Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/2a02523f-43fc-3f4b-94fb-1e7cf91db4a0.roa
File: 2a02523f-43fc-3f4b-94fb-1e7cf91db4a0.roa (raw, json)
Hash identifier: hmBhN/gA4MrDcNjnUi+Cx17+BrmCTStdbxGhP9DIXb4=
Subject key identifier: 9F:30:99:F3:1C:B3:73:71:14:CF:4E:DA:BC:FE:E6:07:7A:4D:72:BF
Certificate issuer: /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial: 010D0C9F43285848143A662FD7035A27552CCA80
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/2a02523f-43fc-3f4b-94fb-1e7cf91db4a0.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 8560
IP address blocks: 74.208.0.0/16 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:66:2f:d7:03:5a:27:55:2c:ca:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=435487d7-a22f-4b88-bc5b-60490cbc2a2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:06:4b:18:c8:d9:22:1b:d9:8a:75:e7:ac:3e:
c8:cf:83:9a:ca:da:5b:18:9d:39:0c:01:1e:50:64:
09:1f:dd:f0:dc:13:88:4c:2d:e4:ab:ec:64:22:eb:
f5:86:cf:fe:b0:6f:cf:37:25:b6:2f:19:00:83:4d:
4c:a1:e0:5d:e2:f1:17:4e:e1:4e:fb:5c:3b:16:31:
e2:47:7d:80:b5:06:47:ff:0c:5a:58:6c:47:4c:b8:
9e:3f:28:1a:98:a2:35:00:e3:70:52:6d:50:b6:6c:
6d:de:73:3c:a3:4f:4a:4e:01:86:80:e4:29:24:4b:
ac:9f:8f:4b:f2:cf:f4:05:5d:df:fd:7a:ae:57:62:
35:8d:10:d9:5d:b5:03:7c:81:58:6b:1f:36:ab:a2:
7b:cb:b5:23:62:d4:4b:ad:cd:38:c0:e8:2f:24:5b:
84:04:50:d8:78:d1:45:da:69:f9:00:0e:83:6e:39:
7a:4c:56:e5:68:5b:25:ae:5e:05:c7:8b:af:1d:2a:
1b:22:1e:69:d5:95:f0:71:b3:a4:94:ad:8e:d2:b9:
4b:93:f1:68:52:a2:fd:3c:5c:9d:ea:fa:49:14:50:
7b:b8:80:e7:3a:cc:75:81:ef:06:0b:79:d9:5a:32:
c3:e4:cd:0d:3e:1a:81:12:b6:91:02:b2:7c:68:41:
6e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:30:99:F3:1C:B3:73:71:14:CF:4E:DA:BC:FE:E6:07:7A:4D:72:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/2a02523f-43fc-3f4b-94fb-1e7cf91db4a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl
X509v3 Authority Key Identifier:
keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
sbgp-ipAddrBlock: critical
IPv4:
74.208.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:03:90:cc:a2:f4:5e:c6:cd:00:48:8f:b0:41:1c:f2:d3:04:
50:47:0a:d3:24:30:f1:36:97:d7:4c:a9:7c:b4:fc:2f:5e:cd:
5d:8c:3f:3f:e9:ce:39:0b:a1:1e:0b:ca:16:b8:3a:43:72:5b:
e8:f1:af:32:c7:b8:92:8e:97:ce:2b:51:39:5e:5f:fb:3b:2d:
c7:57:8f:cc:e5:e7:11:48:5d:94:66:5c:58:e0:33:d1:e4:f5:
b8:60:89:af:04:3e:90:28:6f:c5:6d:c4:cb:64:73:a7:03:76:
b5:5c:32:a3:cc:f9:47:2d:98:e4:73:fa:a0:07:4f:1d:16:c1:
9b:69:a2:53:7a:ba:cc:c5:c8:9a:a2:2d:d3:1e:6f:a6:64:8c:
58:8d:99:34:c2:42:a3:9f:0e:2b:d9:0a:9d:47:9d:a0:1e:36:
13:99:2a:1a:87:96:2f:08:da:0c:88:d3:9a:7c:82:a3:c9:5b:
6b:f0:f1:30:57:da:44:6c:d2:b6:01:cb:dc:d4:32:2c:c0:15:
2e:4d:6e:0a:5d:68:e4:f2:22:03:de:7f:73:e2:f7:c2:02:56:
e4:e8:b2:44:b8:96:3d:bb:ff:f5:92:4b:97:0d:5a:77:90:8f:
3f:fd:74:17:d3:c7:e4:8a:d1:71:31:91:65:3d:ce:07:f8:06:
07:a1:3e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:59:59 2025 by rpki-client