Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9d87d954-b3c9-3c5f-8fa1-31ea85fdef6a.roa
File: 9d87d954-b3c9-3c5f-8fa1-31ea85fdef6a.roa (raw, json)
Hash identifier: p0qIIcnw1h2DTMmVITVwIjsX7KPll+GCUrRmwt86OJ8=
Subject key identifier: BB:C0:BA:BA:B8:DC:FF:A2:0D:7E:0C:CA:15:5E:4E:71:57:B3:DF:D2
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848E2D181782E5DB25BD7D1DAC0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9d87d954-b3c9-3c5f-8fa1-31ea85fdef6a.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20115
IP address blocks: 68.191.88.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:81:78:2e:5d:b2:5b:d7:d1:da:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=3ffffe7b-10c0-4bbc-8f99-0fa3cad6add4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9b:db:a4:ee:1a:30:fb:45:a4:cc:35:3c:89:
28:bd:82:ed:cb:00:cb:c2:01:65:3d:25:02:a3:3d:
47:f2:3a:22:3b:68:c1:f8:18:94:91:a2:45:4f:65:
67:49:14:db:b7:e6:2b:8e:7e:26:01:67:a7:26:e0:
cf:af:b2:71:c0:50:35:cc:15:aa:30:6b:47:ff:2d:
68:1d:67:47:41:0b:d5:0d:24:e4:9a:04:ee:54:85:
3d:bb:55:b7:af:51:97:a3:9b:7d:6f:b2:11:d8:6b:
f8:f7:74:bc:6d:f7:c8:75:40:9b:52:7e:82:37:78:
e7:b3:4e:e1:4a:88:4d:fe:11:e1:97:0d:62:b1:d0:
2e:26:5e:7d:01:18:5c:e6:a9:c3:7e:c8:ef:50:6c:
fb:92:a4:c9:47:28:30:8a:e4:a6:2f:37:2a:db:9a:
2f:f1:0f:da:da:65:a9:53:10:cb:7b:94:53:90:9d:
8f:b6:de:22:43:d8:b5:bc:6e:1a:73:8e:a2:2f:c6:
dc:92:86:d9:b4:aa:19:e3:84:6b:f0:06:f7:17:2e:
a2:52:d9:a7:19:2c:6c:7b:f4:8b:93:04:bf:f8:8b:
ac:c5:9e:9f:34:83:2f:5c:f4:5f:83:9e:ae:a9:ca:
dd:96:d1:95:58:8c:42:f8:94:fa:c9:5f:70:2c:5f:
75:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C0:BA:BA:B8:DC:FF:A2:0D:7E:0C:CA:15:5E:4E:71:57:B3:DF:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9d87d954-b3c9-3c5f-8fa1-31ea85fdef6a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
68.191.88.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:0a:14:21:2d:59:44:80:7e:83:c5:a4:05:a8:96:64:38:b2:
ce:ab:a1:07:85:3e:24:3e:b7:f1:a6:9e:0f:a0:8f:aa:d8:cc:
d6:db:41:71:24:49:75:30:c1:c2:71:41:3e:29:8c:97:0b:e5:
78:43:11:71:32:c8:fc:c9:de:e4:e1:66:3e:2f:12:f4:d7:93:
04:d7:dc:73:91:01:0b:4b:4c:3b:32:1a:fc:99:36:3c:2d:f2:
ce:0b:50:81:fd:c9:56:fa:e4:6e:ff:66:78:78:68:89:c8:b7:
a6:50:2e:26:5c:54:d7:a0:cc:a2:6a:fe:28:f9:cd:ef:46:ec:
c9:b4:21:72:8a:7a:63:ea:7c:ca:90:04:70:f8:41:f2:59:a4:
2f:20:c8:4d:e8:39:6f:43:42:5b:88:f3:36:45:03:5d:26:32:
65:2e:bb:0d:3c:8e:34:d4:75:b3:c6:55:75:d1:db:b1:f9:44:
c2:3c:1a:20:b7:8c:e6:2d:53:5e:73:2e:40:00:cf:bd:e0:ea:
a0:f5:76:dd:45:41:be:fb:57:da:fd:f0:03:23:52:85:e4:4f:
84:1f:25:99:1c:90:8e:cc:19:d6:b0:00:59:5d:bc:8d:63:11:
62:7f:9a:4d:bb:bf:b5:34:eb:1a:23:da:6a:f5:29:b9:cd:f3:
b9:1c:3e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:05:47 2025 by rpki-client