Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/68f45ff2-351b-38be-b361-cef82c9ab2c8.roa
File: 68f45ff2-351b-38be-b361-cef82c9ab2c8.roa (raw, json)
Hash identifier: sU+52o+e2QbUhhIqaREu6qrNbTcZPXGM7/JYjTd60rY=
Subject key identifier: 88:24:19:DA:0A:C5:AA:CC:DB:33:FE:AF:A1:E0:93:EA:1B:34:3C:89
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848E2D17694B7D59BD36557D800
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/68f45ff2-351b-38be-b361-cef82c9ab2c8.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20115
IP address blocks: 24.181.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:76:94:b7:d5:9b:d3:65:57:d8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=684f1d5c-2f91-4252-ae6d-755cd410a9e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:22:a0:27:5a:ba:38:40:e5:b9:b4:5a:fa:cf:
68:06:a2:90:25:19:67:ec:22:a6:ea:dc:04:87:c7:
db:69:fe:52:53:49:f3:0c:87:e6:14:36:88:f3:d5:
65:8b:52:07:3f:88:ff:58:b5:c8:2d:1b:36:fe:a0:
a4:81:21:c4:1e:d3:72:49:5c:00:e9:4a:aa:82:a9:
0a:19:14:0c:d6:c8:33:80:fa:da:a7:6d:b6:9c:5e:
d8:93:7d:72:7f:dd:43:bc:cb:5f:fe:1d:6e:fd:24:
00:39:f0:16:61:67:24:0a:28:fc:d3:8a:6f:50:67:
12:7d:41:c8:19:b2:6b:70:0c:f7:f4:b1:09:88:14:
91:c8:a5:9d:83:de:ed:2e:8f:6a:37:3e:32:42:c1:
29:e2:c9:7f:08:52:54:d3:b4:bf:39:ff:1c:e9:91:
ae:71:2b:1e:41:ea:a4:c2:72:0a:ab:80:7e:b6:8b:
37:13:e7:f8:61:87:a4:9e:08:a0:ac:09:bc:fc:1a:
19:cd:d2:89:1c:1f:b3:ee:43:c2:d3:c3:65:5b:b0:
05:bc:d2:91:61:80:35:f3:64:bc:bb:79:0a:ca:d7:
e5:19:21:92:d4:02:80:0b:f3:d8:e4:1f:87:00:c9:
af:96:dc:3b:51:41:f3:7c:23:ac:d7:3a:ef:82:48:
0f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:24:19:DA:0A:C5:AA:CC:DB:33:FE:AF:A1:E0:93:EA:1B:34:3C:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/68f45ff2-351b-38be-b361-cef82c9ab2c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
24.181.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d2:0e:ee:db:eb:88:f8:01:3b:af:b4:df:67:fc:c6:95:a2:a6:
40:48:8a:2a:05:1d:a1:a2:fe:5f:4f:0c:07:75:f9:f4:6d:f3:
05:00:82:79:9e:78:c8:22:8c:d3:40:ca:25:a4:09:cd:c5:df:
f1:93:ab:42:10:4b:c7:67:0a:07:b5:0e:a8:6c:3f:0a:c7:7a:
9c:f6:25:73:30:e0:a4:d5:6b:a4:b9:80:bd:44:70:b5:71:1f:
d5:ea:8e:82:04:4d:52:18:aa:a3:ce:86:9b:20:5d:8f:2e:3f:
02:bd:c0:7a:e8:a2:15:b4:69:8c:e1:b4:54:6e:e6:a6:fd:4f:
b1:9a:7f:3f:5e:9b:00:50:85:68:22:98:ce:9b:01:75:b9:e1:
4e:2e:97:d1:4a:36:29:7c:b1:9f:2b:06:07:ff:22:86:e6:58:
7f:0e:45:14:be:23:ad:7f:32:4d:f5:ba:58:bf:5c:52:00:aa:
a1:de:c7:90:7c:24:b2:ba:c7:0a:b9:61:af:df:4b:7a:cc:d6:
0b:63:32:96:7b:2b:c1:5f:bb:ab:62:0e:b8:9c:c0:de:26:92:
63:87:33:b8:74:2d:68:97:92:fc:b5:46:21:aa:52:df:85:9c:
a8:32:4d:3c:e9:fd:ef:a2:57:22:24:8c:24:f2:8a:d9:4c:7c:
0a:94:2c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:25:45 2025 by rpki-client