Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/cf70d300-25bd-30f4-a6fd-23a33417314e.roa
File: cf70d300-25bd-30f4-a6fd-23a33417314e.roa (raw, json)
Hash identifier: Y5TuWkChx2DfGoUMR+HDn5ThYPv/KhWKKu7acQG48ic=
Subject key identifier: C9:FE:C5:2A:5E:B4:6A:28:36:4B:8E:B3:06:72:36:BE:C6:69:EA:BB
Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial: 010D0C9F432858484AAAE0530C42AF87E2A43E80
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/cf70d300-25bd-30f4-a6fd-23a33417314e.roa
Signing time: Sun 22 Dec 2024 14:00:51 +0000
ROA not before: Sun 22 Dec 2024 14:00:51 +0000
ROA not after: Sat 22 Mar 2025 13:00:51 +0000
asID: 397003
IP address blocks: 76.74.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4a:aa:e0:53:0c:42:af:87:e2:a4:3e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Validity
Not Before: Dec 22 14:00:51 2024 GMT
Not After : Mar 22 13:00:51 2025 GMT
Subject: CN=778c7f2e-0062-40d7-992e-7969e9f134db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:91:f7:b1:b3:bc:5c:19:af:e1:2b:4d:24:57:
e3:94:81:3b:e8:df:55:f7:13:5f:69:76:fe:8c:9a:
16:24:45:1e:ec:fa:52:5f:43:11:80:8f:46:54:2a:
c7:79:f8:38:92:fd:94:d9:bf:8c:e6:e1:f0:38:44:
d3:f8:1a:0d:54:99:8f:f6:dc:f7:ec:14:d6:12:33:
0c:79:2f:66:a3:2e:1b:13:f8:e6:f4:5c:fe:4a:aa:
dd:de:11:f4:90:78:6e:cb:b7:22:d8:59:c7:82:65:
2c:e0:62:ab:d7:e3:60:3b:fa:0a:91:cc:ee:63:2c:
05:cd:44:b7:26:66:ca:0d:4d:58:b5:e0:8c:ee:94:
7b:46:a1:2d:bf:e1:12:29:98:95:e7:1c:eb:06:c1:
1a:1f:ed:83:f1:0d:82:67:a0:a2:c2:de:f2:c8:15:
54:b3:cd:04:66:62:10:77:49:9b:62:0c:35:d2:f8:
6c:f4:d4:4a:9b:e7:95:84:ab:8b:5f:ff:f7:c9:e5:
cb:09:53:3c:91:59:37:0f:b3:b7:34:3f:ac:c3:ff:
74:8d:ab:0a:d5:64:63:21:91:2d:6f:bd:d0:d5:95:
57:03:51:07:0f:6c:0e:fa:21:a7:8b:34:10:0f:8b:
b3:6d:b7:1a:a2:c7:d4:ff:70:2a:91:88:d4:fe:21:
7c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:FE:C5:2A:5E:B4:6A:28:36:4B:8E:B3:06:72:36:BE:C6:69:EA:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/cf70d300-25bd-30f4-a6fd-23a33417314e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
X509v3 Authority Key Identifier:
keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
sbgp-ipAddrBlock: critical
IPv4:
76.74.137.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:23:6b:9d:7e:8d:36:dd:d8:8c:97:34:26:c0:96:1d:52:7c:
26:fe:8f:a8:2c:b0:bf:f5:52:7b:60:a7:2f:cc:bc:6b:3d:a5:
27:2e:a5:14:1e:54:1f:6a:95:53:93:0c:c0:4e:81:78:7a:95:
8c:ae:3c:fd:ca:1c:a5:1e:df:d3:81:87:83:ce:90:96:dd:0a:
b7:ce:0e:b5:fb:f0:cd:4a:6d:ef:ea:f1:1a:12:62:08:1f:c0:
32:8e:40:6b:6b:06:da:83:33:c3:2f:d7:2d:30:f8:80:7f:c9:
30:f2:f6:3b:fe:34:18:5d:e9:e7:1e:e0:a0:12:6c:54:94:85:
4b:18:eb:11:c4:60:71:fd:12:f6:a3:99:99:ab:fa:73:f4:50:
0e:51:8c:1f:79:68:31:eb:50:bf:36:10:59:5c:ab:93:7f:db:
5c:fe:db:51:1e:67:7a:d6:21:9e:b1:55:a4:ab:9d:56:34:a4:
ab:77:ab:b5:a1:4e:55:f5:78:a0:df:bb:2d:7b:e5:0d:26:cf:
10:99:4f:53:08:79:af:4c:a4:4b:e3:c2:f5:78:f8:46:4b:20:
76:8a:be:52:53:43:b5:a7:ff:d1:21:a9:10:7d:54:a6:76:e2:
ca:b6:16:fc:7e:99:0f:70:5d:ff:bb:12:07:26:43:53:fd:a3:
5a:d3:0c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:10:09 2025 by rpki-client