Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/5353635b-bf0d-33da-9876-6f3bcd648b22.roa
File: 5353635b-bf0d-33da-9876-6f3bcd648b22.roa (raw, json)
Hash identifier: 6kcNABgtXydgLarN09M14Av69e7gl4Ff6yA4CAKygy8=
Subject key identifier: 24:79:5C:67:44:6A:EE:3E:3B:05:A0:20:0A:62:78:14:C1:B0:8C:32
Certificate issuer: /CN=ebb739b8-a0ed-4449-8c62-99ff6b94b1c3
Certificate serial: 010D0C9F432858480645058FFE0C4DECF3713600
Authority key identifier: EE:FE:6D:FB:B0:55:03:BC:DA:B3:01:9A:91:11:03:C2:E7:54:DB:63
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/5353635b-bf0d-33da-9876-6f3bcd648b22.roa
Signing time: Thu 28 Nov 2024 02:00:38 +0000
ROA not before: Thu 28 Nov 2024 02:00:38 +0000
ROA not after: Wed 26 Feb 2025 02:00:38 +0000
asID: 19528
IP address blocks: 74.209.174.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:06:45:05:8f:fe:0c:4d:ec:f3:71:36:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb739b8-a0ed-4449-8c62-99ff6b94b1c3
Validity
Not Before: Nov 28 02:00:38 2024 GMT
Not After : Feb 26 02:00:38 2025 GMT
Subject: CN=ba3756a9-67cb-4655-9d1b-d0843ef3ff6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:64:9e:f6:0a:e2:a1:e1:4c:cd:f6:cd:54:e5:
05:3f:36:13:cb:23:13:0b:95:bf:b6:0d:ff:c2:23:
53:dc:8f:13:01:70:04:c8:a3:77:e9:69:21:c7:b8:
0e:b8:bd:d7:18:7d:31:e3:d2:e4:c4:80:aa:25:f4:
9f:3b:8b:0d:ec:45:c0:bb:3a:3e:08:8a:96:71:b2:
12:3c:85:46:de:5a:3b:47:9b:8b:14:ff:64:d2:ea:
e0:ec:24:7e:b8:a3:2e:44:58:2e:33:fc:47:7d:7d:
26:06:75:b5:5e:82:59:21:77:ff:56:68:3d:52:6d:
70:31:9d:b3:fc:5d:58:d3:f3:03:89:52:0d:5a:fd:
46:ed:37:be:a6:d8:0d:4a:b1:9c:94:78:34:7d:ee:
ee:22:2f:a4:a3:64:49:76:fc:80:56:a2:8f:a8:24:
84:84:25:94:a6:5f:b3:3d:d9:5e:10:c1:4f:d1:41:
c4:db:2e:cf:1a:c4:e1:ff:79:cb:38:7d:c7:2a:d9:
d6:a7:2f:90:ec:46:44:f2:99:65:ba:49:6a:9f:60:
bb:b0:cf:35:fd:ff:c1:57:35:79:b2:77:d1:fb:07:
f1:9d:b8:9e:9e:d0:6b:4d:4a:f5:bc:90:93:30:fb:
0c:28:6a:86:2f:26:2b:ea:71:61:23:c4:46:6e:64:
84:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:79:5C:67:44:6A:EE:3E:3B:05:A0:20:0A:62:78:14:C1:B0:8C:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/5353635b-bf0d-33da-9876-6f3bcd648b22.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.crl
X509v3 Authority Key Identifier:
keyid:EE:FE:6D:FB:B0:55:03:BC:DA:B3:01:9A:91:11:03:C2:E7:54:DB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.cer
sbgp-ipAddrBlock: critical
IPv4:
74.209.174.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:69:7e:7e:47:a1:6f:06:19:69:b6:48:11:e0:f5:19:5d:e7:
6f:5c:08:9a:4e:0e:7e:50:41:e2:44:09:25:dc:71:00:81:2c:
54:8a:70:2b:89:01:b5:0b:ef:3c:9f:7a:31:2f:2f:f9:8f:f3:
06:26:cb:61:10:d8:20:c0:e8:c7:33:1c:7e:ba:27:9f:1d:82:
da:f5:7e:e2:f0:3a:74:b0:c0:a5:6e:13:02:9b:7c:bf:36:5b:
93:98:4c:45:be:e4:8a:23:1a:86:7a:cd:70:3e:9e:75:67:5d:
f1:00:c4:52:6a:f0:2d:c5:e3:c6:b1:31:c2:98:01:e2:cb:81:
dd:1d:b4:d7:84:a2:0e:8f:46:a9:f8:53:a3:ab:e0:13:a0:85:
28:ca:93:b8:0a:6b:f8:53:b5:51:29:72:ea:0c:d1:03:86:8b:
d0:6f:3f:d2:64:a2:5d:1e:16:94:e8:2e:e5:2b:1b:d1:6b:02:
64:02:62:d4:78:e1:1e:34:08:6f:83:8a:db:d6:43:bf:3d:20:
cf:69:43:54:dc:53:cb:73:85:5c:e1:ee:ad:4e:28:fe:f5:62:
40:bf:a8:a2:e7:90:4d:92:62:e0:33:52:39:63:3d:31:2f:21:
bf:a8:e0:d9:75:77:f3:e6:df:ab:1b:7f:87:ae:5b:66:26:13:
45:64:ee:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:29:37 2025 by rpki-client