Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/c7638a2d-de94-31cd-8168-33b5ac54fb2b.roa
File: c7638a2d-de94-31cd-8168-33b5ac54fb2b.roa (raw, json)
Hash identifier: cGTSBF1/oIUzARw2O70n+q2IAool6CJWytmo6OOzDSA=
Subject key identifier: BB:0D:28:79:55:EE:73:0C:C9:64:10:23:EE:5A:A4:31:97:A4:49:48
Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Certificate serial: 010D0C9F4328584875F0550C8C2D3B58A3E3D400
Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/c7638a2d-de94-31cd-8168-33b5ac54fb2b.roa
Signing time: Tue 07 Jan 2025 02:00:39 +0000
ROA not before: Tue 07 Jan 2025 02:00:39 +0000
ROA not after: Mon 07 Apr 2025 01:00:39 +0000
asID: 4540
IP address blocks: 74.116.112.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:75:f0:55:0c:8c:2d:3b:58:a3:e3:d4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Validity
Not Before: Jan 7 02:00:39 2025 GMT
Not After : Apr 7 01:00:39 2025 GMT
Subject: CN=76be3896-44dd-45f6-955e-45866af29f75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:45:1f:5e:4a:91:27:df:51:99:15:69:10:a8:
ba:52:01:67:47:1b:a1:fc:65:74:c5:89:02:20:05:
d2:75:65:8c:d9:85:81:e7:a0:b0:79:8a:bd:9f:c4:
60:93:cd:44:04:3e:5d:b1:42:62:f4:aa:23:e7:83:
00:ad:5d:06:94:9f:71:57:36:37:ff:dc:b0:35:92:
21:05:78:0d:89:79:0f:d7:1c:86:d6:49:ac:78:af:
4d:dd:f7:7e:45:b4:4e:c8:c2:d6:91:23:b1:44:37:
f6:9d:f2:95:23:c5:1e:ba:64:31:0f:84:8e:d0:02:
ef:27:02:e9:19:7c:28:3f:e8:75:76:58:85:1a:c9:
37:5b:46:e9:5e:61:10:0e:a4:5b:b3:66:75:1a:30:
a4:7b:cc:c1:44:49:71:21:a1:5a:1c:10:ac:d3:0e:
dc:fc:0b:65:e9:1b:88:66:04:b3:5d:53:36:27:71:
a7:45:ad:4a:ef:7c:60:a3:f1:93:7e:3c:fd:a2:eb:
8d:8b:d8:1e:30:6e:4b:a9:12:3c:97:d8:2f:98:e6:
e1:8d:f0:3f:19:af:f3:7f:1a:d4:15:29:3f:2d:ce:
71:81:5b:21:d9:8a:6d:93:68:09:6e:ce:46:e8:e9:
3e:fa:02:d5:49:49:f5:e3:08:1a:9b:38:e4:a8:2e:
33:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:0D:28:79:55:EE:73:0C:C9:64:10:23:EE:5A:A4:31:97:A4:49:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/c7638a2d-de94-31cd-8168-33b5ac54fb2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl
X509v3 Authority Key Identifier:
keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
sbgp-ipAddrBlock: critical
IPv4:
74.116.112.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:be:93:8d:4b:22:f8:96:8f:3e:dc:71:14:9d:5d:82:b5:a3:
35:8f:9e:b0:ae:2d:32:fe:c2:93:10:11:bc:5a:6d:78:d2:29:
d6:db:6a:bb:99:ed:76:89:62:ae:3b:d6:63:b9:ef:55:1d:87:
c1:5c:d1:93:16:50:3d:95:97:0f:f9:74:89:3a:43:e3:9d:4d:
1a:82:42:af:86:a9:5e:bd:2d:58:17:e6:dd:98:7f:8c:00:38:
a7:f0:ab:fd:2b:ee:29:68:c0:b3:e2:6f:85:f5:42:94:e1:86:
72:1f:ab:20:1c:47:36:30:57:ed:46:11:cc:c4:45:17:1e:93:
55:15:e9:2d:11:0d:04:88:52:ff:9a:cf:72:fb:6c:65:a2:88:
64:53:4b:94:6b:f8:74:07:3b:56:0a:f0:19:2e:b0:4c:aa:72:
c1:d4:08:6e:cc:74:04:ac:0e:57:e1:57:4d:79:b8:4e:76:4c:
b7:72:e6:d1:bd:d0:a8:9c:e6:23:40:57:3b:92:bb:cf:e1:9e:
bd:48:2d:31:b5:50:9b:9f:fb:43:fb:fc:89:94:30:57:5d:ca:
03:5a:d6:d6:68:5e:22:03:30:8d:f0:3a:c1:20:be:b2:ae:66:
02:6c:f7:4b:58:12:d7:db:b4:9b:7f:7f:5a:f2:e6:cf:2b:d6:
87:9e:51:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:32:27 2025 by rpki-client