Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3600214a-1dcd-3a1d-9619-f8739857bcef.roa
File: 3600214a-1dcd-3a1d-9619-f8739857bcef.roa (raw, json)
Hash identifier: 8uPfQsooIEZe9gC9yprp/jw04HmzoX2h640iogFyoOg=
Subject key identifier: 82:0F:04:21:38:84:95:8B:ED:15:94:C4:5D:F1:7F:72:DA:C3:3E:F5
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848E2D20E8F43004679501FD0CA
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3600214a-1dcd-3a1d-9619-f8739857bcef.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20115
IP address blocks: 96.32.224.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d2:0e:8f:43:00:46:79:50:1f:d0:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=764b4f22-2ecf-46e3-9abc-f6b317123f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:37:3a:4c:57:3c:9a:1a:8c:6a:e6:90:52:0c:
49:83:15:67:b3:75:7b:7e:ee:e2:90:10:4b:bb:d5:
d1:06:f4:f7:70:e5:84:b7:16:01:b4:ce:ee:ae:f9:
34:ae:0e:ee:bd:c0:6e:fa:73:58:1e:1b:93:08:e0:
c6:82:dc:39:a9:04:c8:92:c5:e4:c7:c7:cc:88:d6:
fc:91:05:c1:3c:68:85:49:34:e6:22:ed:43:51:99:
5c:f3:b8:47:2b:c2:b3:21:7c:73:88:51:23:9e:d5:
a2:42:96:da:de:70:2a:33:c1:ab:fc:27:23:5b:c7:
fb:d1:3f:e1:cd:16:29:8c:48:5f:d4:a1:06:6f:db:
9c:0c:50:a3:06:cb:92:e0:ce:30:22:04:d7:2b:bc:
96:1d:4e:96:24:8d:05:b2:a9:c8:eb:cd:b4:dd:6f:
70:e9:56:53:1c:0d:ce:11:3e:b5:12:c5:af:09:eb:
db:8a:f0:c6:b9:00:c6:4a:cc:54:9e:a2:59:47:8f:
8a:9e:26:52:4a:15:e7:ce:7a:b3:da:62:bc:56:9b:
b6:86:1c:7b:f5:6a:d0:02:a9:a8:73:44:db:a3:b0:
e7:c2:0f:4d:46:fa:4f:c6:51:df:69:05:64:e5:54:
a3:a8:79:69:f8:a2:64:1d:dd:de:7e:90:2a:82:bf:
aa:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:0F:04:21:38:84:95:8B:ED:15:94:C4:5D:F1:7F:72:DA:C3:3E:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3600214a-1dcd-3a1d-9619-f8739857bcef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
96.32.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:46:d4:3c:24:17:1a:82:63:e9:00:65:4b:95:3b:8c:a2:11:
94:2f:40:df:85:9d:2f:26:1d:8a:dc:1e:9c:64:07:06:8e:88:
2e:c8:59:ff:7e:75:e3:97:f3:3e:9a:c2:15:2a:8a:4a:a4:84:
0b:e6:04:ee:d5:8b:ce:f6:d1:8c:84:7a:45:b9:67:fd:4f:a5:
81:2b:11:4e:e8:3a:e5:44:8f:f8:76:23:03:74:c5:fd:f2:4c:
af:ba:15:12:09:03:a6:1a:77:37:29:f7:24:c1:4c:bd:f7:7f:
65:e6:57:7e:01:cf:aa:c8:be:da:a2:4a:36:8e:77:c6:e9:df:
e3:c4:8c:51:46:86:0a:06:35:38:c6:86:4b:8a:99:ed:22:57:
db:b9:21:ef:e3:66:79:15:f7:f4:94:0e:03:1b:93:97:cc:d4:
1f:8d:9d:38:fa:f9:f1:36:6c:11:25:5a:5b:f8:4f:98:1b:8a:
82:e9:50:f3:0e:a4:e7:76:6f:9f:a2:7d:51:a3:b4:59:3b:9e:
49:74:98:dc:35:10:59:74:c5:d2:b7:16:c2:a8:55:ca:e5:46:
d6:9f:76:91:a7:55:ef:0b:0c:75:74:bb:91:00:57:e3:bd:6d:
2e:c9:07:2c:ae:99:5f:f4:f0:a4:f9:d5:2b:a7:1e:3f:6a:d7:
9f:0c:a8:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:25:41 2025 by rpki-client