Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d3fac9e2-6989-36fe-a9d9-5c9ac98733f1.roa
File: d3fac9e2-6989-36fe-a9d9-5c9ac98733f1.roa (raw, json)
Hash identifier: bQQbsgGySiZ4sMW+VIerD8ssdhz1Nndl6vEdS44ZBD4=
Subject key identifier: 54:BA:39:C7:57:69:BB:0C:7D:84:5B:5F:53:0C:77:F6:66:86:E0:04
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848E2D202B0D449A8C5E82F4E80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d3fac9e2-6989-36fe-a9d9-5c9ac98733f1.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20115
IP address blocks: 68.191.0.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d2:02:b0:d4:49:a8:c5:e8:2f:4e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=66d21081-7fea-4ff6-b494-17f01e9c5531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ad:93:cf:9b:57:f5:35:bd:36:60:01:52:e4:
07:b1:ea:15:20:90:89:e1:f8:64:d1:02:fc:99:34:
ed:e3:e1:c7:02:dc:9d:a9:99:cd:b0:78:6f:4e:86:
02:46:41:96:16:54:07:67:20:36:c8:f7:c5:96:fe:
40:b5:9c:9a:0f:de:38:c8:2c:78:e2:f1:2e:ba:19:
8c:9b:7e:e2:f4:0b:b2:03:f8:d6:7c:7f:b8:46:1a:
48:15:ea:58:05:7d:a0:0e:34:f1:5e:b9:30:62:b4:
b8:83:9d:5b:f5:5f:e3:eb:a8:a4:d2:3e:71:4d:88:
54:0c:eb:f6:65:5f:4e:ba:7e:5c:35:a4:9b:af:6b:
e8:ce:15:f8:39:22:f4:4f:1a:20:85:d3:a9:2a:00:
24:ff:56:81:26:c9:ae:0f:1c:6d:93:fd:b7:c9:bb:
e9:d7:1c:86:5d:05:10:32:f7:48:80:05:04:42:aa:
97:b6:d9:0b:c1:79:d0:48:96:cd:13:65:e6:55:d1:
be:3e:16:d6:29:b0:7c:c1:c7:50:20:f4:9c:f2:e2:
39:c2:00:d7:78:e1:48:b5:62:0f:47:45:c5:ee:09:
f5:dd:61:c5:bd:dd:25:00:ec:71:16:b3:0c:2b:fd:
3a:a7:83:8e:83:fa:21:c2:05:a0:b4:51:c3:21:44:
0f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:BA:39:C7:57:69:BB:0C:7D:84:5B:5F:53:0C:77:F6:66:86:E0:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d3fac9e2-6989-36fe-a9d9-5c9ac98733f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
68.191.0.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:2f:46:fb:d1:cf:8b:2f:73:a3:18:63:1a:cb:e8:48:46:7d:
e6:d6:fb:ac:4d:0d:6b:6f:e0:54:ac:84:b0:ec:2e:bc:48:e1:
f0:94:4f:5c:08:4d:6a:6f:ad:92:3e:a4:99:15:06:8c:63:d4:
2b:5f:69:5e:86:f3:96:f3:b2:87:6c:6f:40:5f:85:dd:70:40:
54:0e:61:5e:5c:f5:6d:1b:78:50:bf:f9:2c:3f:d6:70:8d:af:
cb:9d:18:59:20:e6:74:31:dd:26:a7:f9:32:a9:03:ea:0d:19:
a6:d5:a8:2c:79:8f:87:97:15:9d:3c:a4:5e:e0:d0:cf:04:a7:
d5:b6:34:b4:8c:bb:eb:45:c9:66:74:4b:61:dd:b3:c6:97:bb:
5f:8e:29:74:62:5b:0c:74:39:84:4c:1b:fe:d4:60:63:13:dc:
09:a4:da:62:73:a7:60:71:94:6c:03:4e:66:6a:d3:4d:25:0b:
19:45:7f:db:2b:7a:72:6c:83:7f:5f:e6:c3:d3:d0:69:a1:cf:
e6:b7:7d:e7:33:32:e6:ac:3e:0a:09:38:0c:9a:21:02:b7:65:
03:c6:c3:93:5e:d1:7b:79:d9:d8:3f:7a:d0:a7:98:f6:33:a2:
a4:b4:db:47:dd:a3:7c:5f:60:2f:60:a9:64:96:2e:2a:bd:f2:
2c:5b:c9:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:10:44 2025 by rpki-client