Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a742e57e-7b69-32d5-aa25-66a29c33b04c.roa
File: a742e57e-7b69-32d5-aa25-66a29c33b04c.roa (raw, json)
Hash identifier: poL2m2R7bB5SKS8xpljPF27FfJRkdegAZkpEkclg6BU=
Subject key identifier: 1D:57:1D:A9:17:03:91:FF:3D:5E:0E:65:88:60:46:5E:16:02:3E:04
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F432858480245A8C9111516250BDEDAA0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a742e57e-7b69-32d5-aa25-66a29c33b04c.roa
Signing time: Tue 26 Nov 2024 15:38:52 +0000
ROA not before: Tue 26 Nov 2024 15:38:52 +0000
ROA not after: Mon 24 Feb 2025 15:38:52 +0000
asID: 33490
IP address blocks: 74.49.229.0/24 maxlen: 24
74.49.241.0/24 maxlen: 24
74.49.243.0/24 maxlen: 24
74.49.245.0/24 maxlen: 24
74.49.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:02:45:a8:c9:11:15:16:25:0b:de:da:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Nov 26 15:38:52 2024 GMT
Not After : Feb 24 15:38:52 2025 GMT
Subject: CN=71226f91-dd6f-4ac1-83e6-9aa4ef63a270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a7:47:24:c8:15:a1:e7:4b:85:d4:90:5d:db:
86:51:1d:9a:bf:12:ed:40:f3:35:c9:4f:9f:53:6d:
fb:d6:31:a8:db:6d:9c:b5:b6:0e:cb:56:ea:6e:67:
c1:6f:ca:03:1c:95:78:85:4d:66:76:65:e3:e6:93:
9e:43:a5:af:5b:bf:23:42:a6:19:59:60:bc:ff:92:
20:51:eb:01:69:2a:a4:29:4e:7f:4e:ef:85:16:11:
49:d2:2a:f9:8f:3e:5b:f8:5d:84:8a:0d:ab:2c:d2:
5d:03:d0:e8:b6:c9:a7:35:25:1b:f5:86:98:b9:b4:
db:db:38:30:dd:0a:3b:3e:4d:1a:a0:31:ff:7e:8d:
61:8e:f8:8a:cb:d3:cd:61:9e:b2:1b:1f:4f:b4:5e:
d3:55:ea:36:0d:f3:5c:8c:f7:e6:17:ee:8e:93:fc:
1a:5c:52:43:67:4f:1b:a2:fd:1f:3f:80:a4:97:41:
7b:c3:9d:32:5e:ba:2a:e7:d8:76:6a:b3:51:7b:af:
c1:16:bf:e8:dd:b6:0e:29:ae:73:62:65:6c:e7:8d:
e7:29:9f:d8:ed:fb:6d:b5:0e:21:04:d2:77:04:d5:
16:d2:32:78:88:c5:af:04:b7:60:0a:d4:ad:fa:f7:
58:13:53:ef:86:27:d6:e1:d6:d3:00:5d:c7:77:b2:
ca:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:57:1D:A9:17:03:91:FF:3D:5E:0E:65:88:60:46:5E:16:02:3E:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a742e57e-7b69-32d5-aa25-66a29c33b04c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
74.49.229.0/24
74.49.241.0/24
74.49.243.0/24
74.49.245.0/24
74.49.247.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:d1:23:6c:50:f1:f1:3b:13:66:d5:df:dc:e4:21:98:a0:87:
8d:cc:db:b6:92:7d:ec:34:6b:c3:68:e6:41:a5:e3:fe:58:ef:
37:72:13:81:3d:ce:42:7d:ec:86:12:02:91:6d:de:09:9b:f8:
44:ec:32:33:70:50:19:a4:52:ee:09:06:b0:01:23:16:b0:22:
1b:2b:60:db:ed:39:ca:5a:c8:dd:f4:7f:31:2b:16:74:17:9a:
bd:52:e7:91:41:4a:c0:74:09:c6:6e:f0:66:bd:73:72:b9:74:
d0:cc:36:a5:c0:8e:2b:08:39:cb:0b:6c:81:74:90:59:1d:80:
80:c4:42:ef:66:ac:f3:d3:fd:53:1c:ff:13:3e:5e:d2:61:62:
84:ed:f4:41:75:ed:a8:ca:ec:d6:5b:d9:bb:94:0c:31:11:5b:
c9:81:c9:65:c8:5f:bf:08:56:00:e0:d8:5b:5f:d9:ba:06:a8:
13:33:4c:f6:28:f8:92:a7:5f:6f:3c:07:31:11:ab:1d:e8:5c:
e5:d5:9e:41:af:57:a7:3e:b6:92:6f:ad:37:b4:6b:4d:8a:3e:
4a:79:82:21:87:ea:af:b9:a3:1b:21:9e:de:cf:76:bb:f3:18:
8f:ea:d7:c2:46:95:f2:2d:84:08:ff:59:12:27:a8:f6:62:f6:
6e:01:0c:3f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:18:49 2025 by rpki-client