Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e8221d4b-353c-3fe4-aeb0-f585c34c2331.roa
File: e8221d4b-353c-3fe4-aeb0-f585c34c2331.roa (raw, json)
Hash identifier: RA6OA9djeSwPMJczVS4VFGty6bEW0uDpPn1VJVleghc=
Subject key identifier: 64:61:CA:23:04:D6:17:29:49:42:13:4A:32:55:DF:04:37:C6:AE:0C
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848E2D1793343C7691A45F5F7C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e8221d4b-353c-3fe4-aeb0-f585c34c2331.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20115
IP address blocks: 66.191.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:79:33:43:c7:69:1a:45:f5:f7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=c04f45a4-3764-40ff-8b6e-9184ce8f544f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1f:01:0a:94:60:1c:ac:c1:ba:6c:bb:ad:dd:
62:e2:2d:c1:ed:c3:ae:fe:8b:1b:8a:64:60:db:78:
35:9e:be:7a:07:17:5b:37:bf:e8:83:0a:00:d4:f9:
6f:13:f7:8c:a4:e6:ff:5b:85:65:1a:34:51:f9:a0:
74:f8:3e:a9:93:e3:a2:ff:f9:5f:5c:0f:5b:4d:65:
2e:9d:98:dc:c7:b6:b9:e3:55:9c:72:71:9b:4d:43:
34:2e:3b:37:89:f6:2d:10:2a:c2:6c:a3:d5:c1:27:
06:b1:ba:31:35:4f:a7:37:ca:8d:0f:47:57:e5:4d:
72:fc:1a:11:27:07:f7:bb:00:6a:2f:9b:c0:1f:c8:
9e:9f:7d:19:95:df:47:04:9b:43:47:78:6e:ab:2f:
46:54:3f:96:d4:9c:e8:43:6a:50:5c:50:a3:d5:ba:
4c:0a:19:8c:2b:2e:2c:d2:c7:9d:2c:ce:da:fc:60:
47:3b:22:70:dc:33:42:a2:72:dd:d9:a5:5e:a0:25:
f0:77:24:2e:ce:b7:ed:ba:9c:14:25:6c:6a:ee:93:
21:6c:af:73:fc:44:0b:57:6d:d2:f5:49:22:13:38:
a9:5e:cd:f7:16:c9:10:e9:bb:e6:f0:18:e0:02:45:
57:98:f5:a5:57:31:98:da:22:3e:94:6a:83:86:db:
0c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:61:CA:23:04:D6:17:29:49:42:13:4A:32:55:DF:04:37:C6:AE:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e8221d4b-353c-3fe4-aeb0-f585c34c2331.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
66.191.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:ff:6f:11:6e:19:f9:70:bb:07:09:9d:51:df:e7:10:31:40:
a7:af:d7:d6:af:85:fb:42:86:cd:34:3e:3f:32:71:13:fa:09:
25:db:95:8f:90:82:1d:e4:8f:60:7d:36:8f:d9:c9:0f:35:be:
03:e4:10:35:57:c3:10:03:95:94:67:c1:21:5e:5b:79:55:3b:
01:f6:00:fc:be:8c:0e:b8:56:0f:1f:71:9f:30:39:98:9a:58:
28:48:ab:82:e0:be:05:4c:b7:b9:e3:60:1d:ba:0b:1b:27:e4:
91:3c:1d:32:1f:d2:5b:85:f3:e2:b2:b9:08:7e:f1:ea:6d:ad:
12:43:c7:3b:de:07:a1:89:e2:de:9c:63:fb:90:b6:42:7f:f9:
5e:b5:79:b5:20:35:3f:24:41:3f:24:b4:d1:70:e1:14:11:ea:
0d:97:86:0a:c0:16:16:1f:ef:c0:c0:09:5c:18:79:8f:55:ed:
a5:89:0c:c3:25:37:87:fc:07:7a:22:76:48:77:94:86:68:2b:
0b:12:a5:31:c7:f1:3a:b2:91:7b:78:d1:55:8e:6f:07:b7:fa:
a8:57:ea:c9:5b:12:f9:f9:6a:32:9f:32:1d:61:cb:e3:e8:a1:
2c:b6:94:e0:04:c2:9b:3a:58:d6:52:2e:65:2a:c4:b4:c4:02:
4b:74:28:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:50:54 2025 by rpki-client