Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7e28c4d6-fcb7-3244-adde-798e094a2d8e.roa
File: 7e28c4d6-fcb7-3244-adde-798e094a2d8e.roa (raw, json)
Hash identifier: yr+xmz+QUmxlXC6byID3XjoAdUckhrt1/oNmDaSNte8=
Subject key identifier: D5:BF:9C:B7:C8:58:B1:4D:4A:CD:56:91:DC:22:97:71:39:39:14:3C
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847F15518B0EAD5D96313604410
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7e28c4d6-fcb7-3244-adde-798e094a2d8e.roa
Signing time: Wed 20 Nov 2024 14:00:52 +0000
ROA not before: Wed 20 Nov 2024 14:00:52 +0000
ROA not after: Tue 18 Feb 2025 14:00:52 +0000
asID: 54682
IP address blocks: 74.8.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f1:55:18:b0:ea:d5:d9:63:13:60:44:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 20 14:00:52 2024 GMT
Not After : Feb 18 14:00:52 2025 GMT
Subject: CN=570ae1d7-9ac1-40a2-829f-6069326b8482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:60:1f:f4:06:b5:d6:bc:50:72:b6:8f:ff:a2:
3c:6c:6f:4e:83:64:73:e6:96:a3:21:5c:e0:ae:92:
b2:c2:1b:f6:88:48:bd:6a:78:b7:83:49:16:45:c1:
8c:0e:04:ef:56:c2:d0:eb:cf:ed:d5:c6:6d:61:ae:
25:37:fa:b3:39:bc:01:25:b1:4a:4b:6e:d1:8b:52:
00:a0:7b:03:63:61:23:68:da:0e:c6:8e:b7:b1:27:
79:28:6d:89:74:ce:e8:40:17:d4:ed:72:aa:d5:b0:
a8:9c:d1:ec:56:48:ff:03:09:b7:9f:f9:95:ee:b1:
8d:4d:3c:f8:1a:a4:6c:e6:7a:d6:57:c2:dd:39:03:
22:72:23:a5:25:f3:35:5c:c0:1b:dc:e5:ea:90:b9:
b4:b9:cf:82:0d:8d:1d:8c:7e:f7:0c:3d:8c:01:ab:
0a:ec:6d:27:58:00:5c:c5:31:65:53:95:2f:b8:07:
91:b2:02:b5:29:23:54:2a:5b:8c:a4:81:a6:74:2d:
fe:2b:93:a1:60:bf:d6:d2:8a:91:6f:71:95:31:b2:
a4:54:cb:cf:d9:67:14:b1:3c:46:4f:1a:6e:ae:e5:
a0:73:25:6a:19:3c:e3:b3:0c:03:76:7d:18:25:0f:
64:10:74:e3:ac:35:1c:2a:18:33:e0:70:f8:c5:98:
2d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:BF:9C:B7:C8:58:B1:4D:4A:CD:56:91:DC:22:97:71:39:39:14:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7e28c4d6-fcb7-3244-adde-798e094a2d8e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
74.8.209.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:ac:af:f5:d2:81:97:6f:e5:96:ce:ac:4c:c7:78:8f:0d:4a:
d3:b7:eb:6d:5d:ac:b0:2c:3c:b3:89:6b:8e:bc:fb:0f:06:59:
ac:1d:10:14:ac:f1:de:59:29:50:82:7d:86:47:8c:07:0d:b8:
e1:af:82:52:ec:f5:e9:cf:c9:39:8e:9c:56:e1:27:c4:e4:b6:
f5:56:a5:58:f4:9f:60:4c:43:5d:31:da:78:56:0a:58:a8:58:
60:d5:81:1a:d3:3e:c5:cb:87:65:8b:bc:1a:b4:6e:eb:15:68:
04:a2:ee:38:8a:27:44:bf:41:0c:56:9d:01:0c:9f:91:cb:8c:
3c:91:c6:48:c3:37:53:cb:80:60:b7:e6:5d:e0:d6:d1:c7:8f:
ca:d5:c9:ac:54:b7:af:33:d5:6c:03:b9:1c:25:22:4a:aa:a7:
f2:e3:ce:e1:7f:f0:f3:ef:e9:3a:38:9e:28:81:c8:8e:ad:ca:
85:b0:c6:f4:64:57:74:91:a6:b5:4e:a4:f8:a8:e0:5c:a4:31:
33:04:c9:67:74:dc:54:0d:fd:42:8c:7e:92:a3:d3:c4:f8:ac:
68:7c:ba:13:c2:4c:ee:7f:ae:36:5f:1a:fa:5f:90:02:2f:f4:
46:69:92:96:f1:2e:e6:ff:f9:2d:31:34:cf:80:56:08:6a:ba:
9d:79:ec:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:23:27 2025 by rpki-client