Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/7e9b6fcc-0a7c-3ddf-993f-3e78fead8739.roa
File: 7e9b6fcc-0a7c-3ddf-993f-3e78fead8739.roa (raw, json)
Hash identifier: plKyoiPYLONvazjw3SPm0SvXt/jP3Dnu+mQQfAyTGUA=
Subject key identifier: 93:23:10:BF:74:AB:7F:37:49:B4:BD:A8:92:EF:95:8C:15:34:2E:AB
Certificate issuer: /CN=fd865c6a-54c8-4f58-ac80-9f9bdd368ee3
Certificate serial: 010D0C9F4328584886B083A64C9FD08BF24390C0
Authority key identifier: 9C:5E:DB:84:DA:D7:B5:46:10:65:08:BB:F3:24:5A:F8:71:1F:CE:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/7e9b6fcc-0a7c-3ddf-993f-3e78fead8739.roa
Signing time: Mon 13 Jan 2025 02:00:40 +0000
ROA not before: Mon 13 Jan 2025 02:00:40 +0000
ROA not after: Sun 13 Apr 2025 01:00:40 +0000
asID: 396982
IP address blocks: 74.112.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:86:b0:83:a6:4c:9f:d0:8b:f2:43:90:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd865c6a-54c8-4f58-ac80-9f9bdd368ee3
Validity
Not Before: Jan 13 02:00:40 2025 GMT
Not After : Apr 13 01:00:40 2025 GMT
Subject: CN=29fb8594-c785-4678-8def-2f8245465330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:35:87:ac:80:c0:f0:a2:11:0a:2b:fe:60:8e:
de:99:43:5d:a3:56:e0:37:16:36:49:67:ca:b6:f5:
ee:6d:1f:36:13:18:72:d4:39:41:58:a5:2f:87:3e:
99:ea:65:00:13:55:df:fe:77:12:65:59:ce:69:30:
89:58:d7:ff:b0:a8:3a:31:4e:7b:d3:34:96:78:01:
3c:b8:9d:78:21:a9:ff:c4:e3:c0:93:71:a0:d1:d6:
67:0d:e5:f3:43:59:02:4b:53:28:a6:41:43:90:65:
5c:ae:0f:e7:14:59:8d:e7:04:eb:4b:c7:51:32:f6:
53:d0:05:d1:f4:4d:9b:df:57:da:b8:90:22:fd:73:
3a:62:8c:41:c8:eb:d6:c5:f3:54:1c:aa:aa:09:2d:
1a:7d:a6:47:ec:49:0b:89:18:c2:37:8b:97:1d:7d:
29:8a:4c:c4:62:81:86:87:98:51:95:66:57:87:26:
1a:c0:45:1a:1b:98:1e:52:79:ff:e0:c4:e8:c3:b0:
de:b1:65:b6:66:55:fc:e7:ef:20:59:cf:57:a0:f5:
d1:9b:ff:0d:5b:3b:e4:0b:e2:fc:0e:fa:ea:86:05:
66:9f:14:56:32:8c:47:92:96:1e:6f:9b:48:18:de:
99:38:89:0d:5f:2f:4b:34:ac:2e:ba:c5:c2:35:b8:
9a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:23:10:BF:74:AB:7F:37:49:B4:BD:A8:92:EF:95:8C:15:34:2E:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/7e9b6fcc-0a7c-3ddf-993f-3e78fead8739.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.crl
X509v3 Authority Key Identifier:
keyid:9C:5E:DB:84:DA:D7:B5:46:10:65:08:BB:F3:24:5A:F8:71:1F:CE:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.cer
sbgp-ipAddrBlock: critical
IPv4:
74.112.185.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:64:a8:14:6a:e2:96:07:ed:06:2b:45:d8:60:c0:2a:63:95:
04:2b:f3:80:ab:7e:69:f0:ad:7d:2d:9c:bb:1c:cf:c5:93:fd:
55:c6:73:99:cc:43:36:91:28:43:a5:51:dc:7b:ac:69:dd:ae:
42:2b:e1:ef:2c:27:ce:10:ed:40:90:23:01:0a:9b:76:4f:bc:
02:60:9c:f3:7d:6c:61:63:f9:18:22:57:ea:51:4f:ae:b8:f5:
9e:0a:3e:84:9f:73:69:bf:77:3a:c9:e7:d9:49:0f:12:82:4b:
7b:a7:04:01:76:e4:c7:14:d2:93:5c:86:70:bf:23:61:43:11:
36:a7:e8:ac:36:c0:f3:48:e6:39:d6:a7:61:b6:58:4e:df:ee:
b6:73:36:79:f3:59:43:ee:a4:b1:e3:99:47:3e:1a:07:dd:7e:
6b:ea:29:36:0f:a1:a1:04:d7:5b:2a:2d:24:80:e3:a5:f3:4f:
53:c2:26:7a:a7:62:ee:f3:ae:37:ad:98:bf:02:47:f0:cc:eb:
e0:fe:8c:38:43:b2:27:bb:61:81:79:6d:db:52:cf:85:68:5a:
72:04:b1:a9:c4:69:e5:a7:c6:54:d8:a2:b6:17:f0:87:af:0b:
1b:c6:19:5c:aa:05:91:59:cb:4c:d0:e7:df:d9:c5:bf:20:28:
8f:8e:fa:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:38:13 2025 by rpki-client