Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c7dc80e7-1768-31ac-b561-2310e3fd4384.roa
File: c7dc80e7-1768-31ac-b561-2310e3fd4384.roa (raw, json)
Hash identifier: HgyZ/R3KFBgkMoxOTGNyMpUrsE4g+cPc3gCEFx4l9nc=
Subject key identifier: 48:43:00:FE:31:E2:A6:A0:70:40:BD:0A:36:22:49:14:30:AD:E8:6D
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848E2D1FB93E18736D2134D7B20
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c7dc80e7-1768-31ac-b561-2310e3fd4384.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20115
IP address blocks: 66.190.184.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:fb:93:e1:87:36:d2:13:4d:7b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=e571bc17-de70-4b85-9c29-3faad529b6ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a0:74:6b:1a:60:18:cd:f4:80:c8:5b:9e:99:
99:9e:8d:6f:98:bc:a3:90:97:8b:33:f9:14:bc:98:
6b:e7:dd:ad:fd:4e:7a:5a:8f:41:70:ff:7b:34:bf:
f3:9c:62:a1:6c:b2:8c:23:bd:79:c2:7e:3a:92:d6:
38:35:a3:cb:f7:b1:02:9f:7a:91:5b:5e:df:21:c4:
2e:fb:d3:2f:75:b2:cd:ec:bd:10:48:90:da:6a:0b:
71:09:85:cd:c1:6e:ac:a5:c9:90:e2:53:1a:55:0a:
2a:74:c1:a8:ea:e9:a3:30:15:e5:d4:f4:a5:97:fc:
bc:89:cd:c8:28:ec:6d:27:38:5d:73:59:a2:c0:ad:
57:c9:0e:a0:ad:a8:41:44:a4:e9:46:cd:2a:cf:46:
a7:59:b7:c2:c8:f2:f8:4d:2e:59:64:12:23:e1:26:
ab:8a:27:e3:a5:68:88:fc:5e:22:0b:b2:1c:27:b7:
23:4c:55:d3:8f:1f:22:49:c4:7e:50:2c:20:b8:98:
25:24:b3:4c:ad:09:aa:82:ac:28:f0:47:d9:11:69:
a3:e4:d9:be:f9:b9:df:d6:a4:fd:05:87:f6:14:20:
66:3d:57:74:b4:de:57:90:8e:67:76:ac:f5:65:48:
0e:e0:aa:ce:20:29:f8:a8:2e:28:c1:15:51:4f:5a:
30:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:43:00:FE:31:E2:A6:A0:70:40:BD:0A:36:22:49:14:30:AD:E8:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c7dc80e7-1768-31ac-b561-2310e3fd4384.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
66.190.184.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:4c:cd:aa:d4:ef:f6:49:3c:b2:50:40:e0:bb:f5:83:d8:3a:
9c:22:30:d1:35:c1:8c:39:67:4f:5f:4b:b9:22:43:d8:c5:4f:
5f:80:e1:3f:a6:cc:ca:b2:23:3e:0d:ca:81:47:cd:75:ce:2b:
39:7b:bb:dc:81:0e:07:e8:c0:97:3f:84:31:49:22:d4:39:54:
ba:62:2f:27:a0:ba:2c:df:ae:81:aa:aa:c0:d8:65:3b:1b:aa:
01:43:9f:35:79:c4:cd:c7:96:5c:39:33:37:bd:9e:a1:7e:db:
99:81:b1:56:21:4a:5a:a4:16:ca:0c:8d:51:72:e6:e7:4f:52:
99:86:d5:7f:74:49:49:7b:da:91:6e:8b:a2:22:4d:24:c7:06:
ae:84:b9:9c:1a:82:bc:47:84:fb:ab:ea:9f:fd:4c:ca:7b:eb:
29:be:f0:14:af:72:90:d5:ca:e3:56:38:bb:d6:ab:d3:72:03:
d9:b0:60:09:37:f0:2c:40:80:ed:53:a8:42:c2:6c:39:7e:1d:
d3:a8:f7:d2:49:8b:82:c3:fa:d4:a8:41:77:a1:81:8c:97:67:
d3:0c:72:31:1a:80:68:ad:ca:fd:84:aa:e9:b0:02:e5:d8:68:
88:7e:12:56:51:8a:44:5c:fd:74:a8:df:c6:ce:4b:99:43:68:
a1:8c:e5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:20:45 2025 by rpki-client