Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/560494a5-3dff-416d-b8a7-cf5cad5f05f6/59a8a64f-08aa-3759-bc61-2e2185fe4e49.roa
File: 59a8a64f-08aa-3759-bc61-2e2185fe4e49.roa (raw, json)
Hash identifier: j4e7rkFrigaRQoIfX8RscXxrgaWkSGj2X8c7VBwR4Bg=
Subject key identifier: D2:FE:A2:F6:0A:B6:11:9B:C8:00:4E:CD:DA:73:29:74:A0:B3:89:88
Certificate issuer: /CN=560494a5-3dff-416d-b8a7-cf5cad5f05f6
Certificate serial: 010D0C9F432858489E6B6F43D2F29D275EBD9400
Authority key identifier: 56:98:2D:5F:6F:FD:A8:FB:6C:BE:31:3F:18:06:D8:43:1B:C7:A8:B5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/560494a5-3dff-416d-b8a7-cf5cad5f05f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/560494a5-3dff-416d-b8a7-cf5cad5f05f6/59a8a64f-08aa-3759-bc61-2e2185fe4e49.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 53309
IP address blocks: 74.116.252.0/24 maxlen: 24
74.116.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6b:6f:43:d2:f2:9d:27:5e:bd:94:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=560494a5-3dff-416d-b8a7-cf5cad5f05f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=373fef4c-4c7e-4fa1-8e3d-d2a8614a9b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e1:86:db:f7:9a:08:ff:e8:1e:4a:94:7b:75:
0a:81:04:d2:36:d2:41:e7:71:6a:cd:4c:5e:18:4f:
fb:ea:fa:a5:b2:de:8a:89:ee:c5:02:83:ec:99:1d:
33:df:32:a6:da:69:07:01:0b:bc:dd:d6:1e:7a:6a:
68:b5:db:f9:b4:d1:4e:7d:3e:c9:4e:84:dd:07:cd:
9c:d0:c1:ae:1a:68:e5:41:2b:b6:37:de:dd:14:a7:
ec:6d:c9:26:44:a8:4a:8e:ab:69:cf:72:a6:d3:2b:
f2:3d:7b:45:a7:b2:f0:9d:d8:dd:12:7e:ee:93:e5:
56:5f:56:87:cb:ac:42:99:c5:b4:f2:1a:da:97:d0:
73:be:de:07:07:ae:dd:a8:4e:a7:ff:5b:12:6a:65:
4c:21:e1:8f:37:d6:4a:5a:4f:2c:a8:27:ee:1e:82:
10:ac:b7:c1:f7:e6:c9:a6:d8:30:d7:73:0b:48:32:
57:96:14:05:79:11:99:e1:f6:93:75:45:05:1b:44:
b9:fc:36:67:3f:a1:2f:c1:81:06:b9:76:89:70:80:
b1:d9:4a:14:40:21:a6:73:f0:b0:0d:67:1c:c1:1d:
8e:ad:e7:8c:90:bf:f8:43:20:ef:42:0b:6f:80:73:
f4:4b:74:5e:25:97:1f:c9:cb:82:6c:f9:d6:86:c5:
b2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:FE:A2:F6:0A:B6:11:9B:C8:00:4E:CD:DA:73:29:74:A0:B3:89:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/560494a5-3dff-416d-b8a7-cf5cad5f05f6/59a8a64f-08aa-3759-bc61-2e2185fe4e49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/560494a5-3dff-416d-b8a7-cf5cad5f05f6/560494a5-3dff-416d-b8a7-cf5cad5f05f6.crl
X509v3 Authority Key Identifier:
keyid:56:98:2D:5F:6F:FD:A8:FB:6C:BE:31:3F:18:06:D8:43:1B:C7:A8:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/560494a5-3dff-416d-b8a7-cf5cad5f05f6.cer
sbgp-ipAddrBlock: critical
IPv4:
74.116.252.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:7c:f1:44:a3:30:ae:50:b7:7e:18:0c:fe:d6:d1:70:8c:bc:
23:81:cd:6b:0e:ec:1d:00:4a:c1:a6:77:39:f5:8d:cb:76:d6:
04:a9:1a:40:d7:91:a2:8a:e8:38:39:a5:91:f0:ae:cb:22:d3:
04:cc:94:fe:54:b1:1c:46:7f:af:55:52:fa:84:11:23:a6:79:
6e:59:31:18:2e:dd:ab:eb:73:45:ca:d1:e9:78:52:8e:f3:f8:
b6:29:5a:d1:28:42:5a:eb:3f:ca:68:34:f9:c1:40:16:5a:57:
04:3c:e3:b6:53:12:d3:ab:b8:5e:a3:d0:af:63:3b:1e:a8:7c:
ba:29:02:c5:8b:3c:b4:15:82:6a:6d:4b:c5:aa:14:2d:13:ce:
b4:22:4d:c2:67:48:48:a2:41:cb:93:7a:0a:4b:10:dc:2f:30:
a7:ff:24:77:f4:0d:2b:c5:e1:fb:18:24:dc:20:57:6b:80:a9:
e2:0c:7d:74:82:0e:00:97:c7:fc:cf:41:80:1e:35:c3:ea:fe:
66:ee:4f:38:58:4a:c2:9a:c3:33:60:d4:46:c4:7c:2d:7e:76:
e9:ee:98:40:6e:ae:32:8d:5e:fa:65:54:aa:77:5f:05:3d:b3:
e9:f0:80:88:ba:63:48:f1:75:54:36:94:ba:e8:15:ac:cc:54:
17:12:dd:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:33:13 2025 by rpki-client