Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/74f2a10b-925e-38b0-81ad-f1d909f42057.roa
File: 74f2a10b-925e-38b0-81ad-f1d909f42057.roa (raw, json)
Hash identifier: cYOTd6Wh0zEOas+xVhxHGefc/1FdNGtSJgt68/gRU58=
Subject key identifier: 43:AB:FB:B0:01:BD:2C:87:85:11:78:37:5B:33:E2:2C:8F:2C:02:F0
Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad
Certificate serial: 010D0C9F432858485B6AFF5328A57E644772C9C0
Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/74f2a10b-925e-38b0-81ad-f1d909f42057.roa
Signing time: Sat 28 Dec 2024 14:00:52 +0000
ROA not before: Sat 28 Dec 2024 14:00:52 +0000
ROA not after: Fri 28 Mar 2025 13:00:52 +0000
asID: 35908
IP address blocks: 74.222.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5b:6a:ff:53:28:a5:7e:64:47:72:c9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad
Validity
Not Before: Dec 28 14:00:52 2024 GMT
Not After : Mar 28 13:00:52 2025 GMT
Subject: CN=3732b239-7851-462a-a2c9-446c05cb2bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:75:11:b7:88:82:3a:0f:c3:a9:f7:5b:b3:06:
ab:e1:7d:03:89:21:ac:81:8b:07:bc:dd:b2:cb:8d:
c7:98:4b:ea:24:c3:2f:16:bf:91:78:2f:b4:89:c5:
a2:05:50:a9:e9:66:fb:be:4f:73:0c:b0:47:70:f2:
89:4c:b8:1d:1b:cb:05:94:cf:c4:1a:99:51:8d:f9:
52:41:fe:36:42:f0:cf:80:7f:f9:29:d3:a8:5e:db:
33:37:97:d7:bf:66:a9:fd:79:a8:4c:fb:82:31:5e:
a4:91:43:c9:58:ea:8e:2a:71:2d:d8:26:23:5c:88:
20:e1:d4:5c:b7:e5:33:37:6b:f4:39:23:7a:51:6a:
08:ee:10:6f:46:e9:3f:44:cd:cf:34:29:c0:f0:1c:
15:f9:b2:e2:08:7d:0d:0e:59:25:24:87:b0:bc:2b:
91:3d:45:cf:f7:d5:d3:23:a6:b1:dd:58:71:e7:48:
5b:8d:c7:5e:fa:c9:87:36:19:fe:66:59:93:75:a0:
e8:ed:5a:84:41:77:42:3b:73:9a:f4:eb:58:fb:49:
5c:2c:9a:52:98:b0:7e:f2:ac:2d:43:65:68:c6:2b:
6a:5d:7d:57:e6:92:af:df:3c:15:e6:ae:00:27:55:
ea:b6:8d:ab:6a:ab:3d:c4:97:e2:d5:18:2b:0d:04:
b7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:AB:FB:B0:01:BD:2C:87:85:11:78:37:5B:33:E2:2C:8F:2C:02:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/74f2a10b-925e-38b0-81ad-f1d909f42057.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl
X509v3 Authority Key Identifier:
keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer
sbgp-ipAddrBlock: critical
IPv4:
74.222.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:6a:18:29:48:3d:e8:ca:0e:e4:c6:37:f3:2a:e0:6e:ed:32:
e6:09:47:c2:1c:cf:ff:6a:be:56:ff:7e:23:fa:9d:13:b6:a9:
bc:ff:d7:7e:77:ad:0b:4a:4a:96:1e:8c:79:e6:a9:dd:b7:a5:
c0:ea:80:2c:81:e8:bf:4a:11:f5:a9:a5:72:46:2b:41:6f:9d:
b4:1b:13:9a:29:13:db:50:b5:5c:93:6b:68:81:6d:9a:04:25:
4c:ff:f8:57:47:78:af:c5:44:ef:07:1a:18:09:cb:8c:1e:73:
fa:11:35:91:82:c6:0b:b1:bc:d8:ca:d7:66:4a:24:ef:75:55:
76:3b:72:9d:8d:b8:9f:23:86:0e:17:09:a8:84:5e:61:a7:91:
35:24:0f:6b:36:f8:6c:e5:b9:a0:9f:61:f2:12:b7:f2:b8:90:
f7:29:fe:af:f2:c1:2e:f4:38:58:7f:1d:ef:a4:ff:56:a7:cd:
e2:24:d7:93:7e:00:0c:53:d9:ff:29:33:37:15:76:9e:b0:78:
d1:ff:46:ad:b0:10:ca:ad:ad:77:75:5f:eb:d7:d2:72:26:54:
42:27:62:9a:30:d3:24:a4:1e:12:0d:49:d1:df:a1:d5:09:8b:
37:84:fd:11:cc:a9:ee:16:da:29:e7:17:ff:12:39:20:6e:f7:
cd:4b:df:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhbav9TKKV+ZEdyycAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5
YWFkMB4XDTI0MTIyODE0MDA1MloXDTI1MDMyODEzMDA1MlowLzEtMCsGA1UEAxMk
MzczMmIyMzktNzg1MS00NjJhLWEyYzktNDQ2YzA1Y2IyYmY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXURt4iCOg/Dqfdbswar4X0DiSGsgYsHvN2y
y43HmEvqJMMvFr+ReC+0icWiBVCp6Wb7vk9zDLBHcPKJTLgdG8sFlM/EGplRjflS
Qf42QvDPgH/5KdOoXtszN5fXv2ap/XmoTPuCMV6kkUPJWOqOKnEt2CYjXIgg4dRc
t+UzN2v0OSN6UWoI7hBvRuk/RM3PNCnA8BwV+bLiCH0NDlklJIewvCuRPUXP99XT
I6ax3Vhx50hbjcde+smHNhn+ZlmTdaDo7VqEQXdCO3Oa9OtY+0lcLJpSmLB+8qwt
Q2VoxitqXX1X5pKv3zwV5q4AJ1Xqto2raqs9xJfi1RgrDQS3pQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEOr+7ABvSyHhRF4N1sz4iyPLALwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj
NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvNzRmMmExMGItOTI1ZS0z
OGIwLTgxYWQtZjFkOTA5ZjQyMDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3
MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh
OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz
MGRkYTlhYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGSt6AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKBqGClIPejKDuTGN/Mq4G7tMuYJR8Icz/9qvlb/fiP6nRO2qbz/1353
rQtKSpYejHnmqd23pcDqgCyB6L9KEfWppXJGK0FvnbQbE5opE9tQtVyTa2iBbZoE
JUz/+FdHeK/FRO8HGhgJy4wec/oRNZGCxguxvNjK12ZKJO91VXY7cp2NuJ8jhg4X
CaiEXmGnkTUkD2s2+GzluaCfYfISt/K4kPcp/q/ywS70OFh/He+k/1anzeIk15N+
AAxT2f8pMzcVdp6weNH/Rq2wEMqtrXd1X+vX0nImVEInYpow0ySkHhINSdHfodUJ
izeE/RHMqe4W2innF/8SOSBu981L32g=
-----END CERTIFICATE-----
Generated at Sun Apr 27 01:16:33 2025 by rpki-client