Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/ce7c6a93-090d-3601-ac47-5724324b5304.roa
File: ce7c6a93-090d-3601-ac47-5724324b5304.roa (raw, json)
Hash identifier: W53FG4gNzBcNS/jGxF2hbWPRQn0NXzyBS8u7M0PLMWw=
Subject key identifier: EB:C1:3E:30:0B:04:59:8D:F2:37:E1:70:EA:0C:F3:A8:D0:07:73:AB
Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial: 010D0C9F432858485E35AD19E18FA598A907F980
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/ce7c6a93-090d-3601-ac47-5724324b5304.roa
Signing time: Sun 29 Dec 2024 14:00:53 +0000
ROA not before: Sun 29 Dec 2024 14:00:53 +0000
ROA not after: Sat 29 Mar 2025 13:00:53 +0000
asID: 21949
IP address blocks: 74.213.168.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5e:35:ad:19:e1:8f:a5:98:a9:07:f9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
Validity
Not Before: Dec 29 14:00:53 2024 GMT
Not After : Mar 29 13:00:53 2025 GMT
Subject: CN=2d0be617-696c-4325-9973-d8014d51d376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:05:2d:6d:2f:9c:54:e7:e8:f2:46:af:4b:7a:
f8:4e:62:46:6e:3f:91:3e:77:4a:8e:2b:f1:63:7e:
b9:82:26:fd:d8:5c:cf:8e:78:d1:6e:96:a6:95:6c:
b2:5c:3b:dd:01:33:73:df:0b:b5:46:a8:c8:53:75:
38:29:3b:b7:7f:7a:20:8d:e6:54:3d:f5:4d:3e:3d:
3b:78:78:ff:92:14:78:41:cb:60:91:87:e1:9b:56:
ac:2e:08:2b:7b:66:ea:0d:a1:b5:0c:05:5e:b3:df:
e8:2d:c8:f9:d1:67:f9:e7:53:2f:07:99:9d:cb:db:
0b:97:d7:7b:59:7c:e3:55:39:9a:0c:f4:cf:9d:d0:
29:cc:65:46:7e:a6:b1:c2:a3:15:4a:31:10:9a:c4:
be:a1:80:7f:89:f9:b3:dd:23:b4:a4:e0:cf:b7:11:
a2:47:94:e4:cd:4b:a3:82:25:90:c0:02:d4:3f:35:
36:e5:05:a4:5a:bc:38:01:d6:5f:cf:f7:b4:4a:b5:
86:df:7d:86:75:d6:1c:3c:80:dd:1a:a7:45:ed:a9:
26:71:77:bd:98:00:42:3d:08:bd:3f:25:68:a9:01:
72:b0:b0:8a:71:e2:86:61:c0:4d:1c:44:30:b8:3b:
8c:59:9f:9c:05:16:5f:6a:de:cc:86:b0:14:9e:38:
19:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C1:3E:30:0B:04:59:8D:F2:37:E1:70:EA:0C:F3:A8:D0:07:73:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/ce7c6a93-090d-3601-ac47-5724324b5304.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
X509v3 Authority Key Identifier:
keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
sbgp-ipAddrBlock: critical
IPv4:
74.213.168.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:ad:22:c9:af:38:1e:bd:58:3e:92:b3:07:3f:79:74:64:1b:
09:34:3e:bc:06:dd:e8:80:71:70:66:5f:ac:cc:c8:67:00:25:
bf:2c:f4:0a:ed:bf:2a:d0:41:13:7f:58:75:92:e9:fc:41:24:
7e:02:68:eb:dd:f6:99:8b:60:6b:42:30:99:23:0e:e3:cc:98:
ea:ed:b3:1b:87:9a:37:b1:df:f8:e9:19:32:bf:ff:50:de:bd:
d1:35:34:6f:a0:3a:a6:b0:00:43:2b:84:32:fe:33:57:d9:cd:
86:49:f4:ee:02:25:67:9b:83:8a:5b:64:e4:93:3c:0f:da:3f:
72:f7:e3:04:9f:76:0b:db:ff:04:00:6b:66:3c:03:ee:e5:f4:
68:7d:56:33:20:ae:c3:c0:79:42:8a:5a:2e:65:ba:74:41:fe:
81:0c:18:36:91:27:dd:61:69:f6:b6:51:32:51:9b:f4:91:a4:
4b:22:ec:46:f9:d4:ae:02:04:aa:ca:ef:ed:fc:2e:49:6f:75:
1c:8b:12:71:3b:dd:36:7f:a6:63:30:b9:97:e1:de:02:ee:7a:
8b:34:1f:e1:55:a5:3e:ab:5e:33:46:7b:3b:52:e6:14:37:e0:
49:96:d4:7e:79:ed:e3:44:22:c2:c9:cb:14:bf:7a:b5:1e:67:
40:69:af:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:00:34 2025 by rpki-client