Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74fe72d3-c7f7-4c93-a9f0-a57341b2590b/ca7435da-c073-32a7-95f4-50726ece35b1.roa
File: ca7435da-c073-32a7-95f4-50726ece35b1.roa (raw, json)
Hash identifier: 1UY4ruLDBMSXtPRrRy0YM+a98YD+o+Rkd2xYWBZjiH0=
Subject key identifier: 15:49:64:73:2F:15:0A:A5:ED:F2:C7:4F:3D:95:A1:CE:AA:55:CE:38
Certificate issuer: /CN=74fe72d3-c7f7-4c93-a9f0-a57341b2590b
Certificate serial: 010D0C9F432858480214FB91B43300A4C4B220C0
Authority key identifier: BE:9B:F0:43:E1:E7:AA:A1:01:9C:05:F4:D3:42:A4:DC:9F:7E:C8:58
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74fe72d3-c7f7-4c93-a9f0-a57341b2590b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74fe72d3-c7f7-4c93-a9f0-a57341b2590b/ca7435da-c073-32a7-95f4-50726ece35b1.roa
Signing time: Tue 26 Nov 2024 14:00:39 +0000
ROA not before: Tue 26 Nov 2024 14:00:39 +0000
ROA not after: Mon 24 Feb 2025 14:00:39 +0000
asID: 19704
IP address blocks: 74.85.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:02:14:fb:91:b4:33:00:a4:c4:b2:20:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74fe72d3-c7f7-4c93-a9f0-a57341b2590b
Validity
Not Before: Nov 26 14:00:39 2024 GMT
Not After : Feb 24 14:00:39 2025 GMT
Subject: CN=05eaf1d9-8e7e-4ef0-a8ae-ff33b094c03e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:60:14:3b:cc:bc:08:4a:b6:8e:ce:e2:60:70:
6f:5b:38:9d:c0:31:a6:95:2d:03:fa:2a:b2:76:b3:
fc:15:6e:ca:85:71:4a:c5:e4:8b:52:44:5b:63:5c:
00:8c:d5:f1:fe:65:30:a7:5f:16:0e:da:e4:7d:ce:
18:c8:f5:ce:cf:4f:3e:f8:4a:02:9f:61:c5:25:ad:
7a:85:b2:49:05:f5:d1:28:51:a2:06:a4:8b:c1:71:
d3:3e:44:d5:3d:38:30:28:25:8c:c9:06:17:b2:d6:
56:6b:db:ec:01:b0:2d:42:4a:76:44:73:fc:70:8c:
da:b2:71:47:f5:1a:51:52:f2:fd:58:16:c7:22:b8:
b5:6c:f0:53:54:5b:1e:09:8f:d5:5c:69:8a:3e:74:
53:e6:d5:ba:99:7a:c0:ff:ea:0b:8d:76:d1:16:62:
8e:36:4b:cc:1b:00:40:fd:87:df:11:c2:2d:2a:60:
ab:15:7a:84:9c:37:ae:1f:09:91:89:39:44:06:53:
c5:16:9c:70:ee:9b:da:e1:30:40:cf:13:2a:20:18:
ab:45:67:86:4d:a9:e3:7d:7d:6b:9e:85:35:53:12:
f8:4d:05:00:76:0e:bc:05:4f:49:94:60:ad:f4:62:
fc:7e:07:a6:ec:51:68:34:e3:db:e7:3c:01:06:63:
61:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:49:64:73:2F:15:0A:A5:ED:F2:C7:4F:3D:95:A1:CE:AA:55:CE:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74fe72d3-c7f7-4c93-a9f0-a57341b2590b/ca7435da-c073-32a7-95f4-50726ece35b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74fe72d3-c7f7-4c93-a9f0-a57341b2590b/74fe72d3-c7f7-4c93-a9f0-a57341b2590b.crl
X509v3 Authority Key Identifier:
keyid:BE:9B:F0:43:E1:E7:AA:A1:01:9C:05:F4:D3:42:A4:DC:9F:7E:C8:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74fe72d3-c7f7-4c93-a9f0-a57341b2590b.cer
sbgp-ipAddrBlock: critical
IPv4:
74.85.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:f8:a0:a0:97:ca:73:4f:bb:1e:54:b9:c6:ca:e5:c7:ea:53:
21:70:4f:cc:e1:b9:8c:33:db:c7:5a:a2:ed:bf:66:16:84:95:
1b:eb:28:68:f1:66:4a:ce:77:fd:d6:0b:13:bd:f2:12:84:6d:
6b:7d:f0:86:e8:78:bd:e2:ee:ae:14:ed:6b:d9:8b:71:b5:79:
e4:d0:f4:32:d0:c8:6c:8d:b9:7d:29:f1:a0:be:3e:65:c9:63:
8a:29:fe:e6:3d:50:4d:0d:18:6c:25:df:04:c3:83:49:0a:a9:
fa:a7:0f:1e:83:e7:dc:43:ab:19:d3:c9:a3:28:aa:64:42:f8:
5d:8c:1f:fc:dc:22:dd:53:11:f4:cf:c0:7a:a5:69:61:a2:a1:
a9:f2:08:0d:45:63:d4:27:56:68:06:5f:01:2c:39:d0:99:0d:
0a:a6:ac:50:25:be:c7:c1:2f:e2:9c:ef:5b:2e:3c:5e:7c:17:
1d:87:96:50:a9:6f:06:78:50:48:47:23:8d:d2:27:23:97:f7:
54:9b:5b:75:ac:14:1e:39:fd:52:30:c2:fb:bc:e5:55:64:a8:
44:ae:68:a5:7b:f7:ea:48:74:24:e9:32:af:f3:a0:82:b5:c7:
76:a2:00:32:60:75:a9:84:a4:10:8d:af:72:ed:19:b4:5c:a6:
00:61:56:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 19:11:44 2025 by rpki-client