Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/880d7411-f0a8-3331-9c09-c7c4dc7a509b.roa
File: 880d7411-f0a8-3331-9c09-c7c4dc7a509b.roa (raw, json)
Hash identifier: 6Xv0z2g1+zpRC0jRw6i/sIX8eOuJqJy+T3lV2E+d0EU=
Subject key identifier: 75:8C:F0:38:31:DE:93:41:6F:79:A9:6D:34:6D:88:62:6C:82:FA:FA
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848E2D168AF6B720A7AA14F2BC0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/880d7411-f0a8-3331-9c09-c7c4dc7a509b.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20115
IP address blocks: 24.247.192.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:68:af:6b:72:0a:7a:a1:4f:2b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=7f75ad74-7639-42e0-8c0f-f4bb507859fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2f:f7:a0:01:ed:9f:e4:be:1d:cf:17:70:d9:
7c:51:20:33:ea:1c:e3:37:eb:d6:3a:16:93:87:d4:
a3:9f:bf:79:8a:66:4d:0e:47:aa:9a:e6:5b:b0:ff:
a3:aa:68:a9:5d:69:2d:a1:a8:74:fe:78:b8:60:dd:
50:dd:b9:26:2f:07:fa:c5:d9:35:1d:c7:5f:aa:57:
a7:5c:e9:96:e1:10:61:9e:ba:dc:e4:97:d9:3f:1d:
88:99:61:6f:3b:ab:af:10:f5:99:9b:6d:c9:ff:56:
da:51:17:f0:45:29:a7:eb:89:ab:3a:85:8c:dc:45:
7c:cc:d3:5c:03:f8:9c:a6:a7:f1:a1:40:3b:dc:d3:
78:f7:cd:9b:38:32:b8:19:d2:0c:98:7c:4f:f4:67:
d9:f2:a8:5a:2a:53:f2:04:12:e4:49:07:c5:fc:56:
85:8b:7a:6b:32:1f:4f:71:7b:b5:ec:a3:22:fc:3d:
ae:ed:a6:8a:73:2e:00:2b:da:d8:de:c8:1e:15:93:
c4:1b:70:25:b9:a8:63:5a:35:34:30:a5:ef:46:66:
c7:89:4a:a1:cc:7c:29:24:8d:27:70:67:1c:ba:52:
50:6a:e0:b0:dd:49:24:b2:af:92:17:9c:8a:8c:7d:
17:8a:ef:f7:0d:b4:38:c9:6d:ed:22:b5:85:e0:db:
84:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:8C:F0:38:31:DE:93:41:6F:79:A9:6D:34:6D:88:62:6C:82:FA:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/880d7411-f0a8-3331-9c09-c7c4dc7a509b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
24.247.192.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:fa:47:d0:45:0c:c7:06:c0:4a:55:4b:fc:28:44:97:62:a8:
a4:24:ba:cd:a9:16:e4:11:1a:24:3b:01:61:62:d6:95:cf:18:
5b:b2:ea:eb:4d:30:5c:b2:45:80:25:4a:65:97:43:10:f5:c0:
b9:0c:68:a1:9a:e3:8c:1b:20:be:91:66:49:33:b0:70:a6:81:
90:1e:75:b2:c7:a8:d4:80:46:0b:e4:94:a3:b7:2a:cb:ee:2d:
3b:90:07:ef:16:67:fa:34:8e:f6:ee:b6:94:27:8d:c4:dc:96:
2b:15:aa:5a:f9:be:72:7e:b2:3c:56:9b:5f:d1:0a:22:7e:6d:
e2:66:e3:ed:25:f2:6e:0d:74:06:c4:66:01:49:99:99:c8:ac:
ff:12:e2:d1:ee:98:43:5f:ae:75:ed:56:0e:a5:e0:02:a8:db:
df:51:e9:98:9e:20:92:c0:26:60:3c:29:6e:72:fe:fc:a0:6c:
a6:30:85:74:49:c1:54:4d:1a:c9:b2:0f:74:98:18:0b:19:b5:
0b:d3:ec:4e:b3:f6:58:f2:2a:a7:a2:81:72:5a:08:2c:0a:76:
d0:b0:82:62:8a:8a:d2:d2:bc:85:19:45:ba:19:16:b7:50:d3:
f1:e7:17:eb:06:65:c9:0f:25:32:fa:63:75:f1:35:7d:34:3a:
ed:28:73:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:13:06 2025 by rpki-client