Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/34767d41-e534-35da-821e-801f0005a98e.roa
File: 34767d41-e534-35da-821e-801f0005a98e.roa (raw, json)
Hash identifier: FVvdNa/Dqz/iP09DtB30GRwH0tSDCkW1dZt/aQeBRfg=
Subject key identifier: F2:B7:0F:90:30:61:57:8C:AD:13:7E:F6:FC:3E:53:FA:48:56:EB:E8
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848E2D1A3D706B0B13CE81D8580
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/34767d41-e534-35da-821e-801f0005a98e.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 397019
IP address blocks: 71.86.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:a3:d7:06:b0:b1:3c:e8:1d:85:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=5a580a72-31c1-4ffd-9a5d-b65984ee5f36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:88:79:94:d5:68:cf:70:a7:0f:41:8d:36:e6:
8b:50:2d:b4:fb:de:84:78:46:17:b9:98:f8:66:c4:
6a:21:2c:2a:26:56:c0:f3:ee:22:ae:4c:92:f9:ad:
98:dc:79:d7:b0:e0:cf:70:e0:c3:f2:a7:18:e8:90:
09:86:94:e9:da:ff:92:b3:3d:99:11:d7:ac:96:5a:
f7:be:e6:c8:e2:95:9b:5d:d0:01:e5:25:0b:0c:37:
57:13:f5:ef:33:b8:eb:fb:f6:1e:34:df:33:10:1e:
9d:66:27:76:76:fc:1c:58:7d:71:0e:a0:97:be:ce:
9a:61:a2:01:85:e8:6a:05:15:3f:db:94:bf:e2:1f:
ab:c5:c1:c1:f4:cd:83:64:09:eb:ec:ea:d1:e5:e3:
5a:fb:e8:55:a1:fb:2d:b0:b0:d2:6a:20:1d:be:73:
99:71:c0:05:1b:0d:91:2a:da:8d:aa:32:81:3f:67:
6c:ce:b3:9a:99:72:cf:8c:ad:80:83:ce:89:47:a7:
8f:3e:4d:c1:aa:91:4b:be:2d:53:a2:d6:a9:a9:12:
0c:4f:0e:b4:c1:d5:d0:01:ba:17:ed:8b:41:8b:84:
a1:81:43:ed:ef:6e:8e:04:6a:a3:fd:58:ad:2d:b5:
66:e7:59:aa:a7:27:2d:32:d2:a8:25:94:7c:ae:6c:
0f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B7:0F:90:30:61:57:8C:AD:13:7E:F6:FC:3E:53:FA:48:56:EB:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/34767d41-e534-35da-821e-801f0005a98e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.86.143.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:92:ff:e1:ce:d4:66:20:fc:3e:3e:9b:d0:0a:7e:ea:60:6a:
0e:af:d5:e4:21:1d:a2:d4:77:5f:73:09:48:d0:9c:e5:97:5d:
4e:d6:87:a6:99:b8:9e:01:5b:dd:ff:7a:c5:91:da:40:20:a7:
48:e4:0b:57:6e:8d:4b:34:cf:b1:ad:53:da:35:29:ab:2f:11:
e9:ff:fd:3f:00:ab:04:dc:9e:c2:bf:41:b0:15:7e:c8:a5:69:
80:c4:7e:f4:09:dd:78:5b:17:35:c6:ab:41:31:0e:3e:e7:e9:
c4:cd:6c:1e:10:ed:ba:53:b5:81:67:21:82:7c:c2:d9:18:45:
8e:5e:69:66:a3:e8:bf:a8:96:ae:99:54:51:14:1d:5e:1e:4a:
6a:f7:c4:8a:4c:e2:4c:a1:b8:9f:32:c2:a9:cc:39:76:2e:1f:
fc:2b:8a:9c:d5:1e:2b:6f:0d:d1:e8:87:70:64:5f:3b:42:65:
4b:19:24:95:dc:3f:bd:e8:72:42:7f:5b:61:93:16:7b:d9:82:
71:d4:8c:95:cd:ea:eb:57:cc:ba:e1:47:6e:01:ee:6f:a7:d8:
28:dc:a1:c3:a9:8c:fd:e7:d9:76:71:f3:34:7c:dd:67:61:4e:
6d:95:7b:f3:02:c3:bf:ef:d1:30:fd:88:ef:4f:d6:08:cd:61:
b5:6a:66:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:28:07 2025 by rpki-client