Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c9db6995-f8d0-3d90-9144-5c8de094255c.roa
File: c9db6995-f8d0-3d90-9144-5c8de094255c.roa (raw, json)
Hash identifier: iqqxQyRW3d9aU495RXNVpCeeVUjTeqEBiTqZkYuzF/4=
Subject key identifier: 5C:FE:25:1C:5D:8C:C5:D1:C5:90:BA:80:C9:B9:AC:58:3C:D5:DF:AE
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848E2D203E7F4FC8189C4064A50
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c9db6995-f8d0-3d90-9144-5c8de094255c.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20115
IP address blocks: 68.190.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d2:03:e7:f4:fc:81:89:c4:06:4a:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=c5040bcc-ac4e-4cfb-af55-a13af55f2abc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bc:59:f6:3c:68:f6:5f:5e:e8:8a:58:74:1f:
bb:5a:65:a7:8b:f3:cb:ab:6f:46:ef:07:ad:34:bc:
74:54:1f:66:ee:16:c6:3f:92:f2:ee:65:e3:ca:f3:
d4:3d:c1:7a:16:ed:4f:7d:6b:62:57:9a:ef:af:7c:
7b:12:0c:5e:90:e8:7c:25:ae:7b:2f:d9:a4:ec:ac:
ab:b3:b2:98:ea:07:38:82:61:20:e5:ab:e4:3d:84:
50:b3:e8:57:5c:63:5e:27:36:9f:38:0e:f8:3a:74:
33:05:1e:9a:3c:9c:a6:10:67:c3:66:63:c5:1b:89:
57:91:32:22:16:d0:58:c4:81:ed:7e:b9:3c:dd:2c:
69:e4:d2:c9:ae:11:6a:f0:69:81:62:1d:99:70:c3:
8e:e7:e2:2c:82:cc:85:e1:8c:64:3b:3c:90:da:b3:
00:35:ff:dc:5d:6e:c1:fd:de:61:16:7c:22:02:50:
67:76:12:69:99:5e:f1:44:8c:c4:9b:39:eb:cf:98:
89:b4:61:e9:7e:45:7c:f5:5a:e9:2c:35:81:08:03:
2f:70:ce:20:ea:95:3e:04:7f:d1:5c:b6:14:61:e3:
95:7d:b3:7f:f6:69:b3:48:9b:56:45:86:01:06:20:
9c:d9:ec:6c:57:dd:bf:46:23:e6:4f:32:08:70:6a:
0a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:FE:25:1C:5D:8C:C5:D1:C5:90:BA:80:C9:B9:AC:58:3C:D5:DF:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c9db6995-f8d0-3d90-9144-5c8de094255c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
68.190.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:a3:b3:61:b3:08:32:77:e4:32:b8:ff:53:93:91:bb:d5:44:
b2:39:34:0d:be:6c:b0:2b:46:2b:42:4d:ef:89:b0:21:a0:85:
a6:3a:eb:13:4d:c7:af:3d:b9:94:f8:ce:ab:ca:62:32:a5:2d:
f9:9b:f0:0c:ec:5b:ca:df:6d:74:fc:f5:55:bf:7b:20:48:99:
2e:05:f8:a8:ed:4a:39:8a:56:a7:36:9d:13:a6:46:4d:4b:4b:
9a:3d:22:f3:1a:d3:a7:2a:39:a4:5d:2a:2d:63:fe:51:06:f6:
91:b8:e2:34:62:28:fb:96:8c:3d:72:59:64:a5:00:e8:21:07:
56:55:4f:b9:f0:c7:9b:ab:05:41:c8:e2:45:57:5a:04:1f:7f:
e8:45:c4:27:c2:3a:59:94:34:41:be:f9:cb:dd:a1:02:b3:a5:
4a:bc:7d:68:20:4d:b2:a9:1f:91:3d:42:7a:81:5e:c1:b6:95:
00:2d:de:d3:b3:7e:78:62:c0:1c:d3:a2:b1:22:30:d3:e4:10:
02:4a:da:cd:74:b8:76:84:da:f1:c8:bf:be:83:17:b7:dd:4b:
bc:d3:ed:4d:0b:b2:1f:36:37:ac:38:c2:ef:ed:7f:51:21:3d:
d0:7f:72:0a:59:65:08:c8:f7:57:e4:45:b0:5b:27:ce:2a:0b:
de:8a:e1:45
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0gPn9PyBicQGSlAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
YzUwNDBiY2MtYWM0ZS00Y2ZiLWFmNTUtYTEzYWY1NWYyYWJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7xZ9jxo9l9e6IpYdB+7WmWni/PLq29G7wet
NLx0VB9m7hbGP5Ly7mXjyvPUPcF6Fu1PfWtiV5rvr3x7EgxekOh8Ja57L9mk7Kyr
s7KY6gc4gmEg5avkPYRQs+hXXGNeJzafOA74OnQzBR6aPJymEGfDZmPFG4lXkTIi
FtBYxIHtfrk83Sxp5NLJrhFq8GmBYh2ZcMOO5+IsgsyF4YxkOzyQ2rMANf/cXW7B
/d5hFnwiAlBndhJpmV7xRIzEmznrz5iJtGHpfkV89VrpLDWBCAMvcM4g6pU+BH/R
XLYUYeOVfbN/9mmzSJtWRYYBBiCc2exsV92/RiPmTzIIcGoKmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFz+JRxdjMXRxZC6gMm5rFg81d+uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYzlkYjY5OTUtZjhkMC0z
ZDkwLTkxNDQtNWM4ZGUwOTQyNTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERL6AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAESjs2GzCDJ35DK4/1OTkbvVRLI5NA2+bLArRitCTe+JsCGghaY66xNN
x689uZT4zqvKYjKlLfmb8AzsW8rfbXT89VW/eyBImS4F+KjtSjmKVqc2nROmRk1L
S5o9IvMa06cqOaRdKi1j/lEG9pG44jRiKPuWjD1yWWSlAOghB1ZVT7nwx5urBUHI
4kVXWgQff+hFxCfCOlmUNEG++cvdoQKzpUq8fWggTbKpH5E9QnqBXsG2lQAt3tOz
fnhiwBzTorEiMNPkEAJK2s10uHaE2vHIv76DF7fdS7zT7U0Lsh82N6w4wu/tf1Eh
PdB/cgpZZQjI91fkRbBbJ84qC96K4UU=
-----END CERTIFICATE-----
Generated at Thu Apr 10 00:42:15 2025 by rpki-client