Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/aa815707-530d-3d3f-8605-cac29011363e.roa
File: aa815707-530d-3d3f-8605-cac29011363e.roa (raw, json)
Hash identifier: bjgSk7IWbXLzPdhn3ktcBuSt3U/9SdywLsUqj9n3vJM=
Subject key identifier: 24:ED:69:08:73:A2:A1:82:D1:E7:93:D2:5C:F7:7B:5E:1F:E5:F8:D5
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848E2D196F4D99C1098C40E6DAF
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/aa815707-530d-3d3f-8605-cac29011363e.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20115
IP address blocks: 47.231.250.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:96:f4:d9:9c:10:98:c4:0e:6d:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=ff0969a7-740e-413d-8d3a-07e8029cdb1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8b:ba:7f:9e:b3:c2:72:01:32:b1:9a:11:f2:
0e:a9:33:6c:96:47:ea:8a:02:af:54:ed:bd:8c:77:
56:5d:9d:46:d0:f9:51:3e:f5:0c:2a:86:8d:fc:be:
e9:32:d4:37:b0:7c:fc:2b:59:b5:64:55:e9:fc:32:
4a:ba:f6:8f:25:ee:7a:f5:0b:89:ff:22:d0:e9:41:
d6:b5:d1:c6:e9:68:00:42:2a:b4:4b:55:d1:1c:f6:
82:c8:41:0c:7e:88:a2:bb:87:a2:d2:1a:e9:b9:89:
7b:fb:85:f4:57:11:e6:56:67:05:56:3f:ad:17:5f:
2d:12:27:f8:06:42:3f:8b:33:27:7a:91:12:ee:a8:
92:d4:b9:f7:9b:22:cf:ed:45:ce:c7:e8:6d:90:1f:
c1:5c:99:97:42:aa:cb:c6:ff:6d:61:58:56:45:0c:
bf:22:7c:7f:bf:d7:db:c0:f6:a8:92:65:81:ce:a4:
b2:59:2d:f9:4e:4a:d3:ae:ed:52:00:3f:18:fd:5f:
8a:49:16:53:2d:3b:bd:86:17:72:45:f0:47:51:b2:
3f:3f:23:9c:66:7b:87:73:01:85:e3:de:ba:f7:89:
c9:c4:ec:d8:75:f9:81:ee:85:97:37:c5:5f:0b:e0:
79:ea:bc:4c:43:c0:b6:06:93:5c:52:d2:ab:6b:b7:
75:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:ED:69:08:73:A2:A1:82:D1:E7:93:D2:5C:F7:7B:5E:1F:E5:F8:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/aa815707-530d-3d3f-8605-cac29011363e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
47.231.250.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:9a:e6:17:e2:4e:82:d3:f0:6f:5e:df:13:0c:73:9c:6b:41:
12:62:ee:d4:fe:2d:f8:ff:56:38:86:58:a1:59:9f:21:5c:7f:
93:0c:d3:25:2e:74:bf:2b:34:da:94:00:37:4f:6e:a2:d4:34:
d0:73:0f:03:82:7e:d6:ff:37:74:b8:31:da:83:43:9c:ba:97:
e2:b4:0e:1a:48:3b:6e:92:32:a2:0f:58:6b:cd:ba:2d:2c:f4:
30:70:c1:3d:fa:3e:57:2b:5e:2c:64:02:45:66:f8:f9:9c:07:
fd:1c:99:5b:54:71:0b:de:db:88:f0:0e:a9:74:8f:f2:97:fb:
4e:d2:69:60:3f:29:c7:e4:95:60:b0:dc:84:21:61:bc:33:a9:
2c:bd:1f:08:e1:e8:4b:0f:38:e9:15:13:e2:79:e1:ec:cd:0a:
7b:6b:9c:77:58:52:90:7c:ea:d7:aa:85:c0:81:8d:18:d0:b2:
bc:24:19:d4:76:9e:2b:92:23:c0:68:81:17:7b:35:1b:2e:6a:
86:39:03:30:16:8f:a6:ed:05:ae:2d:1c:bb:7d:64:b3:dd:1c:
cb:d1:57:67:93:63:4a:6a:87:4a:fb:42:48:13:84:68:62:5d:
e0:ca:ff:09:e0:fd:a9:a2:2a:8e:df:55:6c:42:5f:33:be:30:
f4:21:e2:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:25:38 2025 by rpki-client