Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/7e5bea68-03f1-363b-b17a-aefebdc29f3e.roa
File: 7e5bea68-03f1-363b-b17a-aefebdc29f3e.roa (raw, json)
Hash identifier: pllVTZ0QiIJzuv1OtZ1gxBJxYbDMlWJFETIeAyqqVfU=
Subject key identifier: 86:01:4D:CA:E6:66:48:1C:D4:E0:3D:A3:D5:32:AC:60:2D:73:EB:80
Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959
Certificate serial: 010D0C9F432858489A3B4B13C65890ACD9692700
Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/7e5bea68-03f1-363b-b17a-aefebdc29f3e.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 398420
IP address blocks: 74.126.168.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:4b:13:c6:58:90:ac:d9:69:27:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=3d75c588-f742-49b3-b5c6-4f46ec2e3953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:02:a8:bb:46:1f:5e:cd:05:b6:f2:38:6d:a3:
7c:3a:52:5d:d7:fa:30:de:af:b0:73:c5:8e:c7:01:
3c:3e:9a:67:77:63:14:77:6e:13:98:a2:19:b2:d4:
e3:cc:97:71:f6:56:bd:b2:2f:9a:35:68:6a:de:e6:
b3:1d:53:61:b9:61:82:26:aa:7f:f2:24:14:0c:ee:
ae:99:9c:91:98:cf:5b:01:01:94:5c:33:87:6b:40:
2d:97:f9:26:56:4d:e2:f9:d4:8d:ca:e1:8c:5e:d1:
c6:d8:52:42:c7:6a:4a:55:ed:1e:33:ee:78:4d:cc:
63:21:0a:d1:e6:b3:47:a7:df:07:1d:b6:b1:7c:af:
ad:95:63:71:e9:85:31:4c:f6:2c:ef:f8:cd:4c:21:
34:aa:7d:cd:24:0b:4c:4c:f2:95:9a:33:1c:7b:c5:
e7:b9:35:c0:ba:c1:93:4e:19:2f:5f:b9:d3:f5:29:
7f:1e:31:c2:15:16:be:d7:a8:dd:fe:55:41:6f:14:
db:d8:fa:18:43:66:9c:dc:15:56:05:2d:e5:92:77:
59:f3:54:c5:ca:d7:b8:ea:38:91:4a:cf:78:a7:21:
d3:e9:0d:0d:c0:81:9b:27:65:f5:c4:b5:37:30:4e:
0b:18:02:93:7c:00:2e:6a:86:de:dd:8e:94:51:2b:
72:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:01:4D:CA:E6:66:48:1C:D4:E0:3D:A3:D5:32:AC:60:2D:73:EB:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/7e5bea68-03f1-363b-b17a-aefebdc29f3e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl
X509v3 Authority Key Identifier:
keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer
sbgp-ipAddrBlock: critical
IPv4:
74.126.168.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:b8:59:b9:fb:0c:5c:f2:f9:df:55:e1:eb:11:26:40:4b:7e:
43:8a:54:7a:e2:78:c6:48:fc:b4:a2:17:96:0f:78:b2:67:e1:
52:50:eb:6b:44:91:7b:2e:12:a8:78:50:58:89:24:09:6e:5e:
01:bb:36:15:75:1e:75:8a:8e:16:48:2e:96:32:62:87:7c:7b:
d8:2d:28:a1:b5:40:79:3c:cf:1a:66:7a:ab:f1:d8:68:56:1a:
ee:ae:c9:71:b8:44:ec:83:71:3d:a7:6b:20:eb:3e:ed:c8:f7:
7c:ec:bf:07:e6:ad:ed:22:43:9b:75:8a:b3:a0:e3:71:74:ec:
18:47:f3:9d:28:00:b9:e8:a2:b1:9b:38:f4:77:78:80:b2:06:
18:8b:8c:02:45:b3:4b:4d:f2:62:04:d7:39:cc:dc:9d:7b:d2:
f4:70:8c:ef:dd:50:16:b3:1b:d9:db:dd:0b:71:8c:69:19:f5:
bc:1e:19:40:db:0b:25:03:61:ad:90:d6:7a:9a:37:1d:74:20:
44:d9:6b:3c:27:2d:b6:90:da:c7:41:bb:62:5c:c7:86:25:0e:
2c:ae:b2:de:80:7c:0c:b9:bd:2f:a5:97:30:69:38:64:3c:cb:
be:19:b9:fe:c2:92:e2:88:69:e2:61:2a:de:2f:06:77:80:ad:
32:21:71:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:32:05 2025 by rpki-client