Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/6969d83a-31bb-35e5-9f96-dfe76f1eb349.roa
File: 6969d83a-31bb-35e5-9f96-dfe76f1eb349.roa (raw, json)
Hash identifier: ayGfYVupCFeo93JeY9AHd7Mcx54Ve+kXsozeHHazsqc=
Subject key identifier: 93:DE:78:8A:D5:D6:BD:72:4C:34:4D:E5:04:F8:69:59:BF:CC:A4:F4
Certificate issuer: /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial: 010D0C9F432858481C9A97CCDCF20B5E06356ED0
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/6969d83a-31bb-35e5-9f96-dfe76f1eb349.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 396982
IP address blocks: 74.221.138.0/24 maxlen: 24
74.221.140.0/24 maxlen: 24
74.221.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:97:cc:dc:f2:0b:5e:06:35:6e:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=89faf840-ddbb-4845-a44a-61c932183a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:83:72:4f:64:9b:13:52:24:96:86:cc:9d:59:
82:c7:c7:71:9e:e4:17:fe:23:60:28:4c:bf:01:41:
0e:31:62:79:78:1b:18:6a:90:85:fd:10:63:ee:35:
1f:dd:98:36:c0:1b:e8:e0:d7:9f:e4:75:c3:44:60:
d5:23:04:57:54:93:21:22:20:7c:58:81:42:a8:a3:
e7:f0:d6:23:e1:63:ac:80:ee:e8:f2:b9:e2:8b:e3:
7c:26:26:d3:a4:f1:21:9d:8e:dd:76:08:29:58:fb:
d9:a2:bc:35:78:95:8a:e5:e0:a6:77:e5:35:df:4e:
c9:ec:9e:28:69:ff:c3:30:28:a1:6f:67:84:cd:40:
01:1b:ca:df:f2:bf:72:22:72:5e:35:5a:4c:42:34:
4f:6e:6f:7d:fa:66:7a:22:f2:a2:71:9c:a2:de:ed:
d5:36:19:05:a0:39:9e:c7:bf:4f:9a:85:4e:39:93:
fc:f2:30:0e:67:be:8b:61:c9:f9:9d:f8:b6:7e:fb:
f5:ff:24:54:3b:3c:81:b3:70:a4:47:c5:ec:22:4f:
d4:d5:06:40:92:00:c6:e7:c3:d0:35:b2:15:03:22:
9a:b0:e5:50:77:c9:98:a6:fc:67:30:60:c2:e0:e6:
53:6b:92:09:d3:a9:0e:75:35:5a:9e:59:7e:fa:af:
40:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:DE:78:8A:D5:D6:BD:72:4C:34:4D:E5:04:F8:69:59:BF:CC:A4:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/6969d83a-31bb-35e5-9f96-dfe76f1eb349.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
X509v3 Authority Key Identifier:
keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
sbgp-ipAddrBlock: critical
IPv4:
74.221.138.0/24
74.221.140.0/24
74.221.142.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:b0:51:2c:4c:ea:f9:5c:5b:bf:7f:ad:28:04:a1:b0:49:9d:
f3:3d:fe:4b:89:85:58:16:b3:af:c3:74:f5:49:df:3e:11:0b:
05:88:ae:d3:6c:bb:9d:d6:bf:d3:3e:d1:c6:43:88:07:64:b0:
3f:b7:0c:e2:02:4b:21:36:e9:48:d4:f5:75:70:cc:5e:c9:fd:
ed:e1:3b:a5:2e:27:5b:9e:a3:74:37:9a:39:1e:fb:65:a5:5e:
93:a5:f5:54:d1:7e:44:03:22:69:71:90:03:9d:d5:9b:8c:fa:
33:59:a8:7c:5b:2b:f6:87:db:7c:c8:f6:63:de:e1:27:28:02:
32:9f:b4:12:37:1d:20:3a:3b:2f:4a:7b:08:53:b2:c2:3e:6d:
94:17:9f:20:9e:ba:e4:14:83:9b:5b:54:64:6d:3f:84:8e:d5:
c9:60:f9:82:f8:ed:0f:18:45:d9:bd:be:bc:7d:30:fb:6e:d4:
4a:0d:ac:36:b1:31:26:81:29:7b:5b:6a:87:0a:ed:31:df:0e:
9d:28:f1:03:fc:fa:48:71:1e:a2:8c:c0:54:3c:5a:0c:e8:af:
7d:2f:15:dd:67:e9:83:e7:dd:5a:28:0f:25:b1:bd:73:ba:82:
cc:36:51:27:6d:12:e3:7e:df:8a:cc:b5:c4:a4:37:b0:d9:e6:
4b:4e:13:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:46:40 2025 by rpki-client