Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2186b7f9-2fa2-3ae8-8efe-f5b8eb0acb0f.roa
File: 2186b7f9-2fa2-3ae8-8efe-f5b8eb0acb0f.roa (raw, json)
Hash identifier: loxiqUz41a36oZUsBHCvmmcuBus0zBjWx3PjVk6LWC4=
Subject key identifier: 3E:D1:24:EC:E7:37:DE:34:32:D2:D3:78:D6:A6:7F:15:FC:E9:3F:15
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848E2D1897B77D660289C295F20
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2186b7f9-2fa2-3ae8-8efe-f5b8eb0acb0f.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20115
IP address blocks: 68.188.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:89:7b:77:d6:60:28:9c:29:5f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=0990dbea-09c0-4c8e-a8e5-213495bf8843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a4:4a:32:ea:49:59:0c:97:ad:7e:0a:6c:35:
cd:b6:4e:fc:b9:7e:ee:c3:7f:d7:bb:74:09:cc:33:
3d:67:c0:8c:b4:9b:cc:c4:02:e7:c3:06:17:9e:e8:
d5:76:9b:c8:e5:2f:74:7f:a7:57:b6:86:58:d9:2b:
2b:9e:c3:5b:1b:4a:28:1e:e7:be:ba:72:50:11:7e:
2b:d6:c9:5e:e9:6c:dd:74:96:f3:ac:6a:2e:bb:b8:
78:3e:94:0a:d5:b3:3f:db:83:b9:bd:14:bb:c7:4e:
83:18:a3:c3:1b:24:7e:66:19:d3:07:92:73:d0:ac:
80:08:d3:68:80:26:4b:23:a9:91:6c:8e:e3:ef:72:
98:7a:82:76:ef:08:65:da:ac:68:08:64:37:80:63:
65:bb:a4:d4:b1:74:16:44:3f:1e:ca:69:f5:63:8c:
c5:58:67:de:f5:06:28:87:9c:86:34:dc:99:4a:98:
86:1c:11:03:3d:6f:81:43:f5:e7:ab:a6:b3:20:c8:
83:0f:39:26:2f:ae:1d:4d:54:32:67:2f:b8:43:23:
31:da:99:ab:38:c7:c4:3d:c6:06:08:ad:14:08:50:
db:8f:bc:92:89:38:90:8e:32:98:bb:c4:91:e0:54:
33:47:8a:16:0a:81:87:ae:d2:ea:14:28:77:04:b0:
91:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D1:24:EC:E7:37:DE:34:32:D2:D3:78:D6:A6:7F:15:FC:E9:3F:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2186b7f9-2fa2-3ae8-8efe-f5b8eb0acb0f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
68.188.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:6b:1d:68:1a:c7:ae:69:50:17:86:1b:96:38:07:e1:b7:65:
36:db:30:28:21:20:ab:0e:db:7f:ac:ab:bb:26:50:2d:32:b8:
b9:f9:62:b0:46:be:d3:d8:a3:f0:3a:06:37:db:5e:1f:85:c7:
b9:99:28:79:a7:43:52:d2:f3:41:cd:f6:fb:a8:d1:c3:9d:bf:
5c:e8:77:56:60:cf:fd:09:30:cd:6d:88:ab:08:28:7a:df:22:
e1:77:72:4d:bc:aa:7a:ab:1b:66:5c:40:a4:41:94:ac:8b:55:
49:50:13:c5:77:d1:a3:93:c3:01:c1:22:1f:87:64:c0:39:47:
d3:de:9b:63:03:95:8f:15:7a:89:3e:c3:15:25:17:fd:8a:e3:
fe:85:b6:29:f6:85:f1:46:f7:c5:73:39:3b:48:05:bd:6a:d8:
bd:70:4f:6a:18:c0:38:0f:76:5b:85:65:52:62:83:50:6c:6f:
99:f6:63:0e:55:39:fe:5f:03:c9:43:af:99:81:e3:fb:f3:72:
60:f3:c0:5b:ad:18:50:14:f5:74:a0:3e:b9:cf:c2:a7:bb:dd:
ef:a7:f3:d4:27:75:63:c0:1c:e8:9f:48:bd:fd:ad:20:06:73:
37:2c:53:da:50:1e:c0:75:9c:3c:32:fa:27:5b:79:be:ed:fc:
1b:f2:f3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:38:29 2025 by rpki-client