Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b1f45149-3f95-3665-9dd9-79ae12c23ed8.roa
File: b1f45149-3f95-3665-9dd9-79ae12c23ed8.roa (raw, json)
Hash identifier: CnyVrq1odyLl/eDrs2BrnjKDUn2JRxkDxZoagwgYt1o=
Subject key identifier: 63:53:9F:9E:1E:C6:DE:BD:F2:90:57:48:93:56:09:60:9D:98:4A:CB
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848E2D1E958F6DDD47851C61700
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b1f45149-3f95-3665-9dd9-79ae12c23ed8.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20115
IP address blocks: 71.86.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:e9:58:f6:dd:d4:78:51:c6:17:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=1741617f-33e0-4ec6-b997-6f25108c5208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:be:24:ce:7d:3c:cc:25:6e:33:c0:26:e3:5a:
4c:c5:c1:33:9c:3b:a3:6b:ee:a5:4f:c6:06:52:91:
17:78:19:a9:15:9d:8f:30:ae:b9:1c:1f:4d:e2:f8:
a1:cd:77:f7:69:c9:ee:f0:61:76:36:3b:fb:e2:18:
8a:0d:24:48:12:b5:b5:9b:e6:8b:bc:3b:f4:da:90:
23:3a:48:a2:c4:d2:03:93:4a:63:8d:72:ad:d1:06:
87:57:6a:d7:86:a2:78:c5:bc:37:ca:36:d0:7f:e8:
41:0b:c4:59:84:eb:22:f1:51:ac:79:4f:15:b1:a6:
30:56:22:73:96:e7:a9:9f:cc:2a:d8:ba:c6:7a:51:
a1:9e:73:0e:b9:47:3f:42:86:26:58:0e:e9:af:dc:
c5:58:fb:6c:9d:57:72:95:e9:5b:c0:5d:c2:9b:d9:
39:2a:dd:7b:34:ad:82:55:de:fc:b3:0b:ff:45:31:
38:0a:f6:19:93:29:8b:53:a9:f7:a8:28:be:6d:3e:
7f:0c:10:bf:72:d7:3d:d4:d4:71:8d:30:cc:92:1b:
9f:55:dd:07:5f:9e:6b:b0:f6:8b:a4:ba:1c:10:5c:
1f:a3:fa:3d:d0:dd:1b:84:e2:f2:83:18:dc:b9:e8:
b2:2c:db:1a:ef:e5:8a:b3:39:c6:80:90:88:33:28:
92:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:53:9F:9E:1E:C6:DE:BD:F2:90:57:48:93:56:09:60:9D:98:4A:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b1f45149-3f95-3665-9dd9-79ae12c23ed8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.86.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:59:e3:6a:cd:17:45:30:80:f7:60:2d:24:2a:93:1a:7c:b9:
cf:54:56:ab:ec:b6:15:24:9c:ce:c9:21:e9:55:f5:30:9e:af:
cd:2e:23:8d:24:81:9e:e2:2f:e8:49:47:03:f3:89:50:5c:91:
dd:4f:66:d7:db:66:e2:37:0b:d6:ad:37:25:75:91:31:ef:66:
c6:d9:d0:ee:d8:27:76:ea:1b:9b:18:0b:ef:0f:6e:ab:15:e7:
23:c3:b9:68:06:ab:df:48:5b:c2:6c:28:20:78:03:94:b5:52:
f3:69:34:f6:fc:f1:eb:50:57:55:ca:39:20:b0:8a:cd:5a:63:
04:61:3f:05:d4:4a:3c:66:bc:d6:28:43:f9:a9:52:00:a3:5e:
43:f4:c9:0a:b9:8f:cd:78:b1:d7:1c:25:44:e7:ad:03:ba:61:
2e:46:22:0e:0c:b5:5f:25:f1:42:b5:18:96:33:38:87:9e:d0:
0a:4d:05:9d:9c:17:04:ea:00:98:44:63:be:33:b7:15:d5:39:
82:ac:a3:3e:50:02:56:37:06:5d:37:86:0d:d3:9a:77:77:02:
01:ee:de:d1:83:05:0a:87:93:d1:2a:c7:6a:aa:b2:51:90:a4:
fe:dd:7e:b5:92:62:a5:6b:08:f8:9f:ab:e3:8a:b4:73:87:7b:
96:f3:a0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:20:43 2025 by rpki-client