Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8ada970f-ad20-3b9c-add8-c2108da067c9.roa
File: 8ada970f-ad20-3b9c-add8-c2108da067c9.roa (raw, json)
Hash identifier: IiIlDr1tM/XPhPN5180aZNvb84GD1GF4ohURE2kZqYM=
Subject key identifier: 8A:95:CF:4C:9C:65:FC:CF:D0:34:1C:40:86:74:84:CD:F5:73:9B:3A
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848E2D1EE7735880826BEE4D000
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8ada970f-ad20-3b9c-add8-c2108da067c9.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20115
IP address blocks: 47.32.192.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:ee:77:35:88:08:26:be:e4:d0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=8adf0513-4eb2-47d8-9dd2-74e19299abb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:44:a1:d5:68:f1:fb:c4:4b:e3:47:2d:8e:2b:
e7:de:5c:fd:74:5c:67:ed:7d:ed:2e:92:15:f3:32:
bf:5a:ed:90:0e:05:63:6f:d4:b6:19:f9:0e:d8:ed:
f3:86:7c:4d:7e:b9:33:df:fa:24:46:7e:41:d8:be:
9d:40:b0:69:59:0c:2f:53:e1:51:5e:fa:81:5f:f6:
0f:97:c9:03:c4:71:a2:73:16:06:e7:04:5b:98:6a:
5b:05:6e:4f:75:0a:f9:b1:18:ff:f7:7a:92:50:fb:
5c:1d:42:50:32:8b:e6:2c:57:11:4d:0b:48:d3:e2:
f9:d3:ac:1d:07:51:8d:09:bb:ff:91:dd:25:94:43:
8b:23:53:f5:79:f0:29:1d:da:cd:15:b1:4c:11:a8:
e7:b0:6a:e6:00:ef:31:8c:64:18:74:40:4f:cb:a0:
66:40:2b:70:7a:bb:51:b9:eb:75:78:13:8e:28:61:
de:c7:dd:1e:e6:a2:0e:fe:67:19:c0:ab:b8:04:b7:
82:6c:f9:6b:67:2a:7b:9c:47:fd:76:b5:ad:c9:a3:
ba:17:7d:0d:e9:8a:55:a2:61:db:9a:01:8d:c0:5b:
7c:42:7c:57:d0:80:fe:24:05:b3:66:dd:a4:90:ba:
d0:cd:61:d6:73:36:fd:b3:a0:4d:43:bc:f5:04:1b:
e1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:95:CF:4C:9C:65:FC:CF:D0:34:1C:40:86:74:84:CD:F5:73:9B:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8ada970f-ad20-3b9c-add8-c2108da067c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
47.32.192.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:a9:9f:da:01:ca:a4:07:a3:cf:cd:5c:74:3e:8c:67:5a:48:
32:ce:8d:2c:81:5a:b2:18:e2:ef:f2:8e:0d:aa:38:70:83:cd:
82:66:ab:a5:04:e4:0b:8d:86:92:49:d0:3b:3b:e5:36:cb:78:
3e:92:31:11:bc:c9:b1:ee:a8:18:73:a6:73:5a:41:68:6e:1d:
f6:54:45:11:ef:f6:ce:e4:07:07:05:6f:e1:07:c1:11:7a:89:
2e:df:31:9b:22:32:0d:52:fa:57:56:86:50:05:73:f1:90:39:
c3:9d:38:e2:27:46:ef:37:c3:fb:a8:dc:29:73:02:02:e4:6f:
3b:6f:29:63:71:fe:6e:df:6c:68:d0:17:1c:cc:3b:38:1c:20:
b6:9b:65:6c:c2:3d:35:c4:42:a0:57:a3:13:d1:02:1d:b4:f8:
e3:fa:70:33:e4:b1:41:24:25:60:e1:dd:d9:fd:06:10:2e:d0:
50:a6:79:dd:1f:4c:27:61:64:e1:9d:eb:2c:0a:8b:19:c3:5b:
53:16:5f:4c:4c:df:a7:6b:09:f4:01:b6:2e:ea:3e:b1:3c:b7:
23:df:14:52:82:4b:f9:6c:a6:87:b9:b6:35:a1:de:3d:0f:7c:
42:c2:2e:5c:71:ae:11:ee:31:8d:dd:75:f5:b0:8f:53:fc:86:
30:04:a7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:40:38 2025 by rpki-client