Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/276ab7d3-2fa3-3d76-a533-1ea55ee93389.roa
File: 276ab7d3-2fa3-3d76-a533-1ea55ee93389.roa (raw, json)
Hash identifier: ffyAWKH8Rt5FZd5X7WRYJ1srH1YLHKON1B1gbrqzzJk=
Subject key identifier: F7:71:3E:A2:74:F9:3F:BE:68:3F:50:10:FE:EE:B2:58:97:80:30:AD
Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad
Certificate serial: 010D0C9F432858485B6B0313C7E3DAFC81804100
Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/276ab7d3-2fa3-3d76-a533-1ea55ee93389.roa
Signing time: Sat 28 Dec 2024 14:00:52 +0000
ROA not before: Sat 28 Dec 2024 14:00:52 +0000
ROA not after: Fri 28 Mar 2025 13:00:52 +0000
asID: 4213
IP address blocks: 74.222.145.0/24 maxlen: 24
74.222.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5b:6b:03:13:c7:e3:da:fc:81:80:41:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad
Validity
Not Before: Dec 28 14:00:52 2024 GMT
Not After : Mar 28 13:00:52 2025 GMT
Subject: CN=3c35cc17-a7b5-43f7-bd48-1671f239d9dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:41:f5:52:07:34:bb:60:27:4f:2f:58:ae:8f:
fa:13:10:27:70:36:09:8b:e2:96:5f:63:06:57:24:
0e:b7:fb:a0:96:19:b3:e0:68:9c:49:f6:1a:7c:98:
1a:e3:c2:44:3b:49:cd:b7:bf:c4:12:c3:c8:3e:e8:
14:0d:57:76:a5:ea:69:62:4e:43:b3:c0:85:a1:72:
0a:2b:ff:f5:8b:86:55:e3:87:ea:18:ca:9c:d8:b7:
dd:74:b5:82:7c:3a:9a:b1:56:81:e6:1b:c0:12:e3:
c9:62:39:dc:68:b0:6d:75:8f:71:62:b6:5c:cf:27:
79:48:20:05:cb:f3:b6:f7:bc:5a:55:43:a3:fe:c8:
a5:1f:f8:cf:f4:35:06:1f:d1:ac:48:9e:24:07:2e:
e0:a5:f0:32:f5:53:0a:a6:27:2d:f0:fd:8d:b0:88:
2f:f5:81:23:de:ff:e8:a1:d2:83:c4:49:fa:4a:df:
ba:59:b6:06:51:ef:2e:15:ad:b3:2e:b4:43:f0:ec:
4a:6d:bd:a3:4e:5d:ef:53:71:12:ab:47:56:00:8c:
b5:f1:9d:38:ee:00:e0:53:97:ad:06:84:d1:a5:c8:
08:b8:8d:a8:4b:5d:87:1d:a9:4c:9e:ee:7e:3c:95:
74:8b:d3:74:4b:f5:fb:a0:00:a8:19:22:1c:17:6f:
4e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:71:3E:A2:74:F9:3F:BE:68:3F:50:10:FE:EE:B2:58:97:80:30:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/276ab7d3-2fa3-3d76-a533-1ea55ee93389.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl
X509v3 Authority Key Identifier:
keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer
sbgp-ipAddrBlock: critical
IPv4:
74.222.145.0-74.222.146.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:4c:d7:e3:71:b8:23:49:d9:1b:93:de:82:31:42:36:b2:ed:
7f:05:53:5f:7b:c9:a6:90:a0:11:74:cd:b9:8a:8a:44:a5:3e:
09:f8:bb:08:81:37:90:e0:12:24:09:d9:f2:73:1b:d3:c9:cd:
09:51:9c:67:47:43:e8:5d:86:88:9e:f2:b2:e7:02:48:92:fb:
fc:12:72:4f:fe:e6:78:3a:87:e4:19:ee:46:f1:6a:22:ac:33:
11:df:dd:a5:23:8f:1a:56:27:e3:78:6b:d3:46:19:4a:bb:df:
cc:86:ee:91:e7:be:63:7d:36:dd:47:5a:44:35:20:40:c3:59:
23:27:0a:1d:3c:cd:a5:13:d8:d7:18:3e:54:9b:90:64:b8:51:
13:a0:3c:29:de:c4:59:e5:15:e5:18:11:47:7f:f4:1b:f6:18:
ce:59:67:7b:6f:44:11:95:0b:34:51:d3:7a:31:8c:5b:dc:6c:
e1:2d:6d:aa:a9:29:b6:4c:49:af:8f:26:85:cb:86:6c:9b:df:
2a:ef:2e:c1:2b:ce:b4:9d:69:f4:c8:3e:92:bd:84:8b:e3:a8:
34:ae:25:18:29:d2:b6:02:a6:74:3c:d7:4c:92:b3:dd:01:bb:
c6:88:c1:d5:15:ad:d3:21:1e:98:12:6c:26:3e:dd:db:b3:69:
e6:91:98:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 05:45:11 2025 by rpki-client