Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/4a48e20a-0e29-3e1f-a81e-4a72b742e470.roa
File: 4a48e20a-0e29-3e1f-a81e-4a72b742e470.roa (raw, json)
Hash identifier: Q+ZoM38F5v+ndw4MR+dWStWbxGLbr2JkfLnhiV/eyxE=
Subject key identifier: 52:BC:74:0A:95:F3:5A:91:7C:C0:9E:24:0E:12:6E:DA:13:B4:FE:DB
Certificate issuer: /CN=3bb6068b-be48-4cc9-ad75-338daae24880
Certificate serial: 010D0C9F432858480EA511A0FFED43DF2A209640
Authority key identifier: 6E:D4:F1:96:20:A7:E8:9A:EF:DD:7E:10:E9:42:93:80:A6:AA:52:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/4a48e20a-0e29-3e1f-a81e-4a72b742e470.roa
Signing time: Sun 01 Dec 2024 02:00:39 +0000
ROA not before: Sun 01 Dec 2024 02:00:39 +0000
ROA not after: Sat 01 Mar 2025 02:00:39 +0000
asID: 399989
IP address blocks: 74.117.216.0/21 maxlen: 21
74.117.220.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0e:a5:11:a0:ff:ed:43:df:2a:20:96:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bb6068b-be48-4cc9-ad75-338daae24880
Validity
Not Before: Dec 1 02:00:39 2024 GMT
Not After : Mar 1 02:00:39 2025 GMT
Subject: CN=9748759f-7983-4780-ba21-ddc41565ad69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:cd:d7:8a:b3:b4:c8:d3:44:47:2b:d5:0c:91:
b3:72:7f:2b:f9:fe:47:6d:00:28:de:ab:ae:0f:59:
00:9c:b3:44:19:36:19:dc:4d:0d:12:14:75:1c:b3:
db:b1:48:54:cf:72:61:fa:15:77:2c:25:d7:81:82:
fd:01:b2:88:ca:f2:b8:d8:fe:2f:eb:33:99:cc:a2:
5e:cd:ab:a8:55:be:22:d0:61:98:2e:a8:84:5d:f0:
42:ba:cb:5f:a8:41:db:c7:2c:0a:68:11:3f:dc:94:
02:f6:a3:c2:cc:e3:ea:bc:99:44:a9:cc:8a:b9:09:
b4:e3:08:6d:fc:f4:ba:be:e7:81:f6:87:6a:f7:2d:
c4:ee:1d:a7:a5:1b:87:c7:1a:e8:d9:0c:e2:77:69:
27:f8:6c:7e:d0:b4:0c:36:32:34:14:99:d1:41:d0:
d7:6a:7f:6d:e3:60:33:50:f2:52:8e:c5:18:6f:cd:
04:70:c6:c5:21:9c:a0:d9:69:a0:2c:c9:fa:07:b2:
76:ec:5c:65:2c:22:53:2b:39:a3:d9:0d:cb:72:bc:
a8:42:cd:ee:1b:0a:1a:ec:dc:8c:b8:35:10:1f:16:
a3:fc:2d:2b:d3:92:0b:aa:75:b9:7b:c8:c5:35:e3:
4b:b4:59:d5:53:5b:7a:b3:3a:7c:e9:7f:77:75:7e:
15:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:BC:74:0A:95:F3:5A:91:7C:C0:9E:24:0E:12:6E:DA:13:B4:FE:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/4a48e20a-0e29-3e1f-a81e-4a72b742e470.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/3bb6068b-be48-4cc9-ad75-338daae24880.crl
X509v3 Authority Key Identifier:
keyid:6E:D4:F1:96:20:A7:E8:9A:EF:DD:7E:10:E9:42:93:80:A6:AA:52:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880.cer
sbgp-ipAddrBlock: critical
IPv4:
74.117.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:e6:e4:28:85:e4:20:63:77:53:80:6f:d0:43:89:b5:d2:80:
bc:da:d8:a1:15:3d:a1:99:a7:a9:7a:97:47:d1:9d:ce:36:b8:
c0:69:aa:e4:0d:0c:28:38:22:54:d0:f6:ac:bb:3e:a0:a0:9d:
0a:b9:7c:4d:c9:14:12:a8:4f:f6:6e:8c:51:04:4c:f8:24:ae:
bf:fd:e1:d0:52:f5:60:ea:73:96:bd:f8:9b:36:74:31:74:e0:
e5:0e:90:31:5e:f1:a3:e8:2e:af:7d:4e:43:5b:1a:6b:ef:bc:
06:cd:8c:91:72:ff:e7:08:27:b4:67:b8:2f:07:55:91:e1:e4:
f5:c6:09:0a:bc:6f:64:2f:7e:71:47:84:b5:19:5a:23:12:5a:
43:08:15:19:0b:33:fe:eb:1a:97:96:c6:5f:e7:5f:b7:06:65:
f1:24:f5:22:b3:1a:f7:7d:4d:28:52:6b:82:c5:20:52:e1:87:
8e:ba:e3:61:be:86:e2:d7:6c:d7:bc:e3:aa:10:d5:e6:54:c3:
4c:89:83:5f:5c:3c:d7:0f:91:59:f3:0d:26:89:5b:67:c3:2e:
d1:67:ce:62:d3:47:d7:e2:32:5b:4c:d5:92:00:25:79:10:c4:
6c:3d:28:72:97:6a:7b:d1:97:f8:47:ae:96:af:98:cb:f9:9c:
03:9b:45:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:59:27 2025 by rpki-client