Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d8ec010-d2c2-435f-9826-9a03c2ab949f/f88ad909-af6e-3c19-97ea-abc7c4271328.roa
File: f88ad909-af6e-3c19-97ea-abc7c4271328.roa (raw, json)
Hash identifier: PAZjt7OVsekqm5vXK25X/CrUkR2pP63Pt3D7FKHspZg=
Subject key identifier: FD:E1:6B:CC:4D:D0:C3:CD:1E:36:24:75:96:62:BD:FE:E0:6B:37:03
Certificate issuer: /CN=1d8ec010-d2c2-435f-9826-9a03c2ab949f
Certificate serial: 010D0C9F43285848037B6806551D9624B4225700
Authority key identifier: F3:0B:61:DF:FC:73:3E:6D:EF:9B:19:45:49:C5:3E:91:C0:76:06:A1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d8ec010-d2c2-435f-9826-9a03c2ab949f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d8ec010-d2c2-435f-9826-9a03c2ab949f/f88ad909-af6e-3c19-97ea-abc7c4271328.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 2635
IP address blocks: 74.114.152.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:68:06:55:1d:96:24:b4:22:57:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d8ec010-d2c2-435f-9826-9a03c2ab949f
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=ecf08898-fbb0-4a7b-b364-4dbfd66c48f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:70:f4:8f:81:54:fc:a5:0f:b4:35:5b:b8:88:
1e:ff:be:44:a6:21:db:0b:40:fa:3f:8e:9d:36:1f:
72:d1:60:20:68:86:cc:19:4c:53:1c:92:10:72:24:
1a:8b:6a:a9:e1:0a:b4:b7:fa:7f:f8:ba:4e:a1:8a:
00:fa:78:ad:5f:b5:be:8b:2c:a1:cb:90:29:b4:6a:
84:c2:64:ed:c8:a9:32:05:b6:79:82:12:2a:41:1f:
e2:66:5e:23:bf:cf:ef:d6:74:1d:a9:81:c8:a6:06:
dd:cb:7d:46:c5:05:c8:38:3c:7a:94:54:86:39:29:
bd:5c:8f:e2:fd:e7:b1:b3:84:69:86:44:57:0d:d6:
bb:b0:e9:90:3b:7d:8c:2e:64:25:a0:16:fb:a0:89:
f2:bb:8e:aa:7f:5d:d2:88:58:58:ab:1e:74:cd:63:
08:5d:fb:57:35:a2:e8:18:68:17:7b:f7:50:b9:33:
b5:d0:e2:1b:13:3f:c9:da:50:fa:0a:54:0e:dc:d3:
23:fe:95:38:d1:92:9d:af:79:48:8f:af:8f:da:8d:
20:ab:3b:9c:b8:b0:60:00:db:7f:7b:11:26:2f:10:
4e:76:a6:3e:51:8c:09:87:a6:67:78:44:b9:4b:e4:
d3:34:ab:10:63:bb:a6:e2:a3:3f:4a:dd:f3:72:da:
bd:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E1:6B:CC:4D:D0:C3:CD:1E:36:24:75:96:62:BD:FE:E0:6B:37:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d8ec010-d2c2-435f-9826-9a03c2ab949f/f88ad909-af6e-3c19-97ea-abc7c4271328.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d8ec010-d2c2-435f-9826-9a03c2ab949f/1d8ec010-d2c2-435f-9826-9a03c2ab949f.crl
X509v3 Authority Key Identifier:
keyid:F3:0B:61:DF:FC:73:3E:6D:EF:9B:19:45:49:C5:3E:91:C0:76:06:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d8ec010-d2c2-435f-9826-9a03c2ab949f.cer
sbgp-ipAddrBlock: critical
IPv4:
74.114.152.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:30:71:09:3f:7b:3b:b6:f0:a4:7e:7d:ca:e7:90:7f:b9:03:
aa:5d:e8:19:2f:f4:dc:37:10:3b:bb:11:a5:27:35:9f:42:7a:
84:d2:09:1b:0c:1b:3c:df:ab:ee:83:36:a3:c9:9e:63:1e:d9:
19:30:c0:bc:d8:99:79:63:8e:e0:ef:e9:0d:12:71:34:65:25:
46:30:82:12:80:dd:15:23:95:96:da:92:38:0e:6b:76:0c:88:
51:9c:35:be:5f:be:27:06:17:bd:ae:9a:ed:50:bf:11:24:33:
49:07:19:35:84:15:51:8c:e6:6c:45:81:bc:18:6c:f3:30:13:
a1:66:1a:bb:a3:27:e0:7a:6d:bb:51:1a:7d:0a:b7:ff:31:b4:
71:78:a6:68:a5:90:d5:7a:6b:1e:eb:4b:ef:2d:7d:d5:55:1c:
a1:a4:11:4f:30:dd:04:39:36:99:6b:49:a6:41:0e:bf:ad:a7:
fd:62:31:70:08:47:06:a9:ab:3d:56:8c:e5:f3:cd:5c:59:01:
5e:86:40:a8:bd:3e:90:cd:78:07:3b:14:42:1b:20:73:eb:36:
dc:31:a2:b8:dd:a1:de:70:01:30:8d:70:1d:a0:44:f0:91:94:
37:7c:28:17:05:af:f8:b5:1c:b6:37:ea:01:56:3b:e2:73:63:
fe:9f:b7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:51:10 2025 by rpki-client