Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015/43e7b53f-d5a9-3d29-ab73-ad0d6a377820.roa
File: 43e7b53f-d5a9-3d29-ab73-ad0d6a377820.roa (raw, json)
Hash identifier: JVXjt/jmdM9hTjngvolOE4GGthPENxE63scw5OZy+8o=
Subject key identifier: C9:70:B8:D8:38:46:3D:28:FA:A0:2C:0C:45:4E:0B:18:8E:BE:67:0F
Certificate issuer: /CN=44dfb2c2-6b0e-4f2c-956d-497df0881015
Certificate serial: 010D0C9F43285848159FE32109A302044FB70400
Authority key identifier: AC:A8:C2:A7:76:8D:C6:BC:D8:B5:7F:0C:F0:FA:BA:89:43:A8:D8:35
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015/43e7b53f-d5a9-3d29-ab73-ad0d6a377820.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 14618
IP address blocks: 74.123.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:9f:e3:21:09:a3:02:04:4f:b7:04:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44dfb2c2-6b0e-4f2c-956d-497df0881015
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=5ca2d2af-e509-499e-9eb6-5e8e77c03467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d2:f8:17:68:e2:b0:35:90:9e:ee:5a:75:09:
29:06:ef:4c:f5:f7:a7:8c:43:44:34:87:50:3f:d8:
20:8a:cc:14:b7:f8:80:dc:c9:16:ba:b9:a1:60:2e:
44:4e:06:7a:24:b3:19:1e:01:ba:85:3a:06:ec:c8:
ed:34:2b:ef:13:7f:30:9d:59:4d:bb:ea:65:88:cc:
72:8a:c3:52:52:46:31:ef:84:4f:a9:ea:37:c7:26:
1f:3b:51:f6:7e:e0:7a:e9:50:ee:ea:74:db:de:37:
4d:cc:95:97:97:0b:60:93:c9:e5:5e:a7:fd:9a:e5:
11:46:f2:b3:86:c5:1f:12:07:c7:4a:3c:2a:a3:cb:
07:a9:69:3a:47:79:76:d9:fa:02:c4:07:2e:da:0f:
dd:eb:86:ba:ff:4e:4a:40:51:f2:83:7b:94:c2:41:
64:16:88:14:76:0e:e8:cf:a1:b2:75:44:7a:e6:a8:
5b:1a:96:52:b0:f0:78:1f:e2:9d:05:7b:25:96:38:
a4:c3:b4:e7:5d:e4:bf:f4:5d:7b:69:74:1b:98:72:
59:e2:80:2e:fc:70:05:4c:67:0c:39:08:54:7b:ec:
6c:a7:15:56:32:a5:23:77:47:11:05:2b:27:f7:f9:
71:ce:13:25:dc:21:de:07:44:a3:b9:19:35:1b:55:
bf:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:70:B8:D8:38:46:3D:28:FA:A0:2C:0C:45:4E:0B:18:8E:BE:67:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015/43e7b53f-d5a9-3d29-ab73-ad0d6a377820.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015/44dfb2c2-6b0e-4f2c-956d-497df0881015.crl
X509v3 Authority Key Identifier:
keyid:AC:A8:C2:A7:76:8D:C6:BC:D8:B5:7F:0C:F0:FA:BA:89:43:A8:D8:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015.cer
sbgp-ipAddrBlock: critical
IPv4:
74.123.145.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:57:a3:bd:63:3d:a1:b6:13:eb:99:ba:68:1d:12:6e:28:ee:
8c:92:2d:d6:bd:3d:db:e1:cb:fd:8a:22:cd:d8:66:27:6f:dc:
6b:37:0e:c8:1c:8d:2d:df:73:d0:01:c2:9f:c6:21:a9:48:57:
87:69:9c:76:f5:a1:b6:c6:1f:28:ce:0f:fd:d4:1c:ad:1e:d9:
43:ab:7b:c1:b9:ce:fc:13:ff:8b:44:a8:f6:4d:0b:e9:ca:fb:
d4:6a:f0:a5:9f:89:94:14:0e:b9:e8:0f:bf:a6:e7:58:cf:65:
db:72:dc:0b:96:f0:a1:e7:74:02:01:83:71:a9:48:73:3f:1b:
49:a3:85:8c:01:1f:a9:18:e4:75:00:4d:36:4a:ec:34:23:b7:
86:0d:47:86:c6:3f:a6:eb:37:52:35:ef:0e:f7:49:93:4a:71:
e0:ed:0d:37:6b:67:c1:a1:c8:46:b2:87:6b:72:04:29:18:a7:
c7:c8:d3:aa:c2:05:64:65:c4:89:ad:6e:55:72:50:16:4f:5b:
54:2f:48:dd:98:84:7c:37:e8:2c:ca:44:27:12:66:49:a4:e0:
97:38:5e:ea:00:83:00:e1:b8:b1:19:ae:6f:a9:8c:78:74:0c:
52:a0:a4:a4:95:d9:45:bd:a3:1e:9a:59:32:46:6e:24:ed:d3:
51:5e:f7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:42:30 2025 by rpki-client