:25:ad:a4:d9:19:2b:2b:e6:ef:
ea:e6:17:0b:07:dc:fe:e3:0e:ae:1f:3f:d4:08:71:5f:3b:ea:
77:ce:f8:8f:48:f8:e0:59:4e:65:3e:e0:34:0b:d6:c6:d8:0a:
1a:61:55:6a:76:c6:7c:bb:b2:fd:a3:ca:a0:63:2f:3c:2b:2a:
8b:17:1c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:23:12 2025 by rpki-client