Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3533ae8e-709f-348d-ae4b-18e0a1d8ce57.roa
File: 3533ae8e-709f-348d-ae4b-18e0a1d8ce57.roa (raw, json)
Hash identifier: sKp3dIzxhR0PigQ+uMOiPxXKIoQHOzpTbksQidBdSd4=
Subject key identifier: 9B:B5:64:51:89:A6:F0:1B:8A:F4:F2:31:E7:DD:14:C4:71:4B:CB:91
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848E2D1E908B3F058CB452BE160
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3533ae8e-709f-348d-ae4b-18e0a1d8ce57.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20115
IP address blocks: 71.90.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:e9:08:b3:f0:58:cb:45:2b:e1:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=c7d8c50d-17f2-48e3-9dd5-7f5a0a0d8bb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:92:50:da:4e:0e:8b:9d:9d:a3:17:d2:f2:89:
05:17:6d:1f:fc:43:29:e9:4a:ce:af:40:93:0a:ac:
8b:67:45:f7:a1:f2:2f:f5:f4:a0:54:71:3f:c3:1c:
0f:07:33:77:66:c8:1a:43:ee:76:32:02:85:55:c0:
7f:9b:4f:61:c5:29:dd:41:ea:23:52:04:e2:21:dc:
98:e3:bb:fb:8e:1b:8e:1a:c4:c5:7f:67:be:09:32:
1b:25:e8:b6:13:12:8c:ab:ff:e0:d4:df:e8:d1:bd:
d6:f4:b6:fd:ff:23:9e:d2:3d:55:f4:21:b3:51:03:
5e:fd:ea:01:48:05:f5:de:16:71:46:8e:37:fe:10:
30:df:fb:b0:4e:f1:24:c8:44:13:45:fc:b4:25:9d:
56:5c:15:d5:60:e6:f5:cd:68:09:be:d9:0b:dd:35:
e4:74:27:ce:6e:ca:25:47:5b:ff:0b:b4:d0:e8:c1:
52:9f:d6:bd:4b:00:28:2a:52:31:41:78:0f:45:d7:
db:e9:90:06:bf:20:4b:6e:da:07:90:e1:b1:e8:25:
65:0c:6b:cd:3f:ba:96:b6:1e:21:6b:69:18:15:ed:
93:6f:7b:4c:44:d5:31:de:cd:24:d0:4e:b7:5a:90:
58:bc:d9:13:42:5d:a8:93:1a:cb:00:99:94:f5:d0:
4e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B5:64:51:89:A6:F0:1B:8A:F4:F2:31:E7:DD:14:C4:71:4B:CB:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3533ae8e-709f-348d-ae4b-18e0a1d8ce57.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.90.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:7d:0f:78:c1:56:d1:39:5f:e7:8b:c1:a5:bb:5b:ce:19:5a:
58:99:0a:ee:db:89:49:47:df:3c:3b:a1:7d:a2:81:26:b4:62:
40:8d:71:8e:c6:cf:fe:4a:ef:88:40:81:b6:ae:29:4d:78:25:
d6:03:4d:87:0c:7a:fd:f3:54:b1:93:dd:c4:34:73:16:4e:15:
d9:92:93:c8:73:62:b9:b5:db:f9:8f:6e:6d:24:bc:14:50:59:
4f:6b:c3:71:a3:70:d9:6a:5b:29:35:c6:03:a2:a1:af:e5:65:
fb:c5:5d:fa:fb:30:90:9e:a8:09:ed:05:28:4c:be:fc:c0:ec:
82:ce:2e:cf:75:00:c4:27:00:63:c8:bf:a5:f6:66:30:bb:d8:
5e:df:4b:9f:b4:66:c5:48:16:6b:ee:2c:42:67:29:5e:19:00:
70:a7:9b:11:3e:51:96:6d:59:10:8a:ea:57:a6:46:00:26:5e:
9a:ad:cc:19:07:31:68:ed:41:bc:f7:0d:03:b3:ec:c2:9d:49:
39:cc:d7:39:88:6d:3b:2d:fd:4c:14:08:fd:1f:61:2d:48:e7:
7c:90:42:7d:7e:97:d8:0e:cb:37:0f:ee:40:b0:29:82:e3:e0:
c1:82:63:07:e9:68:e2:98:af:e3:37:07:78:4e:17:a5:2e:56:
c6:6c:e2:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:20:59 2025 by rpki-client