Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/17ffddb4-f9f8-380b-a246-0aaa5b4c00f3.roa
File: 17ffddb4-f9f8-380b-a246-0aaa5b4c00f3.roa (raw, json)
Hash identifier: nTPQK+fPue5v6reI8xzp+R1thH6BvCWqoX1SvmDAPHs=
Subject key identifier: 99:56:1A:9A:91:44:F2:D0:ED:DF:99:97:E9:53:F5:C7:DC:6C:31:15
Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Certificate serial: 010D0C9F4328584875F0556E180BD0AFF66EA4A0
Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/17ffddb4-f9f8-380b-a246-0aaa5b4c00f3.roa
Signing time: Tue 07 Jan 2025 02:00:39 +0000
ROA not before: Tue 07 Jan 2025 02:00:39 +0000
ROA not after: Mon 07 Apr 2025 01:00:39 +0000
asID: 4540
IP address blocks: 74.221.16.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:75:f0:55:6e:18:0b:d0:af:f6:6e:a4:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Validity
Not Before: Jan 7 02:00:39 2025 GMT
Not After : Apr 7 01:00:39 2025 GMT
Subject: CN=0f44117c-b7c3-428c-a142-f63cebb7ae08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:ad:46:96:ca:74:7a:7f:42:27:c5:7f:68:44:
47:8f:e9:d0:07:d5:8f:4d:59:75:ce:a8:55:3d:79:
62:ac:46:47:02:6c:57:cb:c5:33:65:d0:18:4d:0f:
82:6b:21:aa:0e:76:d9:43:4b:76:2e:13:ce:12:6c:
ef:63:66:25:e1:cf:16:5a:16:b2:92:72:5a:d6:cd:
57:6e:f5:a0:0d:6e:53:04:8f:fe:05:c6:98:3c:2c:
3d:b9:55:a2:22:d7:38:be:ca:63:03:0b:b6:27:7f:
99:fb:ad:9e:18:81:82:a2:ff:be:4d:65:3d:16:c8:
7c:a0:bd:61:d3:9e:50:38:3b:64:58:7b:bf:d5:da:
d3:5f:3d:6d:b1:5b:08:dd:84:0c:40:05:c0:a0:b7:
ef:14:12:a4:68:f6:2e:6e:d8:e9:9c:0e:e1:55:5b:
29:f3:0a:eb:bd:ec:70:e4:38:59:63:aa:6a:07:3a:
68:02:97:c6:27:a4:b2:93:17:72:e4:d5:d2:e8:66:
29:d6:c1:e7:1d:fa:49:9f:c3:06:41:18:83:b6:f1:
3a:07:14:66:77:50:c8:2c:f5:32:8b:44:f4:98:cf:
f0:10:69:4d:1e:79:8c:5d:42:68:06:96:05:c7:a3:
d1:b4:7c:af:a0:76:e0:72:f8:a1:ce:f2:19:92:b2:
36:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:56:1A:9A:91:44:F2:D0:ED:DF:99:97:E9:53:F5:C7:DC:6C:31:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/17ffddb4-f9f8-380b-a246-0aaa5b4c00f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl
X509v3 Authority Key Identifier:
keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
sbgp-ipAddrBlock: critical
IPv4:
74.221.16.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:f6:a8:bd:76:79:70:62:2a:4c:4a:6e:24:45:de:59:99:54:
73:0f:84:5c:df:6c:36:ad:ec:c1:c9:20:5c:c5:58:18:44:b3:
9b:dd:d5:6a:b8:eb:85:8b:a2:00:ab:b2:33:30:41:2d:c7:b6:
0e:b6:a7:29:0c:1a:b5:87:7c:67:dd:30:c8:03:5c:06:27:70:
21:92:93:cc:98:4e:6d:b9:a7:ce:34:21:3f:72:da:e8:6b:81:
e0:35:4e:46:ad:d8:75:a3:be:62:60:f0:c6:ce:2d:84:5d:fa:
e5:ec:cd:ba:21:7a:70:49:64:6a:27:34:62:a4:b4:6d:4c:0d:
d7:d3:af:17:c3:fc:38:bf:36:d1:5e:bf:b0:c4:a7:4f:17:82:
79:26:8f:e0:12:f6:2a:6a:1f:e8:14:f9:cd:19:d0:82:4a:f8:
76:1a:a0:fa:d1:c9:a9:7d:ea:e7:5d:4c:3c:63:24:c6:6c:00:
3a:46:57:df:98:33:e6:90:d4:2a:70:a4:55:fa:10:1e:64:3e:
1e:cb:05:43:8c:7a:0d:96:e9:6b:f2:74:cf:11:fe:e7:b5:76:
6f:79:db:d0:68:d6:ef:fa:2f:a1:df:d1:ef:25:de:49:2e:10:
6a:7d:bf:d0:06:03:99:62:f9:62:9e:fe:30:9b:07:8f:a3:56:
d5:30:75:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:47:52 2025 by rpki-client