Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3f82a652-c9e7-3a8b-ab9a-026de067eb4e.roa
File: 3f82a652-c9e7-3a8b-ab9a-026de067eb4e.roa (raw, json)
Hash identifier: Dk4zO46wytAUhTFcFmvdN1jmzyiJ/SvtwErQUIFZoKw=
Subject key identifier: B2:DA:2E:8D:1E:54:08:D8:C3:C0:7C:14:D9:8D:9F:9C:3D:71:AE:1B
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848E2D1823331871F67EA313180
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3f82a652-c9e7-3a8b-ab9a-026de067eb4e.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20115
IP address blocks: 71.8.248.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:82:33:31:87:1f:67:ea:31:31:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=b185da3b-c3a7-45ae-bba3-b0000bc3bfa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:dc:1a:1e:7d:48:56:f8:fb:c6:ff:58:41:24:
43:a2:76:39:94:d8:b0:79:a6:bc:69:df:df:7f:f7:
0a:8c:87:a1:ab:19:f8:a9:5b:f2:08:44:9f:a8:97:
a2:85:0d:f3:f8:73:95:7d:ed:91:05:54:e7:1b:4b:
c3:28:1a:be:49:e5:01:40:0d:8f:e6:70:63:66:38:
74:77:2f:f0:1b:7f:51:8e:9b:02:02:ff:34:e7:12:
0b:64:1d:65:95:16:50:e2:52:8f:e8:bc:22:45:0f:
62:06:93:2c:f1:89:50:c7:d0:56:2b:f6:a4:b2:48:
be:26:5e:a8:79:39:5c:9f:69:26:57:ee:56:7c:7d:
2f:5a:fa:6e:36:68:03:96:c4:9a:71:06:ac:e9:2b:
0e:36:9a:11:b7:28:59:4e:6f:f5:f8:c4:3a:4d:91:
b5:14:6a:d3:18:1c:6b:d6:e2:4e:ed:88:1a:cd:ca:
a1:38:f4:26:5f:36:95:73:00:0e:7e:84:14:25:c8:
2a:5b:c0:5b:86:e3:ae:41:23:d1:ca:39:5d:7c:2c:
29:df:b5:c7:5d:49:fc:c4:15:f1:b9:bd:c3:45:1f:
8b:54:d0:72:84:ce:8a:93:c4:fe:10:91:1a:27:63:
c3:6b:ce:a2:26:43:d4:61:77:9b:2d:36:38:15:aa:
5c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:DA:2E:8D:1E:54:08:D8:C3:C0:7C:14:D9:8D:9F:9C:3D:71:AE:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3f82a652-c9e7-3a8b-ab9a-026de067eb4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.8.248.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:0d:ee:ff:96:9d:46:17:45:7d:ed:fe:c0:a8:97:10:88:0b:
86:32:23:11:a5:0b:78:be:af:a9:c7:21:5c:bb:64:7f:7d:84:
83:8a:fe:8f:cb:f2:f8:d6:bd:77:96:72:18:f0:09:b1:68:e9:
39:d8:2c:f3:da:c2:52:9a:43:0a:e0:bb:97:be:01:a1:34:6e:
cd:01:f6:76:bb:0a:7b:80:57:f4:b2:d1:b5:29:dd:70:63:c8:
6b:1f:01:b2:d9:31:23:01:87:57:dd:12:ba:87:85:b7:fa:78:
76:8f:09:40:f2:92:d9:74:26:57:e6:93:10:1e:db:76:ab:a8:
f0:cc:01:89:35:2a:13:55:26:57:26:e9:2d:c3:67:32:f1:b8:
0b:3f:ff:82:f4:81:30:75:30:12:82:48:39:17:a7:74:d0:4c:
36:4b:28:18:92:94:8e:29:bb:fb:ac:42:82:ce:7b:07:44:09:
60:bf:72:32:0d:0e:19:7f:d4:14:95:b3:7b:a9:41:bb:08:93:
85:6f:a3:79:59:aa:89:ba:bd:17:c5:67:82:f5:6b:29:6d:4f:
a5:e6:b2:aa:ee:7c:a8:06:cc:a4:6c:de:22:8f:80:03:01:ce:
f7:0b:09:f4:cd:74:7b:6a:13:a3:ba:e3:11:9d:ec:61:a5:89:
4b:1a:a9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:42:35 2025 by rpki-client