Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/45498702-8286-34f8-9e13-dd76ca105110.roa
File: 45498702-8286-34f8-9e13-dd76ca105110.roa (raw, json)
Hash identifier: mEBMbx1D/ElAfFVRnlFFeTaffI6c4o7CjYodpJvyzYY=
Subject key identifier: 43:33:E2:F8:76:29:51:CF:D8:48:3E:49:C4:FD:CD:99:AD:78:DE:B7
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848E2D16CF3C7C7D20726467900
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/45498702-8286-34f8-9e13-dd76ca105110.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20115
IP address blocks: 47.42.128.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:6c:f3:c7:c7:d2:07:26:46:79:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=929552d5-1b13-445f-89c5-eb60da76d849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:32:b9:29:d1:a1:cd:6b:a2:07:7b:f3:dd:28:
0a:3c:cf:83:0f:55:90:0e:7e:ac:fb:b6:1d:c1:18:
65:54:fe:ba:76:34:f9:8a:00:2a:43:ee:d7:b5:f7:
0c:0e:0d:84:81:4c:fb:1e:3c:54:1c:de:b9:3f:4f:
38:cb:09:97:b1:15:fb:34:67:31:91:5e:3a:39:9e:
87:da:1f:f0:31:14:42:18:f2:35:77:c3:2d:9b:fe:
b6:d7:79:09:b3:0a:b1:90:e3:23:66:44:5c:57:7b:
9e:14:42:12:35:c5:85:1a:88:c0:d8:f8:51:14:47:
0f:de:ef:5a:d0:4c:72:fd:96:b6:2f:b1:1d:ef:a5:
2a:9e:e7:10:7f:3b:20:9e:51:8c:e7:35:56:6d:10:
1b:6d:fb:c7:2a:fe:0f:ca:f3:16:db:fb:dd:39:d1:
a5:b4:32:af:bb:e4:43:88:2f:dd:27:ac:39:e7:d3:
f7:f5:6c:ba:fe:48:ab:c9:a6:e2:34:f8:ae:80:e5:
1d:e1:ab:35:aa:e5:3e:1f:fb:14:01:b5:59:9c:0d:
f6:e2:0e:dd:a7:fd:04:e6:03:6b:aa:b0:ce:5e:ce:
23:0e:72:29:07:14:02:6d:be:6a:95:08:d2:30:06:
b9:11:40:24:28:af:d1:54:7a:5d:4c:ab:a0:f3:55:
7c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:33:E2:F8:76:29:51:CF:D8:48:3E:49:C4:FD:CD:99:AD:78:DE:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/45498702-8286-34f8-9e13-dd76ca105110.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
47.42.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:d5:d3:3c:7d:48:06:68:c7:a7:1d:1e:9d:02:21:63:6f:ea:
6d:12:59:11:3b:93:c7:66:e0:eb:a3:1b:3d:6d:1f:21:5b:3e:
20:a3:6a:fb:cb:bd:25:01:4b:fe:4a:44:a2:c9:32:51:32:22:
42:76:7d:58:42:77:f2:2b:c5:21:08:fb:14:f2:10:8e:1f:ff:
23:77:93:8d:c8:29:7b:5c:23:ad:df:10:e5:db:56:91:bc:d6:
83:40:c4:5e:67:6d:8f:31:fe:26:ee:33:1e:87:dd:d9:87:2c:
eb:23:7c:a2:49:11:a4:32:25:dd:85:25:08:21:13:8f:c6:a6:
ee:7e:19:fc:aa:2c:c9:85:2b:99:1b:fb:d7:cd:e0:82:42:a8:
bb:24:b9:a2:54:ca:a3:36:6c:ba:5b:55:2e:ff:f1:b9:4b:e7:
9e:5b:08:95:fc:4d:03:7f:a8:4d:61:77:e3:0c:17:8a:30:38:
21:02:23:c6:46:eb:17:27:2d:ee:ef:e8:5c:42:8f:fc:73:61:
0b:05:c1:b3:b0:4f:05:fc:d1:2b:db:33:54:59:a5:d1:23:89:
39:21:fe:5b:f9:20:95:da:cd:75:51:22:22:52:46:15:7f:fd:
bf:62:de:48:cf:25:71:85:74:42:2f:c1:32:c4:b4:be:60:04:
96:82:40:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:25:27 2025 by rpki-client