Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/ed6a384e-f72d-3094-bafb-9b2a825cfdb3.roa
File: ed6a384e-f72d-3094-bafb-9b2a825cfdb3.roa (raw, json)
Hash identifier: iNfAJV1XoSK1v3NL+1nNeqYMlOM6zNinvrbg/jAqRHg=
Subject key identifier: 2B:E2:45:3B:99:7A:0D:F1:B0:54:16:0D:17:19:A8:38:0E:78:BE:B0
Certificate issuer: /CN=2e356a8c-d37d-4efc-986d-251de18075cc
Certificate serial: 010D0C9F4328584849456EA88B871944DBF40640
Authority key identifier: EE:53:F8:E0:32:A8:99:92:86:FA:E4:D6:AF:BE:EA:55:32:A8:37:BF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/ed6a384e-f72d-3094-bafb-9b2a825cfdb3.roa
Signing time: Sun 22 Dec 2024 02:00:39 +0000
ROA not before: Sun 22 Dec 2024 02:00:39 +0000
ROA not after: Sat 22 Mar 2025 01:00:39 +0000
asID: 14543
IP address blocks: 74.207.128.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:49:45:6e:a8:8b:87:19:44:db:f4:06:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e356a8c-d37d-4efc-986d-251de18075cc
Validity
Not Before: Dec 22 02:00:39 2024 GMT
Not After : Mar 22 01:00:39 2025 GMT
Subject: CN=bcee8bc4-c549-48de-b1f8-72a54560a1c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f2:ca:d9:b7:93:ff:89:dd:5f:f4:57:3d:7f:
44:46:ef:82:6a:96:36:32:51:e1:ff:ec:40:af:54:
7d:22:92:bb:4b:d0:e8:19:62:c7:54:a7:5f:81:5d:
04:29:15:87:aa:e0:de:d5:5e:98:aa:72:eb:ed:66:
5e:9d:0a:68:4b:3f:13:01:72:05:f1:40:c7:60:5c:
1c:1c:94:77:b6:a9:80:95:f8:52:6d:8c:31:c1:fa:
eb:c7:fd:a7:36:5d:49:6f:98:1d:ba:5f:fe:08:4b:
72:c6:18:ec:77:39:40:31:6a:98:01:ea:46:d1:81:
ab:95:0c:6a:a3:75:4a:46:e0:ef:70:87:27:f6:94:
c2:73:54:d9:d4:46:ca:6a:58:f4:da:09:73:24:ed:
d5:1c:04:0a:8c:8f:69:f5:12:54:4e:7b:6a:f8:6a:
e3:05:15:d2:e5:01:92:a2:39:57:d4:2c:53:57:bf:
47:36:e9:67:60:be:ac:e5:cc:36:1f:e9:61:50:57:
7a:50:df:65:50:bb:6e:87:0e:12:ac:6a:e7:63:1c:
0c:8c:ea:91:a6:e1:64:0e:4b:ed:8b:ba:a8:91:f4:
79:2b:ce:bf:68:12:1d:12:c1:fb:86:84:00:0b:93:
6b:f7:22:00:c4:be:47:06:5b:3e:fe:ae:69:73:bf:
cc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E2:45:3B:99:7A:0D:F1:B0:54:16:0D:17:19:A8:38:0E:78:BE:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/ed6a384e-f72d-3094-bafb-9b2a825cfdb3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/2e356a8c-d37d-4efc-986d-251de18075cc.crl
X509v3 Authority Key Identifier:
keyid:EE:53:F8:E0:32:A8:99:92:86:FA:E4:D6:AF:BE:EA:55:32:A8:37:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc.cer
sbgp-ipAddrBlock: critical
IPv4:
74.207.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:56:23:d8:21:e9:88:02:e6:fb:d9:20:4e:a2:c1:f0:e5:39:
9c:48:ea:8b:58:b4:4e:7c:32:55:61:4f:45:09:12:18:da:cb:
96:cc:c4:7b:f7:61:78:1a:4d:d0:3f:b7:a4:1c:b3:a1:ab:bf:
57:b9:7b:40:af:a0:b1:02:97:2c:27:38:91:70:a6:9f:1e:41:
7f:8b:8b:f5:23:12:f8:30:b3:ad:15:e1:d2:7c:7b:67:cb:5d:
85:c6:78:e5:89:88:72:49:ef:60:94:c2:67:ee:f7:5f:79:c1:
e8:df:c0:1a:88:65:66:c3:e7:11:18:3a:e3:bf:9b:e4:82:1a:
76:26:08:f7:fb:a9:4e:54:a9:b2:d5:7b:9a:e2:24:91:c7:bc:
b1:80:43:17:87:6e:0b:f7:ca:4f:a2:bd:27:fd:25:fa:12:8d:
a2:30:6a:fe:9e:84:4c:0c:ca:c2:b0:da:84:c1:cf:d5:93:1e:
8f:ff:a8:a9:3c:6d:6b:a9:7e:38:d6:ce:15:f9:90:ea:57:00:
df:fc:a8:37:f4:94:f2:e3:68:9c:cc:0c:76:ce:ae:e4:07:a1:
4b:ce:56:b8:b0:a4:b5:7e:b4:ed:aa:00:f5:d0:70:9a:c7:4d:
9e:06:96:dd:d3:21:f8:f9:48:72:f4:ae:c3:7d:0f:9e:62:f8:
bf:97:25:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:52:58 2025 by rpki-client