Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2fd6e80b-484b-37be-ad9e-52e116e45782.roa
File: 2fd6e80b-484b-37be-ad9e-52e116e45782.roa (raw, json)
Hash identifier: gz0N5/kKnMgL3NOSDTNm6CZBhdDxeQKyG2vj+x6ndkc=
Subject key identifier: B2:CF:89:F0:D9:4A:2E:0E:C9:D3:2D:A3:7E:17:6B:3B:E2:0A:E0:ED
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848E2D17EE2D1E4380017C96580
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2fd6e80b-484b-37be-ad9e-52e116e45782.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20115
IP address blocks: 71.87.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:7e:e2:d1:e4:38:00:17:c9:65:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=2bd95e01-9d75-409a-864b-1c3c69ea4ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b1:ac:bb:51:fe:0a:e1:aa:85:14:17:e4:1b:
3f:ff:3c:b3:29:28:a0:aa:3d:73:eb:a2:b9:3f:29:
c1:f4:42:b6:eb:11:33:02:f3:8a:f7:f8:57:f9:89:
c5:a4:8a:b1:65:d3:8c:4e:47:28:41:fd:26:c8:18:
6c:92:a7:5f:d6:c8:1e:04:17:96:a0:9e:92:38:7d:
b4:6d:2e:33:09:af:0c:ee:d4:e1:55:a1:1a:e8:a6:
f6:32:5d:b4:cc:8b:87:79:66:3d:e5:cb:33:a3:53:
64:18:1d:30:d6:0d:8e:19:b3:ea:20:d1:85:18:7e:
66:3b:fe:22:2d:7e:bb:5a:4d:2e:93:0b:bf:76:e0:
69:14:c4:99:0a:34:bd:fa:51:1d:c7:d4:0a:ea:0f:
e7:e2:ea:67:58:1d:ef:27:72:8c:b4:5a:fd:dc:5a:
f7:1e:1b:36:0d:a8:6d:ac:4a:50:8f:22:16:f2:fa:
af:e4:46:5c:0b:d1:3c:84:52:9c:d5:bf:cc:59:6b:
70:12:25:83:09:07:ac:a6:05:48:06:3d:64:74:7c:
31:df:88:17:e2:6f:18:8e:a0:28:52:ff:15:c2:2a:
bb:1a:fb:8c:f3:5f:13:41:de:b3:1f:57:3a:58:be:
a3:51:cb:8e:79:44:12:82:a4:61:c4:82:e3:a4:55:
20:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:CF:89:F0:D9:4A:2E:0E:C9:D3:2D:A3:7E:17:6B:3B:E2:0A:E0:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2fd6e80b-484b-37be-ad9e-52e116e45782.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.87.29.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b9:f4:05:b6:02:e8:3a:37:c0:c3:aa:69:54:38:01:e9:32:9e:
af:9c:c6:77:71:d7:f7:31:60:43:d6:f1:62:f7:49:18:fd:eb:
4c:74:bb:96:5b:ee:8e:ae:45:8d:34:58:21:82:50:95:4c:91:
5f:54:67:8c:4f:5d:3f:5c:0c:0b:f0:73:5b:52:e2:e0:3e:87:
d4:47:0a:4a:4e:3a:f7:0d:73:ee:6c:9e:9c:c5:b5:06:ee:a9:
2e:8f:46:37:d6:22:b7:eb:c3:93:61:5b:0a:7a:62:17:53:61:
64:c3:b6:7a:87:e5:17:1c:6b:89:a4:9c:b7:4c:f3:8b:cc:6f:
48:2d:0e:b3:0d:35:0b:94:62:4e:ec:24:6b:85:9f:b4:87:c7:
30:39:3f:f7:8d:ad:f1:ff:2e:ac:7d:1b:da:33:d7:8a:47:25:
c5:fe:d8:55:00:f3:59:8d:ac:28:84:dc:8d:96:4b:1c:e4:89:
52:b6:b2:e7:0c:bd:83:56:ca:5c:72:da:b0:cb:aa:c2:c8:55:
ef:29:6a:bb:12:8f:70:ce:5d:f8:a8:08:81:0d:3f:69:40:58:
47:cc:f7:46:f6:c5:a2:3a:1c:18:2f:1d:83:73:67:8a:03:d6:
18:1c:5f:ae:42:df:d7:24:7f:26:37:30:3f:6c:63:62:ba:ba:
02:67:99:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:12:53 2025 by rpki-client