Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/0ceb1403-3b7c-379d-b030-7fd9c941239b.roa
File: 0ceb1403-3b7c-379d-b030-7fd9c941239b.roa (raw, json)
Hash identifier: Roc00ekHzGsK9uw+cEIXcMGgRQ4yL433gjtG2Xh/YFI=
Subject key identifier: B2:B2:52:40:D0:B2:0D:81:2E:2A:DC:72:C1:3D:66:B2:29:EA:8A:03
Certificate issuer: /CN=df1c4d20-5b5b-4073-83b7-529a82c159fd
Certificate serial: 010D0C9F43285848424AD36679413BBD57FF6C00
Authority key identifier: 36:BC:34:2B:29:CC:F9:16:AB:22:57:A6:43:73:73:7A:68:59:EB:57
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/0ceb1403-3b7c-379d-b030-7fd9c941239b.roa
Signing time: Thu 19 Dec 2024 14:00:52 +0000
ROA not before: Thu 19 Dec 2024 14:00:52 +0000
ROA not after: Wed 19 Mar 2025 13:00:52 +0000
asID: 14618
IP address blocks: 74.200.119.0/24 maxlen: 24
74.200.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:4a:d3:66:79:41:3b:bd:57:ff:6c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df1c4d20-5b5b-4073-83b7-529a82c159fd
Validity
Not Before: Dec 19 14:00:52 2024 GMT
Not After : Mar 19 13:00:52 2025 GMT
Subject: CN=997f6939-588d-4848-81d5-c8d443d940fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b4:ac:39:48:24:a2:9f:d7:a0:aa:bf:b7:12:
40:54:89:84:5b:cf:75:76:a3:c0:e2:71:d1:a2:3f:
44:0a:c2:8a:0c:77:4b:9f:95:8b:07:d9:32:07:39:
69:ea:9f:3b:07:de:02:1d:18:89:9f:9d:97:d9:85:
14:c6:26:03:7f:21:56:09:e9:c6:92:8d:d0:72:2a:
be:17:97:60:f1:65:03:61:b1:4e:a7:b6:a3:98:9c:
b4:39:6e:37:58:af:9d:33:49:e0:ef:3c:24:5c:e4:
9e:ce:7d:7c:24:e5:e7:48:ec:8b:be:52:d9:71:98:
ac:9f:67:f6:cf:c7:ef:6f:43:30:e0:23:13:ea:00:
1f:a8:6d:cd:04:ef:ee:90:42:4a:37:08:40:e6:63:
25:59:9a:dc:76:58:8c:83:ec:c8:ac:d1:13:f4:07:
f6:5c:6a:3c:4b:93:36:bd:64:98:3c:2f:3f:b6:92:
2c:82:df:08:e4:98:b4:33:0b:54:55:68:47:c2:7a:
95:42:6d:46:70:07:be:50:be:b3:d6:7b:f1:92:91:
20:e8:6c:7e:a9:5e:30:3b:1b:2d:a5:74:26:f6:0a:
9b:31:d1:1b:19:6a:52:55:89:72:73:0f:5e:46:b8:
c0:b7:3c:70:3f:48:c5:c2:ba:3a:e2:f1:f4:29:a8:
f8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B2:52:40:D0:B2:0D:81:2E:2A:DC:72:C1:3D:66:B2:29:EA:8A:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/0ceb1403-3b7c-379d-b030-7fd9c941239b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/df1c4d20-5b5b-4073-83b7-529a82c159fd.crl
X509v3 Authority Key Identifier:
keyid:36:BC:34:2B:29:CC:F9:16:AB:22:57:A6:43:73:73:7A:68:59:EB:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd.cer
sbgp-ipAddrBlock: critical
IPv4:
74.200.119.0-74.200.120.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:45:d6:5a:a4:3c:05:19:b6:cc:1d:26:c2:e1:97:09:80:a9:
f8:ca:d5:e0:53:94:52:28:07:d3:4a:ff:6e:62:af:82:aa:d8:
41:5d:c3:26:ab:04:96:0a:0d:88:4d:2d:fd:be:d2:b8:42:67:
2a:ad:08:3c:72:bf:7a:d3:c2:57:3b:bb:24:0d:13:5d:1c:cb:
45:1f:03:cc:60:6a:59:d3:33:22:d3:fc:27:f2:be:69:e0:d0:
2c:be:0c:61:ec:35:04:4e:a8:b3:7b:12:50:bb:86:f4:1a:8b:
d7:26:88:95:7a:07:45:e6:2f:f6:dd:5e:3f:38:80:50:87:75:
a3:02:f7:d5:d5:46:fa:dc:cd:41:bf:3f:43:32:b4:ec:a7:c2:
bb:c2:f3:d6:6f:cb:ac:5e:cd:27:8b:20:e3:59:fc:09:82:aa:
f5:d9:a1:bc:bc:24:f1:c9:aa:fa:4f:3c:93:58:43:76:33:9f:
07:18:98:3a:df:54:6c:29:b5:b8:bb:f3:93:56:30:a4:ad:5f:
5d:60:46:f2:d8:6c:fd:3b:14:a9:30:c4:ea:60:7e:d8:dd:38:
a7:68:91:0e:7f:9a:dd:01:68:99:6a:af:af:0c:a7:a4:9b:8f:
1e:34:0e:90:d5:41:e9:61:42:87:2c:7d:d7:6a:e5:c7:09:6a:
71:cd:61:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:43:50 2025 by rpki-client