Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/91273d3a-ceab-3235-90ee-eb293eaf802c.roa
File: 91273d3a-ceab-3235-90ee-eb293eaf802c.roa (raw, json)
Hash identifier: wICtIvDbE9TFU3wN4+wyFhOcSY9OFfgx8XES6/ntwQE=
Subject key identifier: 53:FB:61:C0:72:02:6A:66:49:DB:3E:E0:EA:D0:1B:1C:37:92:9E:31
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848E2D185AA14C8B3B658870600
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/91273d3a-ceab-3235-90ee-eb293eaf802c.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20115
IP address blocks: 68.191.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:85:aa:14:c8:b3:b6:58:87:06:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=a4e29f2b-6ea7-46e8-aee2-4a603a7e5608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:34:08:fe:f4:21:fc:59:cf:ab:72:80:d7:b7:
80:1a:b8:02:96:21:7e:e3:63:b9:4c:e5:1b:6a:74:
05:39:4c:8c:4d:0b:73:96:47:90:de:3a:94:54:b3:
3a:5e:64:4f:82:2a:87:25:e1:ea:76:83:14:43:64:
46:47:4a:8c:51:0a:91:be:8a:ff:da:3d:12:2e:6b:
2c:44:ad:57:b6:4b:e5:67:d6:9d:08:f9:50:5a:43:
e5:35:5d:ad:c4:6b:9d:9a:e5:d7:46:04:a3:bd:7b:
98:89:7b:54:e6:07:02:a3:09:da:f4:ce:1b:bf:f4:
9e:d3:2d:af:28:24:9b:a2:9f:0e:09:31:2f:b1:b9:
70:e1:22:77:f0:d9:71:d5:76:37:fe:ac:f9:ba:1c:
c7:cf:d9:12:7e:ef:0d:3d:a9:05:54:e3:e9:2b:c3:
ad:a0:ee:af:3e:94:79:8b:c1:88:c9:cc:9b:ec:ed:
3e:b8:10:73:5d:ea:97:ed:e4:15:e4:8e:89:0e:36:
20:2b:32:60:8a:0e:23:f8:6a:ed:6f:b2:61:be:98:
a7:a8:b8:38:8d:a9:54:50:50:71:c3:23:45:1e:5b:
94:f8:f2:fe:e9:9d:ff:59:55:e7:1b:67:d3:3c:22:
01:c4:3b:a1:f9:3c:c0:17:39:c5:08:c0:84:48:9e:
ea:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:FB:61:C0:72:02:6A:66:49:DB:3E:E0:EA:D0:1B:1C:37:92:9E:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/91273d3a-ceab-3235-90ee-eb293eaf802c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
68.191.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:2a:71:f9:a1:60:32:03:fc:57:ec:62:05:5d:73:6a:83:f0:
7d:dd:c6:f6:39:ad:e0:14:40:d5:1b:3b:d0:55:c9:f2:6b:07:
21:d0:d0:5e:0f:bf:6c:0f:6d:4d:c1:fb:c0:3a:17:fa:74:80:
d1:7b:93:86:35:45:19:01:25:c9:89:76:f7:d8:8a:84:00:18:
b1:bb:c2:46:78:3f:8e:de:a8:ce:25:2c:ea:57:5e:78:7a:12:
0d:06:97:73:0b:3f:d1:94:b5:7b:ac:fc:7e:f4:ea:06:8d:1d:
3f:7e:a7:e9:0c:48:3c:83:f7:3a:c3:57:45:97:b5:3a:ce:d3:
24:30:a0:8b:93:5a:e8:d1:80:72:c1:ed:31:dd:50:31:1a:16:
5b:8b:e5:07:67:66:94:aa:61:f3:a8:3d:71:8e:bb:3d:e2:f1:
61:8d:c7:a4:6f:a5:5f:f8:b5:f0:9d:33:6c:b3:45:fd:0f:97:
cf:19:5c:2d:e1:b9:d2:96:3d:3b:f2:a1:26:5c:32:f2:89:d0:
05:15:73:27:06:68:f0:eb:52:9f:ac:a1:56:57:7e:46:b5:43:
07:01:41:d1:8b:ba:98:47:22:f6:73:8f:c8:4d:19:cc:62:ba:
ad:80:6d:8b:5d:da:79:79:7b:be:5e:92:c2:58:bc:e4:c6:66:
8f:1b:ea:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:30:17 2025 by rpki-client