Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3abaa69b-02ba-3e56-a2ea-71e0d3f0bf6f.roa
File: 3abaa69b-02ba-3e56-a2ea-71e0d3f0bf6f.roa (raw, json)
Hash identifier: rCr5RtGTbim42irmGdyh9XOYkL9Mo0yi+4ZqQGn2Ok4=
Subject key identifier: 71:DE:54:C4:1E:92:5E:D4:21:93:32:47:62:6C:4C:0A:19:B7:C3:CE
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848E2D20559B491A2A754C3D700
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3abaa69b-02ba-3e56-a2ea-71e0d3f0bf6f.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20115
IP address blocks: 71.9.96.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d2:05:59:b4:91:a2:a7:54:c3:d7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=5951469d-8f40-4962-8de9-2891daf40ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b8:d1:40:a5:de:c6:bd:29:b4:39:e7:7f:29:
42:5c:c1:74:4f:22:46:d7:6e:c5:96:4e:93:3e:32:
2c:72:fd:c9:8f:e7:ee:b3:54:d7:2a:23:6b:45:0d:
14:12:ea:1a:12:43:43:ee:45:2a:02:7b:68:52:18:
a6:ff:6e:fb:eb:9e:b0:ca:ee:9b:fe:9c:a5:b3:74:
c7:ac:88:88:9e:fa:ee:3d:52:6a:eb:20:c0:0f:af:
a8:29:91:4b:11:f2:b6:aa:fd:4d:a1:f3:61:a6:ea:
94:b3:86:ad:e8:3e:45:58:51:af:6d:87:3c:5c:01:
b3:42:71:71:94:13:53:46:aa:74:77:56:fc:f7:db:
6d:f9:70:29:5d:76:40:a1:bb:87:2f:27:cc:27:99:
51:54:d4:52:38:98:3e:66:c0:d8:b0:44:96:9e:5e:
66:84:08:7a:87:40:a5:51:25:cb:3f:51:ca:07:d3:
f3:7f:6c:98:bf:dd:02:95:c1:98:f9:ff:be:a0:ce:
79:fe:53:76:cb:33:54:fd:bb:da:33:90:eb:3a:9d:
80:2a:18:61:48:d6:90:47:4a:61:67:8e:99:94:be:
c9:ca:e5:f3:b7:ce:1e:72:cd:79:38:c3:36:d5:fe:
79:9a:1c:59:2f:39:9e:c3:b2:bb:05:4f:29:98:88:
a2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:DE:54:C4:1E:92:5E:D4:21:93:32:47:62:6C:4C:0A:19:B7:C3:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3abaa69b-02ba-3e56-a2ea-71e0d3f0bf6f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.9.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:eb:aa:a6:78:55:2a:b1:34:d4:23:1b:ad:59:03:50:df:73:
25:0a:9e:dd:a6:32:35:f4:81:36:f9:a6:2c:5e:fe:98:f9:a6:
83:89:3c:3a:7c:a0:a0:86:7e:9e:3a:be:0a:65:c3:a4:60:89:
4f:10:35:85:9e:6e:87:e6:6e:85:17:6e:c1:c1:e2:c8:ed:59:
1c:4b:5c:a6:11:fb:b6:9d:bf:09:0e:93:d2:e9:8c:db:f3:42:
d6:8c:e8:51:70:fe:aa:6d:dd:9a:f8:74:58:f6:c0:aa:9e:5e:
4d:ca:9d:39:ed:b9:ca:3a:8f:fb:ff:5a:cc:b9:96:8c:93:44:
6f:11:23:54:ca:4a:70:43:1a:46:0a:1b:2c:74:23:84:57:f8:
2e:03:ed:ee:68:58:d9:f0:d8:5e:5a:9a:09:b1:b4:1b:1f:71:
8e:5f:41:06:5b:7e:90:3b:31:ed:87:77:55:79:7f:46:99:88:
fd:fb:39:1a:2c:82:58:dc:63:02:58:8f:b0:b6:91:7d:c2:93:
19:fa:4f:d3:72:74:e7:05:03:49:c6:c4:09:c7:c8:5e:28:07:
3a:ca:60:b0:e3:e4:e6:29:37:29:95:33:6d:69:9b:7c:94:c3:
4a:d0:4c:e8:50:b5:35:db:4b:4a:c6:10:c6:f4:03:d2:3c:56:
11:da:95:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:53:07 2025 by rpki-client