Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/28ce63a9-38cc-3b45-90d9-d3ca464a1448.roa
File: 28ce63a9-38cc-3b45-90d9-d3ca464a1448.roa (raw, json)
Hash identifier: Rt6FD0VAtppVVinRg+klsvliz5V/DAR6zAwp/WocDQI=
Subject key identifier: 1B:BD:86:2F:C5:C8:34:62:92:96:F8:53:E3:3D:1D:B3:BB:64:EE:49
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848E2D1756153149D2C5DCB4E00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/28ce63a9-38cc-3b45-90d9-d3ca464a1448.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20115
IP address blocks: 128.92.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:75:61:53:14:9d:2c:5d:cb:4e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=b1eb58ca-308a-473e-867b-b2e870b44062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6e:b8:1c:8d:49:a3:01:5e:4e:03:d0:c5:c4:
8f:99:15:cc:be:a3:4a:2e:2f:b4:c9:9c:e7:60:27:
49:8b:60:51:53:31:18:b5:c6:fc:e9:1b:8d:ef:17:
5c:56:19:db:b9:59:b7:c9:1d:02:4c:52:6e:4a:cc:
9a:c6:86:82:f5:99:cb:4a:3b:8a:b3:ed:be:b0:e8:
40:e0:2d:72:95:7b:b3:8d:c3:8b:5c:50:e5:50:15:
59:95:34:c5:e2:3a:18:b0:5a:41:55:d1:3a:7b:f5:
50:cf:05:e3:bd:be:05:5c:84:05:4a:12:46:ef:ca:
b8:76:30:19:19:c4:11:13:90:dc:71:e0:12:21:de:
e6:be:34:be:06:1b:eb:cd:83:a8:e7:a4:45:10:db:
52:a1:ac:7e:1a:bc:2a:c3:72:0b:6c:0f:59:ee:5a:
c6:8e:01:62:e1:f8:2b:19:89:2d:0b:c7:20:26:5d:
41:95:64:77:ae:b3:3a:6d:3d:9c:cb:ae:bc:29:85:
50:2e:99:66:8d:03:dd:b1:39:68:ce:88:26:76:b8:
d1:13:7e:76:e6:a3:3d:b5:13:e1:5c:59:5d:41:34:
6d:8f:5d:2d:4a:35:7e:d8:d6:4b:99:a9:b8:0a:d9:
99:df:92:3f:bc:e6:10:80:6d:01:b2:a7:94:45:b3:
45:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:BD:86:2F:C5:C8:34:62:92:96:F8:53:E3:3D:1D:B3:BB:64:EE:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/28ce63a9-38cc-3b45-90d9-d3ca464a1448.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
128.92.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:0a:ba:15:fe:9c:56:66:87:61:18:e8:81:f9:1a:9a:24:39:
b1:46:8a:62:ce:70:62:b6:56:9d:ba:41:3f:b9:cb:1f:0b:e7:
5a:10:c2:d9:ad:da:f9:fb:b9:ae:aa:8c:8e:73:69:c0:34:d5:
5a:fe:2a:05:d3:d8:42:3b:a1:5d:da:c6:24:00:13:7b:8c:fc:
64:40:81:c1:55:9d:e0:f3:67:89:a5:af:40:b5:2e:d3:2f:c4:
5a:63:ae:b2:00:f4:ef:12:59:5a:b5:f9:83:4c:c7:29:f4:c0:
a5:96:f2:ed:e6:f2:ab:45:d1:43:42:b9:a4:1e:b3:5e:aa:e1:
1d:b4:7b:4f:90:2c:a2:a8:0e:66:8f:33:77:5c:2e:4e:82:66:
65:31:d3:75:c7:19:24:bc:3c:26:a2:b0:86:47:2d:bc:07:f1:
7f:4a:72:47:0c:47:92:08:40:8e:6c:25:69:ca:3d:40:c4:55:
f5:40:5c:23:72:46:f4:cb:32:2a:f5:24:04:d6:c0:e8:3c:1b:
bd:c5:e4:07:47:9c:40:37:a0:34:e0:5d:c6:33:eb:d9:c6:db:
51:a6:bf:45:67:99:85:40:d1:eb:57:49:a0:b2:75:92:f3:1e:
d1:97:20:94:f9:7b:42:8d:19:e0:f4:b0:79:77:7d:a5:89:db:
76:70:16:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:10:27 2025 by rpki-client