Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bbc09658-6ffa-36c7-bd98-192f74112450.roa
File: bbc09658-6ffa-36c7-bd98-192f74112450.roa (raw, json)
Hash identifier: j5PIvO23gxaKBN7aVEFYZvpiPUcJvvsE/0W9SXKyteY=
Subject key identifier: 31:5D:08:5E:80:2F:5D:D6:D0:2C:F7:44:03:E6:50:06:FD:BB:90:5E
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848E2D207DC1851BA78530C4780
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bbc09658-6ffa-36c7-bd98-192f74112450.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20115
IP address blocks: 97.89.248.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d2:07:dc:18:51:ba:78:53:0c:47:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=e721736a-89c3-44fc-9256-8510c981828f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:52:cd:e7:68:e9:4b:1e:2e:aa:a5:bf:44:0f:
5b:e3:d3:4b:25:8c:29:00:3f:f0:d6:70:64:5c:28:
c4:27:26:32:72:20:4a:5b:3f:9b:2e:38:2d:4b:fd:
62:d7:a6:cf:51:3c:aa:84:80:41:3f:09:0d:c5:0c:
b3:e8:22:8d:9f:b4:8d:40:d3:b8:bb:f9:f5:d4:15:
a3:8c:63:59:4f:c5:63:bd:4f:f8:d8:c3:44:af:16:
a5:57:86:5d:3c:14:31:11:78:b5:70:e3:6c:94:1b:
39:58:06:43:66:af:5a:51:cd:58:d3:39:fa:83:cb:
a1:90:ba:f6:12:f0:2b:c9:79:60:43:b1:c5:ea:9e:
ae:65:c7:49:a8:d4:ea:e7:b1:f7:63:82:fd:67:9c:
e6:e0:9b:ce:b7:58:51:d9:43:f3:28:c9:47:15:38:
ea:7b:20:3d:07:1d:55:10:bb:9c:6a:4a:4a:50:df:
e4:1c:e5:98:cf:2b:66:84:0a:f8:0a:80:ac:ca:4a:
e2:fc:6d:56:5e:28:ab:a3:19:05:d1:77:44:e4:ce:
21:e9:54:ee:25:4a:bd:1a:70:90:23:a7:67:0b:86:
4b:2b:c9:48:04:45:4c:de:5a:50:aa:24:25:6e:29:
79:65:8c:a9:c8:6d:ba:d5:3a:04:b7:ea:10:20:33:
b0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:5D:08:5E:80:2F:5D:D6:D0:2C:F7:44:03:E6:50:06:FD:BB:90:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bbc09658-6ffa-36c7-bd98-192f74112450.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
97.89.248.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:88:a4:c2:e7:8c:f6:99:ea:69:b7:46:0e:6b:7c:65:45:80:
95:68:82:af:e7:c7:c4:b5:ce:1e:36:4e:ae:a0:0e:23:8c:f0:
84:30:e3:51:ff:7b:47:f8:29:ef:37:38:ce:92:bf:d9:7f:6e:
b7:2b:11:27:de:a1:d9:fe:7b:ea:5d:cd:57:9e:d3:84:17:4d:
b9:67:22:3b:aa:1d:45:7d:bd:9e:4e:83:8b:36:43:ed:f9:2e:
e9:9d:66:4c:b4:03:30:7b:fe:b5:75:50:50:82:06:4e:96:b3:
b5:8d:d2:a6:86:3a:8e:2f:aa:7f:7e:5b:54:b5:53:21:53:26:
77:be:64:dc:4d:1d:8d:db:7b:71:de:0c:70:cd:f8:85:ea:a2:
7e:ea:7b:0c:37:3f:32:ae:73:13:29:fc:57:ed:3b:8f:0f:1b:
3d:6e:a2:d9:ed:d9:80:1a:5a:a2:2a:7b:5e:64:a1:ef:60:fc:
d3:bb:12:0a:72:30:cf:e8:c8:78:64:ad:ee:3d:a0:80:82:60:
f9:15:55:2e:f8:db:08:3c:8f:ba:70:31:42:ce:18:1e:0c:7d:
27:fc:66:19:69:fb:30:37:15:37:c3:f5:ba:a2:71:67:15:80:
37:67:2e:9c:69:8c:27:f6:19:98:e9:06:19:75:29:00:ab:db:
da:31:5e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:30:21 2025 by rpki-client