Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/95d985ce-3d20-3675-90ae-40ce0af5e8ce.roa
File: 95d985ce-3d20-3675-90ae-40ce0af5e8ce.roa (raw, json)
Hash identifier: ndxPpOmVEjSZ5a7XrCmJnk/k1mNYGwL0cJMG6TArs98=
Subject key identifier: D0:25:22:91:52:EA:51:63:75:21:D6:9D:4F:E2:E1:93:81:12:6A:DC
Certificate issuer: /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial: 010D0C9F432858480644FDFF99447571C307FE80
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/95d985ce-3d20-3675-90ae-40ce0af5e8ce.roa
Signing time: Thu 28 Nov 2024 02:00:38 +0000
ROA not before: Thu 28 Nov 2024 02:00:38 +0000
ROA not after: Wed 26 Feb 2025 02:00:38 +0000
asID: 14618
IP address blocks: 74.221.128.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:06:44:fd:ff:99:44:75:71:c3:07:fe:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Validity
Not Before: Nov 28 02:00:38 2024 GMT
Not After : Feb 26 02:00:38 2025 GMT
Subject: CN=9e2aca2c-5ccc-4daa-9b12-0e91b704df2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:95:2b:74:78:ea:d0:a2:77:9f:23:21:18:6b:
e5:0e:ce:eb:88:9e:18:bf:15:84:fc:14:f7:80:a6:
76:f4:28:6c:da:c4:df:34:95:92:c7:0b:76:59:7d:
76:6b:51:92:82:9c:0d:88:7b:eb:34:fb:57:2e:41:
61:09:42:7b:ce:e8:db:77:27:ba:44:72:bb:ce:f3:
c4:e4:90:77:7f:52:89:c4:00:9e:6c:c7:fe:82:53:
4a:a6:9c:be:19:2f:a0:e9:97:95:cb:df:62:87:92:
b5:10:f8:0c:aa:8b:4f:c0:01:13:ce:8a:a2:69:20:
11:5c:17:9e:22:95:49:a0:dd:1a:c3:ed:67:09:65:
5f:d8:2a:fb:57:e5:a8:ab:08:ed:ea:72:d2:3f:c4:
bf:7a:57:eb:4f:07:1a:92:64:cc:6d:44:14:c3:4d:
df:de:c1:41:74:aa:a9:d4:aa:33:ef:ea:3f:6c:c1:
d3:74:48:85:43:ff:a9:9b:6d:c4:1e:4f:0d:a5:e1:
fc:6a:5b:07:7c:61:d4:da:c5:68:03:75:5f:09:45:
70:6e:24:db:b8:55:cf:cb:4d:42:bd:32:e0:52:83:
ed:c0:1c:fa:ac:eb:a5:95:13:e0:cd:1f:a9:20:c4:
ef:53:45:61:ee:8e:14:69:da:d4:55:11:f0:9f:45:
d9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:25:22:91:52:EA:51:63:75:21:D6:9D:4F:E2:E1:93:81:12:6A:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/95d985ce-3d20-3675-90ae-40ce0af5e8ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
X509v3 Authority Key Identifier:
keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
sbgp-ipAddrBlock: critical
IPv4:
74.221.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cf:59:dc:68:fd:27:6b:dd:76:1a:9e:09:7d:89:71:53:ee:48:
61:78:16:05:da:b5:38:98:a0:7a:f9:01:ec:5c:31:d1:98:2f:
6b:78:c4:5a:a5:b8:90:8b:d0:9c:98:2f:30:e5:79:8f:50:98:
ca:60:18:8b:06:bf:84:b1:61:06:ca:f0:73:86:a7:b3:25:a5:
df:2b:8f:ed:3a:2a:9a:73:c2:75:7a:d1:1b:e0:9d:a4:ea:57:
4a:a5:35:03:54:ce:6d:c2:11:1d:01:68:51:fc:4e:67:c6:d5:
e7:31:c5:69:d0:25:69:ae:09:ab:3e:22:b9:fc:d5:0d:07:59:
b4:72:fa:09:67:99:2a:20:ad:69:fd:90:32:3d:19:7f:40:08:
ff:57:60:a2:03:ef:f5:6a:7a:ad:01:b1:1f:15:e5:67:63:59:
d2:14:18:25:b7:d9:42:53:f5:85:6c:3a:ca:1f:0f:b0:ff:50:
d9:57:f3:5c:42:08:07:e8:2e:de:01:e1:aa:8d:35:5c:4e:c3:
59:5e:e7:21:37:5c:c6:55:24:9f:6a:b8:d2:80:24:af:de:a2:
06:3e:9f:6d:08:83:d9:17:b1:6c:6b:e8:c9:d5:f2:d9:e7:7c:
53:7e:51:a2:fb:aa:8f:7e:b9:14:26:27:51:35:68:20:49:98:
37:99:4c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:43:37 2025 by rpki-client