Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c3bbb2a5-c731-3c02-877b-5b0cf66febda.roa
File: c3bbb2a5-c731-3c02-877b-5b0cf66febda.roa (raw, json)
Hash identifier: y/nqcPOAznwlax3bRb3fmxmH+xsDPOf1YgFLTj9Eggs=
Subject key identifier: C5:BD:2E:F0:24:73:6D:C9:3A:DB:99:98:CD:49:0A:19:84:37:9E:CB
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848E2D16B7E404AF77D09444100
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c3bbb2a5-c731-3c02-877b-5b0cf66febda.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20115
IP address blocks: 71.87.208.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:6b:7e:40:4a:f7:7d:09:44:41:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=af0204ee-d0f8-4718-9e0e-89b5b21ccad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c9:6d:8e:6c:42:d7:98:5b:99:09:e9:e4:d4:
20:90:df:64:a7:75:ac:c0:27:09:6d:55:7c:eb:b3:
ad:45:fc:70:e7:38:9d:e8:fd:cd:7a:4b:8e:2f:74:
d9:29:dd:04:5c:c0:47:dc:59:02:47:7e:9b:4e:2d:
29:2a:30:ca:10:33:a0:1b:5a:35:5a:82:18:da:23:
69:c0:6b:9e:be:86:17:a9:a4:e2:5a:27:c5:66:33:
55:75:6f:b8:63:2c:63:5a:12:92:8d:4c:92:19:9d:
d2:e2:0b:75:fe:62:bc:d3:f7:d3:9f:16:94:d9:67:
27:ee:8e:b7:2b:62:ac:06:42:ef:88:0a:53:ad:d6:
fc:ea:f5:ce:f4:42:11:89:cb:54:9f:f9:6c:55:c9:
87:0d:26:df:44:91:bc:b4:10:c8:b9:d0:86:9d:af:
45:a0:c4:6b:93:8a:3d:0a:5c:9e:75:ac:ab:56:b3:
aa:dc:8f:f4:5a:c3:dd:c8:da:82:46:cf:4c:49:ef:
66:fa:01:0e:18:ae:7d:29:1e:ee:0b:91:33:c4:ee:
dc:3b:f5:a6:dc:b8:71:75:0e:04:f1:94:ca:a8:63:
81:0e:c7:d4:fe:0b:b0:c7:48:dc:6e:2a:1d:f2:3b:
eb:5b:8b:a9:77:d7:87:83:85:15:ae:ea:b5:90:cc:
58:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:BD:2E:F0:24:73:6D:C9:3A:DB:99:98:CD:49:0A:19:84:37:9E:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c3bbb2a5-c731-3c02-877b-5b0cf66febda.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.87.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:92:3c:fa:6a:0e:b4:db:58:58:d5:ca:e5:0e:1a:db:40:8f:
57:18:b0:18:59:b5:ac:44:c3:f7:34:df:99:7b:eb:ec:f9:94:
67:77:b2:a3:69:e6:33:eb:b1:9e:fd:42:2d:59:b9:3f:82:ec:
4f:2a:3d:09:de:1f:68:ec:6e:7d:36:25:ff:be:86:5f:2d:63:
6e:18:a3:a1:a7:64:ee:f1:76:ba:e8:8d:4b:08:80:33:3c:16:
2c:07:74:5a:b7:4c:b8:51:21:f9:95:f7:09:b2:37:5b:e0:dc:
e7:e7:df:ba:24:bd:fe:dd:71:c1:b4:d6:cb:05:0b:79:23:21:
cd:2d:61:6b:c8:67:e3:0d:fa:45:b7:5d:8a:2e:26:68:a1:37:
6b:79:58:97:93:fb:50:ff:93:a5:b9:44:8a:f7:38:52:8a:6a:
59:40:34:46:16:44:55:88:67:c2:41:9d:0a:46:10:6a:2f:dc:
29:b7:af:ea:cc:38:01:d2:f4:cb:3c:7b:23:32:b5:f0:ba:7c:
1d:10:5e:3c:24:b8:23:9b:2a:ac:93:b5:b4:16:fb:47:ea:d5:
6c:2d:68:69:bc:3f:cc:64:7a:59:ae:2a:7d:11:fc:a1:d9:ad:
11:f4:cf:44:05:f8:a0:68:7f:96:c9:f7:bb:9f:e0:f2:55:f8:
16:36:4e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:50:52 2025 by rpki-client