Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b2067c8a-a544-31a8-a7d3-87c701ddac71.roa
File: b2067c8a-a544-31a8-a7d3-87c701ddac71.roa (raw, json)
Hash identifier: pZTKoSjLC9e6hOjRgOrzVcM2qvuchF08ihlXcWJCDpo=
Subject key identifier: AE:DF:A3:D5:74:CD:82:ED:07:51:8A:9B:CA:6B:84:30:5E:E9:35:AE
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848E2D163760E5DDF64161D2D00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b2067c8a-a544-31a8-a7d3-87c701ddac71.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20115
IP address blocks: 35.129.64.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:63:76:0e:5d:df:64:16:1d:2d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=c9bc64f3-0565-4aa6-8fbc-084a40cdec9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:25:b2:c0:86:5a:05:b3:04:ea:80:75:2e:1a:
45:ae:2b:b3:1a:09:ce:ab:7d:d7:be:77:7e:f5:c4:
74:67:b1:94:28:a5:36:25:bc:82:ca:15:28:f8:a3:
4c:c6:60:39:51:0d:2c:d3:14:c7:5c:50:4a:fb:db:
ae:df:ae:c9:2e:99:50:67:44:1f:fa:0a:ed:fa:5c:
3d:2f:c8:84:d2:2b:72:34:2f:5e:30:1a:d4:36:a1:
95:82:79:08:0f:bd:5c:7e:99:69:73:4f:4c:50:8c:
bf:d1:9c:e3:49:e1:c1:fd:7b:a1:65:54:60:08:9c:
80:c6:98:5b:56:74:dc:a4:03:0f:2d:46:75:ed:19:
2d:e0:f5:47:a7:e3:02:54:73:8b:35:ae:ad:12:e6:
a4:bc:f6:bb:0d:ee:8d:05:20:7b:ee:1c:9c:42:19:
01:05:3b:83:dd:27:35:c9:17:5c:75:a5:9f:6b:70:
c1:34:58:5b:1c:97:71:00:be:27:b9:24:8e:7d:aa:
49:ad:b1:78:ae:43:7d:41:9f:34:1d:36:18:dc:99:
42:7f:2c:79:2b:3b:2a:02:42:35:bf:fe:6c:51:68:
ac:67:d8:db:0e:31:56:93:17:16:1f:0c:0c:17:7d:
6b:20:f2:60:a0:49:4c:be:90:b5:71:ea:24:fe:4e:
9f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:DF:A3:D5:74:CD:82:ED:07:51:8A:9B:CA:6B:84:30:5E:E9:35:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b2067c8a-a544-31a8-a7d3-87c701ddac71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
35.129.64.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:2a:3c:a7:b2:47:0c:5f:28:0b:d3:04:e7:b5:cc:d9:e3:30:
2d:73:91:7e:1b:b2:47:2f:31:e8:15:62:33:cc:21:41:55:25:
64:b7:29:29:1e:fc:ff:f6:2a:a9:56:c2:43:ce:a6:08:6c:3f:
24:fb:a5:76:77:ea:7b:fd:12:f1:3f:a0:75:b1:cc:39:13:ed:
58:a5:d6:f2:31:0a:4e:ee:74:ba:01:a8:1f:0b:ba:5c:8d:73:
ea:c9:a9:62:ce:92:87:d4:3e:21:5a:5e:7f:e3:82:68:50:6c:
33:9f:39:8a:8c:ee:bc:5f:2e:0c:93:dc:63:31:fe:ba:d1:68:
b1:d1:a9:8b:09:06:82:85:9a:52:49:a8:f0:f1:c0:db:79:ba:
82:cc:d1:cf:f4:d6:7d:99:32:b0:35:07:54:16:c2:ff:ba:6d:
7c:27:07:30:e3:1e:b3:27:19:2c:ec:e6:85:ef:33:db:e5:9b:
8d:5e:71:b3:fe:3a:f8:63:71:c5:88:55:9b:af:9e:bf:2c:3f:
72:78:50:74:23:55:57:6f:1a:a2:22:9c:1b:d7:d5:e4:4b:6a:
6b:99:20:52:29:e0:9f:c1:ae:4e:8f:42:8e:3f:54:ab:64:ca:
d9:f1:ec:d5:d0:c9:56:14:16:80:16:39:16:2e:ef:e5:04:ce:
f9:da:34:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:16:00 2025 by rpki-client