Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/6d45b3b7-23a0-3c55-a676-4b26bda9394d.roa
File: 6d45b3b7-23a0-3c55-a676-4b26bda9394d.roa (raw, json)
Hash identifier: LFAv2tBNMNs9w+Z4x+v5EzJ/4bUZ7v0vgAqEkoehbuo=
Subject key identifier: 88:8B:44:7B:9F:24:DA:33:48:29:17:73:B0:B6:63:E6:C0:C1:CD:88
Certificate issuer: /CN=2cdca715-b3ad-4985-b6fd-0bd7308257df
Certificate serial: 010D0C9F43285848530AEA187417346592AE8100
Authority key identifier: D4:4C:25:AF:8A:8B:17:51:21:2B:12:3E:FC:3E:07:12:A7:BA:F9:7B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/6d45b3b7-23a0-3c55-a676-4b26bda9394d.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 19528
IP address blocks: 74.209.184.0/22 maxlen: 24
74.209.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0a:ea:18:74:17:34:65:92:ae:81:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cdca715-b3ad-4985-b6fd-0bd7308257df
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=cd1991c9-ad72-47ca-b486-ca05f60b77ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e5:12:e8:3c:e8:be:b3:68:24:c6:6b:17:62:
17:fd:85:36:a6:af:71:a1:16:68:04:c7:1b:1b:37:
5b:70:89:bd:ea:00:4a:5d:fd:f4:31:e8:fb:10:d9:
60:14:a8:ef:92:4f:3a:77:65:f0:57:07:0a:97:68:
e1:18:6d:b6:7d:71:89:4d:34:10:88:dc:dd:a9:8f:
88:25:8a:43:dc:f4:90:fd:b2:08:c7:4b:99:5b:b8:
69:be:06:4a:9e:9f:a5:00:43:8f:80:af:0b:c8:a7:
c9:52:99:93:08:c0:27:af:d5:51:db:93:31:69:51:
f8:0c:ee:18:17:b3:05:a8:ad:0a:11:90:fc:59:1d:
e8:f4:4e:6e:a3:02:f8:9e:5e:b4:11:2d:c0:1d:c4:
e7:6f:ce:08:da:2b:7e:ea:08:d1:9f:c0:71:66:20:
70:da:35:7a:d1:06:9a:4f:de:c9:99:e1:1d:d6:57:
19:cc:7c:71:d1:28:fb:3c:b7:55:cd:b3:40:8a:ab:
5b:c7:3c:46:c8:37:e2:71:ee:71:32:bc:0d:27:2c:
0d:93:0b:27:a2:59:12:de:b0:43:13:38:cb:cf:c0:
51:b0:56:34:b3:ef:6c:ef:6f:2a:c5:f6:07:d0:ac:
af:c6:5d:eb:1a:87:c1:68:81:c1:d6:89:1d:65:47:
11:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:8B:44:7B:9F:24:DA:33:48:29:17:73:B0:B6:63:E6:C0:C1:CD:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/6d45b3b7-23a0-3c55-a676-4b26bda9394d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/2cdca715-b3ad-4985-b6fd-0bd7308257df.crl
X509v3 Authority Key Identifier:
keyid:D4:4C:25:AF:8A:8B:17:51:21:2B:12:3E:FC:3E:07:12:A7:BA:F9:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df.cer
sbgp-ipAddrBlock: critical
IPv4:
74.209.184.0-74.209.188.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:4c:7b:e9:14:7d:1c:e3:2f:cd:6a:bd:00:be:1b:9f:80:5e:
92:64:45:45:ae:76:f3:86:40:a9:6b:49:a6:a1:58:51:7f:e0:
f6:22:b2:82:2f:f2:20:20:44:a8:e6:da:91:e4:95:04:23:c2:
6a:f3:89:08:c8:3e:58:30:79:b1:ff:5c:02:23:f6:f1:97:c0:
36:2b:c2:24:32:48:b5:98:a1:97:79:f5:c9:4f:90:17:8a:9c:
a5:19:77:87:a5:b7:51:7d:d4:e8:fa:f2:4f:dd:df:27:d7:f4:
04:14:f9:b4:52:63:ca:98:e5:7d:73:74:cd:fb:64:2d:21:67:
d8:9b:15:df:9e:1f:3b:e6:55:79:f4:28:7a:b2:af:f9:f8:f6:
cd:b0:d5:22:1e:d0:8b:53:63:ae:d8:71:7f:dd:34:ca:8c:fa:
af:ae:4b:bd:59:99:eb:b1:5d:9b:d1:05:0d:52:26:86:05:be:
d6:ea:0c:13:b4:81:20:e5:2d:99:a8:47:49:ba:41:2e:f1:c2:
f8:bd:f5:cd:21:6c:2c:f5:2e:31:8c:7b:2a:d1:8e:8d:d5:08:
0b:8d:d5:6e:de:23:e9:e8:85:59:8c:f1:96:bc:d8:ea:ce:35:
c9:6a:ed:e5:6a:37:1e:b2:fc:4f:30:6d:5e:08:6f:9f:90:a1:
64:62:42:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:22:56 2025 by rpki-client