Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f7150a43-49b9-3487-b0a8-4cc7912aa3ce.roa
File: f7150a43-49b9-3487-b0a8-4cc7912aa3ce.roa (raw, json)
Hash identifier: xwxfgrOTn3VjjEscwQjamDdLqmhoLfsi7WgZCDtY+L0=
Subject key identifier: D8:F8:E5:DD:2F:73:F7:A7:30:2A:EA:BA:95:C1:4B:8F:33:7D:6D:96
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848E2D202530A46EB4778A3A380
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f7150a43-49b9-3487-b0a8-4cc7912aa3ce.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20115
IP address blocks: 68.116.216.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d2:02:53:0a:46:eb:47:78:a3:a3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=60e110e5-506f-4982-a84b-4aefa3aa40d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ac:ca:64:81:65:51:67:44:77:81:41:e6:ee:
63:16:c7:dc:bc:b9:18:22:ed:11:c3:aa:9a:3c:7d:
bc:bc:ac:cd:d3:55:fc:00:4f:08:b1:ca:be:e9:17:
aa:2b:49:f7:93:82:59:1d:cd:5d:f3:5e:81:56:0c:
2f:a2:9c:4c:50:2e:2f:c8:91:01:ed:d9:1f:06:3b:
97:3b:fc:76:e0:db:8b:4c:1f:86:e3:20:37:47:10:
f0:1b:15:34:82:a7:0c:a8:30:a1:e5:08:64:6a:07:
65:7b:e5:e3:b0:de:14:65:b5:5b:f2:46:90:a5:c6:
51:fc:4d:87:fc:70:54:4f:9f:30:c9:6b:4c:34:87:
00:1e:de:87:c8:49:dc:1b:10:33:05:cb:e1:0c:37:
fb:fb:dc:88:cc:55:4f:88:48:27:54:ac:d9:74:52:
ad:15:f8:54:83:a3:e4:a7:93:1d:48:25:7e:35:a1:
98:b0:56:2f:b1:29:77:de:d8:35:7a:0e:7b:bd:6a:
ec:35:9c:01:64:63:6e:82:ba:71:7f:dc:db:a5:fa:
0e:2a:1b:e9:c2:6c:f9:f3:5d:be:04:45:b6:1c:e0:
98:55:20:bb:ae:af:38:03:fb:43:0a:19:03:51:c6:
77:60:84:8a:6d:c2:c7:eb:e4:57:1a:90:1d:2f:5e:
d6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F8:E5:DD:2F:73:F7:A7:30:2A:EA:BA:95:C1:4B:8F:33:7D:6D:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f7150a43-49b9-3487-b0a8-4cc7912aa3ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
68.116.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d6:c7:db:51:0e:1b:a1:1e:ec:c3:2a:7b:6d:54:37:a7:5c:15:
f0:c2:46:06:de:b1:1a:e0:46:60:d8:a2:ab:f6:c0:9a:3c:6a:
2f:7d:a0:1d:ad:26:69:fe:38:db:6e:03:ad:bb:46:f6:f6:92:
20:c2:1f:65:6c:46:b5:e6:0a:f5:92:bc:3a:b8:61:9c:51:ab:
29:a2:70:13:f4:ef:f2:99:9a:d9:d6:b6:b2:18:f8:b1:34:4f:
5d:7e:0e:37:30:1c:d9:aa:b6:a6:8b:cc:e5:b9:c8:ff:b0:8f:
df:ff:40:ae:7d:c3:61:21:d4:b2:93:87:fe:0b:9c:f8:05:8f:
dd:c5:1a:79:55:4a:d4:2f:20:4d:6a:97:66:77:a9:e3:c2:32:
36:11:00:25:43:5d:c8:27:04:f6:09:50:eb:4d:d7:94:7c:03:
5f:a0:51:5d:da:f2:9f:5d:80:c8:df:48:ec:ec:cb:89:10:6d:
72:f9:1f:7f:77:85:e9:a9:e3:e0:14:82:de:b2:7b:63:4a:11:
f4:d0:a4:3f:a1:55:21:4d:fc:ce:0f:c4:24:1c:47:a4:5a:a8:
45:83:8f:2b:c2:f6:af:1f:1e:2b:66:de:bb:41:25:44:f5:5f:
5f:69:fc:8b:5f:a1:62:b9:56:f8:26:8d:77:29:a1:4f:02:50:
08:4e:ba:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:18:32 2025 by rpki-client