Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c8ab4a60-8b10-3451-9421-0d3ab5dc3a12.roa
File: c8ab4a60-8b10-3451-9421-0d3ab5dc3a12.roa (raw, json)
Hash identifier: 1WMMluCcrv5EMmgaKFNLwKEyACwzOfO4SrFbiLOHCuE=
Subject key identifier: 33:E8:01:F3:DB:24:63:80:22:CE:F3:41:C4:A7:8D:41:34:7D:CE:9D
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848E2D187C57EB60959901D2E80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c8ab4a60-8b10-3451-9421-0d3ab5dc3a12.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20115
IP address blocks: 71.9.32.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:87:c5:7e:b6:09:59:90:1d:2e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=c7dae57a-551b-4e8e-8d2f-a0ce41c9871a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:8e:d4:72:95:96:79:38:61:af:d6:9c:7a:4d:
09:eb:30:3f:19:dc:ae:46:cf:e8:a4:9c:a0:b6:2f:
b5:9c:fe:a7:8b:29:ea:12:ad:46:59:99:af:f2:f5:
ed:d3:5c:75:39:f2:a6:7c:11:44:65:72:c8:bc:89:
3c:c1:28:c0:c8:14:4d:78:29:c3:0b:25:c6:eb:c5:
14:1b:16:56:6d:2a:6f:36:cd:1f:8f:87:bf:f5:81:
ef:0c:43:35:f9:27:43:f3:0c:e6:d3:7f:ce:f6:e9:
97:0c:b2:f5:35:57:51:27:cb:22:19:1e:36:d8:b9:
e9:21:a1:ad:01:84:0c:d5:8e:6c:20:d3:fd:83:9a:
be:e3:44:7f:14:76:3e:b0:ff:61:17:ae:db:22:e7:
f8:0a:6a:86:1f:ad:67:9b:08:3c:25:f8:3d:42:be:
9f:85:d1:43:fe:8a:3a:7c:a0:56:fe:27:aa:72:f3:
a4:69:15:24:95:94:89:f4:00:0d:b3:03:f3:c7:cb:
9e:10:c5:29:1f:a6:e9:ad:c4:96:f0:0e:56:de:f7:
d3:cc:a0:1f:c1:f6:09:a8:5a:f9:f0:53:71:f4:b7:
f6:a5:c3:1d:37:2e:51:27:c3:f7:c4:94:88:a9:46:
7e:23:48:53:b1:8d:77:18:85:6a:95:07:1a:39:ce:
88:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E8:01:F3:DB:24:63:80:22:CE:F3:41:C4:A7:8D:41:34:7D:CE:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c8ab4a60-8b10-3451-9421-0d3ab5dc3a12.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.9.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:97:02:20:65:da:3f:03:63:10:a8:ae:67:f5:1f:a7:01:cf:
dd:4c:d0:48:4f:5e:be:a5:d1:9e:4d:d8:54:51:70:2d:85:77:
16:c5:2a:fd:53:32:73:e3:6f:73:7f:56:f5:7a:82:a3:29:f0:
46:19:f9:0b:9f:fa:bc:97:ed:2b:36:b1:bb:46:1e:fc:e7:aa:
4a:0b:ea:e5:82:3b:e1:af:e3:b9:7d:66:29:e6:ed:81:57:76:
e7:f5:02:ce:1a:35:1d:28:a9:2b:51:fe:90:cb:05:86:3c:6a:
7a:44:d6:dd:f7:c0:42:52:be:80:82:57:b0:87:2f:9b:bf:f4:
a7:7b:ab:f6:1f:13:15:0d:17:9e:42:f3:3b:5e:0e:79:32:3e:
81:97:95:f2:bc:e7:6e:bb:94:e4:86:a6:aa:86:0c:47:3a:cc:
25:a0:6c:65:ff:18:17:20:d9:af:5a:f7:0b:b6:59:b8:3d:43:
d8:ad:79:95:54:85:5b:dc:7e:f9:cc:09:02:6a:81:41:51:17:
b5:18:fa:da:29:86:53:59:26:3e:3c:89:67:4d:83:f6:a4:89:
df:62:40:6b:6e:22:63:09:d7:fc:35:f0:a8:51:0b:ab:71:21:
09:c6:d0:d8:96:12:78:f9:45:04:ff:aa:7b:2c:9d:54:9f:6f:
21:6d:19:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:48:12 2025 by rpki-client