Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/b1cebc20-5045-3cab-8aec-63cefac1d90c.roa
File: b1cebc20-5045-3cab-8aec-63cefac1d90c.roa (raw, json)
Hash identifier: 4Uw9cWDoxPYtEl6lJxX5R3OX8EWrGJV0r3RwIWn1mk4=
Subject key identifier: 81:41:83:35:58:86:73:D0:66:B2:4D:E6:C3:7F:83:B9:E6:6E:E5:54
Certificate issuer: /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial: 010D0C9F432858481C9A97BA7B26AF1FB5AFB380
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/b1cebc20-5045-3cab-8aec-63cefac1d90c.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 396982
IP address blocks: 74.221.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:97:ba:7b:26:af:1f:b5:af:b3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=90fd77f9-002c-401c-a36e-748f1387913f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:15:b5:72:c4:19:b3:ae:bd:5b:39:c2:02:1a:
a5:21:13:a0:78:54:d1:6a:a5:f5:40:75:08:1e:0f:
57:f2:e1:ec:41:73:d9:8c:cd:b5:53:44:fc:46:e3:
9d:ed:f8:b0:3a:2a:c1:2a:c1:e9:87:c0:fc:9d:d4:
4a:a1:68:22:fb:53:cb:72:7d:96:e4:f4:9d:2e:7e:
49:4a:5f:bb:4b:05:34:72:c5:81:93:d7:d9:dc:e6:
89:40:c4:35:55:27:45:ae:34:9d:f3:96:e2:c7:b3:
c1:56:ac:b3:96:e5:0d:28:7c:de:22:47:5e:1e:bb:
5f:e6:dc:86:61:27:db:dc:76:0e:7e:c4:8a:0b:6e:
06:12:eb:f4:32:07:80:d9:6f:3a:2c:0f:10:c7:de:
2c:93:e0:49:31:88:d0:bb:80:4c:14:20:11:f8:03:
85:f6:9e:f2:b8:98:ad:e7:a4:7a:e7:55:47:a7:d0:
fe:8f:34:44:c1:00:53:b6:2b:6f:1f:de:e8:09:ce:
e4:0e:5a:ec:42:95:b9:a5:02:28:49:f0:55:81:72:
b3:d9:f7:9d:9a:25:a3:a9:bd:45:35:5d:de:16:6f:
33:3e:1f:f9:f9:5a:77:51:7c:b3:76:34:6f:b4:dd:
5a:f8:81:c3:ce:d6:95:45:f2:55:08:06:68:40:69:
9f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:41:83:35:58:86:73:D0:66:B2:4D:E6:C3:7F:83:B9:E6:6E:E5:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/b1cebc20-5045-3cab-8aec-63cefac1d90c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
X509v3 Authority Key Identifier:
keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
sbgp-ipAddrBlock: critical
IPv4:
74.221.136.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:de:56:0f:bf:c9:67:4f:73:05:3e:23:42:bf:0e:9d:5c:f3:
96:ba:3f:34:85:e8:27:14:29:32:fa:88:a8:08:0c:49:93:29:
93:75:ae:53:2b:92:48:a1:d1:91:35:ed:ff:34:79:af:7b:94:
90:87:79:00:d7:24:6f:b5:4e:1c:66:57:03:a4:d4:31:03:e7:
5f:df:b6:53:e7:28:50:11:2a:d6:11:b6:a2:8c:d3:bd:75:db:
f3:1d:c3:17:f5:0d:1e:c5:0a:82:0a:8b:e8:28:f1:d9:1f:84:
58:42:11:30:8b:86:c0:55:81:ee:56:99:ab:f8:42:c9:e8:26:
5f:6c:df:88:20:ee:a4:cb:e1:ad:33:1c:dc:c5:66:22:22:36:
3d:8c:72:29:40:6b:01:ca:94:cf:e9:fb:5c:79:6d:e9:17:42:
f8:8b:5b:61:ff:94:8b:33:40:85:60:8f:63:c6:a3:1b:ea:cc:
bb:cc:91:89:cf:fa:58:12:09:0c:fe:eb:32:cd:1d:b2:05:38:
74:d2:37:a4:c2:8a:bd:f2:8f:f8:88:6f:7a:11:ec:de:b6:f4:
b3:b6:07:fa:10:9d:01:85:eb:bd:ea:6d:58:f4:f9:41:41:6e:
ca:08:3c:d6:96:06:e3:64:2c:87:e7:ef:95:12:d5:90:a6:06:
58:35:a5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:27:34 2025 by rpki-client