Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e447c220-6323-3d79-b381-c774f2cbe812.roa
File: e447c220-6323-3d79-b381-c774f2cbe812.roa (raw, json)
Hash identifier: ZkdWIqj5PZjYvQo9/ycPx5ZFdPoaliuQLoMAtIqMosQ=
Subject key identifier: 07:76:D9:45:A4:CA:73:A4:C1:A3:D2:82:2D:FF:B3:CE:00:1A:BB:74
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848E2D1806ABFE75ECAFC58DA40
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e447c220-6323-3d79-b381-c774f2cbe812.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20115
IP address blocks: 68.115.32.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:80:6a:bf:e7:5e:ca:fc:58:da:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=1d0b212c-f6af-4f8c-8b5b-5ab494297ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:cb:fd:b5:d2:d8:34:a7:5d:f9:5c:8a:4c:9c:
aa:dc:0d:7b:1a:27:19:66:e2:bb:b9:29:be:6c:d5:
0e:a4:fb:79:c5:02:d7:d9:b1:4f:53:26:83:00:22:
2c:6e:41:69:50:c8:0f:3e:84:e7:53:32:c4:7e:59:
e1:41:c7:e0:78:c7:1b:62:16:f4:3d:b6:9f:31:0a:
9c:f5:07:ad:f2:41:05:8c:ee:ca:8f:7b:45:1e:22:
8b:fe:63:1a:cf:68:6a:08:6d:ec:f1:0f:27:c2:1c:
b5:78:59:e0:6d:e6:44:e8:8e:7c:ca:48:55:22:d2:
10:3b:b5:eb:d2:0e:89:6b:1a:e7:fb:e0:93:ff:77:
ca:6e:17:ed:95:b8:2e:38:32:67:88:31:33:a8:11:
d6:0f:b4:66:db:ad:6d:14:8e:8f:b4:6c:04:38:d7:
c5:9b:e3:08:0b:f0:bd:90:11:68:ca:55:df:5c:f2:
89:bc:30:f0:a8:f4:9b:04:02:5d:03:b7:3f:4e:b3:
5d:fc:42:45:e0:81:d6:53:e1:6a:54:22:50:db:7c:
e9:57:88:89:97:62:73:d8:92:a9:a5:8f:16:f1:04:
84:ce:41:46:01:2e:75:10:18:c7:8c:83:8d:ed:54:
83:0d:55:36:e9:cf:e0:6b:38:3a:40:7d:7b:b5:79:
20:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:76:D9:45:A4:CA:73:A4:C1:A3:D2:82:2D:FF:B3:CE:00:1A:BB:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e447c220-6323-3d79-b381-c774f2cbe812.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
68.115.32.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:6e:30:7c:d0:79:10:9e:98:86:e1:48:f7:7d:4f:d9:9c:3a:
09:ae:2a:cb:41:51:4a:47:df:dd:d8:df:3c:92:35:90:12:31:
d0:49:c1:b0:62:58:a0:1e:53:5e:99:6d:51:de:16:22:f1:c9:
24:54:b3:5f:e9:52:6b:df:86:30:2f:87:28:ac:11:f3:a7:c7:
84:80:50:78:2e:5b:02:d2:99:af:f4:54:20:b5:57:ac:19:43:
3d:d4:8a:09:c4:0b:e0:3a:ae:d3:e7:6b:b7:75:31:79:cf:10:
59:08:05:fe:7b:34:ef:7a:ad:54:db:9c:f0:69:8d:a9:d0:7d:
31:a9:79:53:a6:61:f5:8d:cf:2b:43:da:ba:7e:a8:45:1c:eb:
88:ac:d4:a3:b5:02:b6:3e:1e:1a:c6:9f:bd:fb:06:5b:93:fc:
00:ac:86:7c:39:1b:34:0f:21:67:ae:7d:c6:6f:4d:51:bc:00:
f7:9b:c5:93:99:85:05:0b:42:b5:7a:7e:13:c0:9e:1a:ff:ca:
ea:86:ae:ae:14:06:d0:44:6e:bb:02:35:b9:d4:38:e3:6f:5f:
7f:d5:66:67:8a:43:a1:e5:79:e9:22:f1:09:2e:98:70:f1:ee:
a9:e1:6d:df:e2:f5:c0:da:fa:ff:c4:b7:a5:b8:82:0f:e8:fe:
07:ce:d4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:25:36 2025 by rpki-client