Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1a2f8240-ff02-35cb-b260-f747bae4db00.roa
File: 1a2f8240-ff02-35cb-b260-f747bae4db00.roa (raw, json)
Hash identifier: yRpsNz7locoPY/Rbs2p8FR5xSYDTTpiY5VCboVHcnUg=
Subject key identifier: 01:77:2A:3E:D5:30:3E:43:A3:C7:FE:EC:A8:DB:BF:0F:8F:D8:06:DC
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848E2D203FF4FF65BA6A3176880
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1a2f8240-ff02-35cb-b260-f747bae4db00.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20115
IP address blocks: 68.191.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d2:03:ff:4f:f6:5b:a6:a3:17:68:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=2f5f7c0e-9328-4fa9-aa27-460da2bea6c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3d:00:23:55:25:ed:f1:05:7a:66:05:ef:a1:
df:a9:9d:4b:e1:86:c8:c8:3c:c3:7b:65:7d:4c:8d:
83:99:38:0e:3f:74:8f:97:5c:ea:ce:59:95:96:f7:
f1:8f:94:4c:ef:36:ba:93:e4:be:dd:ac:6b:63:85:
20:0f:ee:c8:e5:12:4a:7a:b7:89:9c:45:fa:70:c8:
62:ac:4a:7b:8e:a7:70:41:81:72:88:f7:8d:12:82:
5f:15:2a:2e:70:3c:23:15:c9:07:11:3e:35:1e:95:
12:8f:4d:28:62:4f:86:cd:95:7a:92:88:57:b0:1f:
63:e3:10:15:ae:c9:1e:00:3a:1e:67:8a:bc:39:0c:
49:22:0b:ac:73:cd:2e:ba:7b:29:e7:2a:f4:3f:0c:
95:df:88:ea:15:5d:67:74:90:38:a5:77:1c:dd:6c:
d2:07:31:ba:ea:fc:0f:e4:ce:46:cf:fb:4b:a8:9c:
f2:9d:b9:6c:e6:fd:e1:4b:a7:d6:d4:a6:03:d5:e7:
37:7a:24:bb:2a:bd:f8:7a:a3:7f:bc:9a:bf:38:09:
a6:db:44:a0:27:03:f4:f6:0b:a5:95:da:a1:c9:e1:
3c:fd:bf:cf:af:7a:23:c5:0a:28:cf:97:e0:7e:ff:
3f:53:6d:bf:b0:1e:de:98:f8:49:e2:24:f3:ac:05:
93:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:77:2A:3E:D5:30:3E:43:A3:C7:FE:EC:A8:DB:BF:0F:8F:D8:06:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1a2f8240-ff02-35cb-b260-f747bae4db00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
68.191.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:1f:1d:1f:fe:fd:b2:3f:21:80:68:df:97:0b:e5:c0:c3:ec:
c7:74:cb:bb:81:69:bb:8c:11:06:50:33:3a:78:ca:4f:87:b6:
b7:52:c3:70:a2:b2:b4:d7:40:51:f5:1a:22:2b:03:52:aa:4b:
5a:54:b0:28:50:e7:09:f3:cc:2f:cb:97:1d:17:6d:a7:41:be:
3d:ca:af:e5:41:3d:4c:f2:92:ee:4d:bb:82:b9:b2:75:62:2a:
c1:20:9b:ce:08:38:76:e1:ae:cc:5c:1e:d8:03:9f:27:b4:1a:
b3:f0:45:2a:10:d2:5e:d7:ae:e5:94:d7:ae:5f:37:25:32:1c:
e1:07:6d:a6:22:98:74:f1:64:64:14:d8:f2:be:97:b6:ad:41:
bd:69:e1:c9:51:70:c3:64:53:72:ee:63:42:15:c4:f5:d1:79:
76:c1:5e:86:1b:a7:5d:8c:1d:2e:2e:80:d1:8f:3d:10:15:79:
b2:97:e1:92:33:ac:02:a5:b7:29:11:ce:45:4b:24:f0:bf:53:
09:37:e2:ae:aa:1e:ee:f4:a9:2a:43:9b:e2:15:a9:9c:63:73:
a2:8f:74:93:66:09:8e:59:4a:58:3a:bf:e1:b1:79:74:19:a9:
83:87:06:20:63:0e:00:86:d7:d6:6e:37:a1:6a:77:47:40:89:
16:f7:30:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:12:47 2025 by rpki-client