Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/1f464f0a-ee05-3d80-926a-ab7d9b411e56.roa
File: 1f464f0a-ee05-3d80-926a-ab7d9b411e56.roa (raw, json)
Hash identifier: a8gUkOLmCeMJVTzKCKO4GfA7uE+EB+adkJqp34bt23M=
Subject key identifier: D4:DD:78:98:C9:25:81:42:01:55:36:A6:67:58:52:51:9A:60:48:47
Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Certificate serial: 010D0C9F432858483B4FFEB71D02C1738AE4E080
Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/1f464f0a-ee05-3d80-926a-ab7d9b411e56.roa
Signing time: Tue 17 Dec 2024 02:00:38 +0000
ROA not before: Tue 17 Dec 2024 02:00:38 +0000
ROA not after: Mon 17 Mar 2025 01:00:38 +0000
asID: 394708
IP address blocks: 74.126.72.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3b:4f:fe:b7:1d:02:c1:73:8a:e4:e0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Validity
Not Before: Dec 17 02:00:38 2024 GMT
Not After : Mar 17 01:00:38 2025 GMT
Subject: CN=f678b713-1070-4d7c-accd-61b4dbde1938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c4:24:72:c7:20:48:2a:44:ae:a8:48:82:f0:
4f:4f:d3:fe:62:7a:0f:61:37:82:24:96:37:d1:62:
57:62:31:83:b2:b2:d3:da:51:6a:58:05:93:5c:17:
b7:f4:42:fa:f5:ea:c1:02:59:27:4b:45:d7:33:18:
ee:eb:b8:a8:93:1f:e2:c6:90:24:07:6b:c6:9e:88:
f6:b9:c5:b7:18:58:2d:a2:44:8f:10:2b:0b:72:35:
d2:c3:bf:fa:f5:5e:9b:64:f3:ea:33:1f:29:d8:b2:
b3:e6:f0:71:00:b9:6c:75:14:27:ae:15:b4:5f:38:
20:08:31:06:2d:14:be:71:01:9f:27:74:62:32:47:
b8:9e:77:61:45:c0:4a:de:c0:ad:9b:f6:d4:26:69:
e4:a6:95:2d:03:6e:28:ac:6f:fa:52:8d:e5:21:db:
26:0b:7d:e6:98:ff:ce:6b:16:a7:d9:5a:ed:9b:9f:
08:8e:75:12:fc:8f:96:e1:43:80:85:d6:ac:89:7d:
0c:a0:a1:0c:60:77:4c:a0:3a:ae:95:8f:0e:3d:cc:
de:f5:6b:ce:39:70:84:58:46:66:f7:8d:bc:44:3b:
b1:51:8b:e7:cf:bb:46:1f:6f:58:33:85:99:6e:73:
6d:ec:1f:9a:20:87:ec:7b:74:3e:fb:62:04:a0:c1:
cf:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:DD:78:98:C9:25:81:42:01:55:36:A6:67:58:52:51:9A:60:48:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/1f464f0a-ee05-3d80-926a-ab7d9b411e56.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl
X509v3 Authority Key Identifier:
keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
sbgp-ipAddrBlock: critical
IPv4:
74.126.72.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:c8:e0:fe:fc:81:ac:88:6d:10:cf:76:9b:6d:57:38:3b:95:
d9:a6:05:ae:d7:56:fe:02:0d:d0:22:fc:98:e4:b0:41:20:a2:
cf:13:c1:f2:90:ab:9f:d7:12:d6:34:60:77:f4:49:95:bf:f3:
b4:29:1b:25:3c:46:bf:e6:13:11:9e:a3:a7:aa:16:34:d7:87:
0a:cd:d0:60:ff:ff:a9:97:47:1d:00:81:e1:1e:d7:6b:34:67:
8a:3a:08:15:5d:d9:4d:53:c0:dc:81:45:13:6e:19:e8:ed:d4:
c5:f7:2d:5c:37:3d:ca:e7:ea:76:80:27:c8:12:75:4e:7e:f2:
7d:2e:c5:c8:3a:90:6c:68:d8:d8:36:ff:dc:9f:05:86:5d:a5:
a8:ab:36:df:45:f3:43:22:7f:86:1b:f0:71:b9:e4:b9:ec:c7:
5f:7a:fc:c8:8f:4c:6a:72:63:7a:55:31:7a:b2:5d:25:a1:3e:
a2:f0:bd:1d:ff:e2:a8:d8:ce:11:9a:87:f1:d5:f4:d3:af:46:
ee:a4:a0:88:55:d2:c8:37:89:97:18:a2:65:dc:46:fc:f5:63:
fd:de:41:d5:88:00:81:8d:ad:3c:a1:53:42:3f:35:2f:83:a0:
4c:62:fb:88:11:00:18:b9:c8:ea:19:2e:44:a2:a8:7a:e5:0a:
af:1b:b4:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:53:29 2025 by rpki-client