Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/4a0a8425-216c-35cc-813a-362b9fe28985.roa
File: 4a0a8425-216c-35cc-813a-362b9fe28985.roa (raw, json)
Hash identifier: 8yeh9dGIUJL6x9xPjIpdUJE5IrtKR9uZHf5sYKWKsDo=
Subject key identifier: B8:5A:A2:D9:CF:6B:3A:CF:5A:2D:64:00:75:F6:F3:76:F1:DF:4F:0B
Certificate issuer: /CN=c86a7ba5-67c5-481d-b278-0b265dc97144
Certificate serial: 010D0C9F432858488DAB4A97EFACC9079259C5E0
Authority key identifier: 69:92:8D:83:C4:F4:B4:92:18:C1:FE:F0:78:A4:3C:F7:1D:D0:2B:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/4a0a8425-216c-35cc-813a-362b9fe28985.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 19503
IP address blocks: 74.113.149.0/24 maxlen: 24
2620:7d:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:4a:97:ef:ac:c9:07:92:59:c5:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c86a7ba5-67c5-481d-b278-0b265dc97144
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=43a1156e-7726-42c8-895d-ce4aeb38deb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d0:25:b8:97:45:50:25:69:b8:dc:f2:68:8c:
59:e4:f2:f2:ca:d5:73:61:f8:da:2b:fe:9a:33:af:
2e:b2:f3:ec:d3:5d:4d:7e:e2:62:92:82:5a:2c:64:
25:ea:e6:d2:60:16:21:1e:7e:25:83:51:d9:9e:2c:
00:4e:39:e4:e4:ea:06:dd:8c:c4:de:6f:97:83:75:
c0:d5:09:67:bf:90:04:73:35:d2:bf:04:a7:2d:d5:
da:6d:97:0e:6f:89:2e:34:bc:88:c3:7b:92:2e:70:
1f:84:6a:e7:21:6b:ad:1c:0f:f2:f8:30:c8:38:09:
84:fc:98:25:78:0e:ac:e2:e7:73:d4:1c:4f:70:10:
f3:dc:43:4f:e1:3e:de:ed:87:a6:e6:8f:f4:72:e1:
2d:e7:28:1d:16:23:f6:cd:e0:b5:60:ca:ac:61:f0:
57:be:87:f9:1e:7e:da:c5:38:54:3f:de:20:c3:fc:
36:c9:7b:b9:63:a5:80:84:0e:26:fc:02:ff:7c:67:
59:ad:f0:ac:d7:b5:cd:ec:c6:c3:6d:ae:7e:8f:44:
4c:6c:00:8a:1d:46:6a:65:61:b0:53:39:9f:9f:d6:
f3:f5:05:f3:a8:1e:b1:9a:37:68:b1:62:7d:d8:31:
60:c4:58:12:ca:98:5f:9d:e7:0c:84:17:25:43:28:
61:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:5A:A2:D9:CF:6B:3A:CF:5A:2D:64:00:75:F6:F3:76:F1:DF:4F:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/4a0a8425-216c-35cc-813a-362b9fe28985.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/c86a7ba5-67c5-481d-b278-0b265dc97144.crl
X509v3 Authority Key Identifier:
keyid:69:92:8D:83:C4:F4:B4:92:18:C1:FE:F0:78:A4:3C:F7:1D:D0:2B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer
sbgp-ipAddrBlock: critical
IPv4:
74.113.149.0/24
IPv6:
2620:7d:3::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:f3:1e:3a:fd:92:e4:8e:ea:57:d1:1f:fd:bd:d5:5b:7e:ca:
d3:04:40:2b:21:91:d2:09:98:4e:48:9c:55:ae:83:95:5d:d4:
ea:72:c1:c8:66:ee:9a:a5:e5:69:33:65:60:f1:c3:6f:9c:fb:
a7:80:88:0f:99:36:ae:2f:dc:94:a4:20:f5:47:f3:ee:04:06:
58:a4:de:22:43:78:c3:7a:d0:0b:75:13:af:18:99:b0:eb:f9:
fc:a4:9a:17:6b:56:06:6b:13:84:a6:4e:07:23:4c:d1:3c:12:
ec:d9:ab:f2:7c:08:0b:af:16:0a:f3:7a:62:8a:01:22:05:1c:
d0:cd:f6:76:b4:79:21:a8:06:91:ca:c3:5a:7d:c5:c6:2f:06:
49:ae:41:47:9d:5f:8d:dc:64:30:6d:02:31:49:0a:5c:30:f0:
0e:2b:72:fa:c7:95:9e:92:c7:e5:e1:59:cb:0b:0e:ba:1f:f4:
9c:36:36:d3:e7:c4:e6:80:bc:e7:6b:06:45:48:33:b8:c2:fc:
df:ed:bb:4f:13:55:20:81:41:00:52:0b:db:2f:61:11:6b:58:
30:8c:0c:5f:96:15:1f:c6:6f:2f:9f:55:34:d8:78:fe:19:de:
84:1e:cd:2b:d5:09:77:3e:52:f6:7d:82:00:be:3c:d6:4d:a2:
b5:a0:82:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:30:35 2025 by rpki-client