Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/3c7c2961-8a03-3720-9395-0ed37fe9f383.roa
File: 3c7c2961-8a03-3720-9395-0ed37fe9f383.roa (raw, json)
Hash identifier: 7PC7/XHDozKON/xDxw4TFkr1UW1P0YErRmZWqOu4BaY=
Subject key identifier: DB:07:31:45:AC:4F:FB:2A:F0:B7:5F:3E:D4:4A:FC:59:B5:8B:A6:EE
Certificate issuer: /CN=17c62883-899d-4b86-8800-e9715d10a482
Certificate serial: 010D0C9F432858482EBFFD95EC3F94FD149C3CD8
Authority key identifier: DD:14:89:9C:02:BD:D8:49:D4:24:A5:7B:68:88:74:B7:61:DD:13:82
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/3c7c2961-8a03-3720-9395-0ed37fe9f383.roa
Signing time: Thu 12 Dec 2024 14:00:51 +0000
ROA not before: Thu 12 Dec 2024 14:00:51 +0000
ROA not after: Wed 12 Mar 2025 13:00:51 +0000
asID: 26630
IP address blocks: 74.113.192.0/21 maxlen: 24
204.86.64.0/19 maxlen: 24
206.201.64.0/20 maxlen: 24
208.93.241.0/24 maxlen: 24
208.93.242.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2e:bf:fd:95:ec:3f:94:fd:14:9c:3c:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17c62883-899d-4b86-8800-e9715d10a482
Validity
Not Before: Dec 12 14:00:51 2024 GMT
Not After : Mar 12 13:00:51 2025 GMT
Subject: CN=a5cc158b-802b-40b3-9588-fb987758c0a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0c:6c:1d:3e:79:86:a6:9d:e2:76:35:23:2a:
c9:1d:48:5f:4c:04:ab:5b:2f:0e:99:1c:41:14:1f:
70:5a:2e:f9:21:ba:25:a1:27:a5:c2:b1:59:62:4d:
f3:65:3b:e5:ff:9e:2c:4e:f5:b3:2c:5b:99:cb:38:
a0:a2:a0:3f:42:0b:14:fa:ec:d4:83:31:8a:33:67:
d8:69:f1:ab:d2:f1:2d:87:d2:bf:bf:c3:44:9f:1d:
8c:96:27:a5:09:82:bd:6e:9f:86:c6:20:33:b5:4e:
aa:58:c1:a7:1e:9e:1b:69:f5:e4:9f:33:eb:7e:72:
58:05:e9:79:f5:09:ab:cb:ec:f8:e0:8d:83:a9:42:
0d:67:7a:3d:eb:8b:67:b2:bb:34:20:90:a6:a1:6c:
74:d8:08:cb:be:38:97:bf:90:f8:58:0d:31:0a:65:
07:c8:2a:10:e9:3f:01:c0:78:7b:f2:99:4e:29:90:
d1:c3:dc:fe:3c:4c:34:85:41:b3:01:fb:68:55:e8:
1e:9e:9c:9b:5e:75:92:eb:e9:3a:73:bb:17:dc:ba:
0b:a1:50:d3:2b:9b:c7:a5:f2:65:e5:0c:88:f1:1c:
3e:3d:23:c6:42:af:5c:ef:89:d8:87:0f:bd:1c:91:
d3:53:86:99:cb:d5:57:ad:07:44:02:1d:74:14:41:
70:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:07:31:45:AC:4F:FB:2A:F0:B7:5F:3E:D4:4A:FC:59:B5:8B:A6:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/3c7c2961-8a03-3720-9395-0ed37fe9f383.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/17c62883-899d-4b86-8800-e9715d10a482.crl
X509v3 Authority Key Identifier:
keyid:DD:14:89:9C:02:BD:D8:49:D4:24:A5:7B:68:88:74:B7:61:DD:13:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482.cer
sbgp-ipAddrBlock: critical
IPv4:
74.113.192.0/21
204.86.64.0/19
206.201.64.0/20
208.93.241.0-208.93.243.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:5c:93:e6:92:9f:e0:f9:93:e6:e4:d5:90:4a:09:a9:03:b7:
c3:11:63:77:25:9d:18:1b:34:32:71:b7:7e:32:e9:a7:65:a6:
b9:0e:b3:44:26:a8:13:c2:25:62:c1:0a:a9:9d:09:74:2b:57:
7a:f1:a0:ec:35:ae:00:32:b1:69:88:50:4a:53:3b:45:2b:26:
d7:10:6d:06:46:8a:6a:98:2e:ec:5b:0e:33:a7:ba:af:44:5d:
02:fb:1d:11:a3:a8:b6:7e:bd:c4:f6:80:73:55:ca:ed:22:5e:
6b:b2:e7:d8:11:93:26:d0:10:9a:91:5d:bd:46:e3:a4:b1:cd:
f2:78:91:86:82:c0:a1:20:cd:65:47:c9:3f:67:3b:8d:13:04:
b9:9e:a5:87:74:a1:b6:d4:b5:31:d5:a7:d1:99:6f:b5:06:96:
89:b3:4d:96:2d:f1:bc:e3:b5:38:1e:34:12:88:8b:78:fa:c5:
d1:63:31:20:87:c3:be:1d:64:b7:c0:be:45:3e:c6:40:57:d2:
d6:af:5d:d4:cc:31:c7:b7:7c:40:0a:db:0c:85:94:a0:0f:c9:
e7:ed:f2:66:05:49:63:f6:bc:6d:72:3f:01:3c:46:7c:b5:05:
eb:69:5b:8b:d1:ed:82:ec:eb:fc:bc:d3:1c:10:f8:2d:b5:c1:
12:c9:9a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:10:12 2025 by rpki-client