Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2f17319e-700e-3a2b-8b6d-438840d2a4de.roa
File: 2f17319e-700e-3a2b-8b6d-438840d2a4de.roa (raw, json)
Hash identifier: cqWtQCN2mBPzP2KPkRlI1mrZb3It5OOliIIN1L3PRR0=
Subject key identifier: E0:1A:67:90:93:3A:71:33:DE:FF:B6:25:B2:F8:17:9A:46:5F:F3:78
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848E2D1E75CF92D53ECC62ACE70
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2f17319e-700e-3a2b-8b6d-438840d2a4de.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20115
IP address blocks: 71.91.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:e7:5c:f9:2d:53:ec:c6:2a:ce:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=b71a2d3f-70d4-4bb8-a347-e7ed71b10344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a3:e1:dd:3e:b7:90:eb:84:ae:8f:b0:0f:9e:
67:ff:c5:f3:5a:30:62:ce:90:6e:88:7c:34:ae:7a:
ac:6f:2e:5c:43:c4:4f:3b:5e:9a:32:9c:2e:d0:a0:
f2:62:f0:54:78:f4:47:19:99:17:25:df:47:db:f8:
b4:50:97:ec:bb:e6:24:c0:25:5e:27:81:6c:3e:d6:
8b:14:6a:fa:98:9d:b1:41:7e:67:be:4f:17:dc:29:
99:de:f6:24:12:b6:5f:53:80:3e:f5:e3:36:39:36:
0e:1e:05:be:df:92:80:08:12:8e:47:e1:3a:a4:39:
66:2d:0c:b1:ee:43:d5:04:f3:ad:54:c6:6d:1b:de:
c4:b0:27:cf:53:15:bb:bb:07:f2:e7:be:d2:7e:e6:
d7:cd:92:fe:2b:00:6c:a7:a8:0c:fc:4d:fd:e5:e6:
ac:52:d4:75:6b:87:de:8c:de:c6:84:af:cc:85:aa:
dd:73:bf:48:de:eb:86:fa:c2:8b:8b:fd:dd:9c:49:
48:d1:47:79:51:ae:a8:d5:98:04:94:9e:ce:8e:e5:
52:46:43:86:75:dd:5c:ed:9a:36:76:01:3c:27:f6:
24:68:e1:3a:6b:2f:3b:45:62:68:a7:a3:fe:f2:68:
01:59:db:df:ae:ca:d0:51:4b:e1:25:06:4f:e0:69:
53:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:1A:67:90:93:3A:71:33:DE:FF:B6:25:B2:F8:17:9A:46:5F:F3:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2f17319e-700e-3a2b-8b6d-438840d2a4de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.91.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:7d:25:7c:1d:98:f7:48:62:dc:98:f1:38:dd:58:7d:09:a9:
b4:9c:b9:bf:59:0d:e6:87:e9:b0:bc:ca:d9:b0:be:32:af:3a:
87:b9:55:fe:7d:7b:65:2a:2b:dd:bf:c7:1e:98:02:72:72:66:
c5:ce:a6:e9:b1:17:66:82:a8:db:6f:b0:86:3c:34:66:1f:74:
cd:ff:db:e5:7f:32:3e:a9:6a:85:b2:cf:f5:97:12:2a:a9:27:
48:38:92:01:bc:cf:11:67:d2:c9:8a:dc:f7:64:76:d8:06:cc:
23:14:f7:89:62:f9:d2:63:f5:42:e7:73:61:aa:7c:78:17:e3:
cd:e0:0d:63:03:97:1b:39:b4:17:0c:b9:ef:03:a0:cd:84:f1:
af:56:ef:cc:d6:ef:0a:2e:5e:b4:5f:7b:a3:90:f0:df:7c:9b:
fb:29:39:da:e7:11:a6:a5:5c:36:b6:f9:9e:99:d6:22:48:c8:
1e:13:10:10:4b:51:6e:20:da:68:75:a9:aa:10:9d:c8:e4:1e:
af:ff:9b:b4:bd:8d:ce:e8:8b:48:40:ef:9c:b6:ef:5a:6e:7d:
df:a9:46:3f:8f:dd:c1:de:17:df:66:c2:07:10:58:1f:29:08:
9a:d9:fd:c2:88:a2:87:85:16:89:d1:dc:2c:31:47:9b:0b:86:
ed:85:7d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:08:21 2025 by rpki-client