Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/d48f88ce-84b8-34c9-b77e-c19ac22e820e.roa
File: d48f88ce-84b8-34c9-b77e-c19ac22e820e.roa (raw, json)
Hash identifier: oxY3JTNRDncEIohCVG70zHVFxaFSwO68qlnTeeClQZM=
Subject key identifier: 16:E8:66:58:37:EC:84:A2:1F:6E:A5:48:05:85:20:03:C3:E9:45:09
Certificate issuer: /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e
Certificate serial: 010D0C9F43285848143A774F427ABD56FEDAF5A0
Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/d48f88ce-84b8-34c9-b77e-c19ac22e820e.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 25649
IP address blocks: 74.112.192.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:77:4f:42:7a:bd:56:fe:da:f5:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=77fb55b4-76e9-4d05-99ff-fc8778bd39a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a9:09:d3:89:8b:cd:65:69:d2:ab:24:4a:c0:
ee:ad:14:df:db:88:0f:08:7a:c2:d6:ed:82:5d:15:
3a:c3:6e:df:10:42:fe:76:ea:0e:0b:49:35:ea:2e:
24:15:44:28:07:8d:cd:61:89:7a:b3:b2:6c:92:2e:
68:d3:b7:de:7e:a1:1c:d6:51:f3:07:77:b2:99:80:
9f:52:17:47:02:3d:42:06:79:bc:f2:ea:c4:81:cc:
0a:d0:46:78:77:f1:ca:d7:b3:0e:86:4e:90:0c:08:
cc:fb:37:9c:a0:a3:b5:73:c9:81:43:6b:f7:5d:62:
3b:3b:b0:6a:3c:80:8e:db:c5:bb:b2:81:19:7e:eb:
71:aa:b8:09:a9:4f:6e:4b:61:b9:93:16:c0:18:f3:
86:46:d5:bd:91:89:43:be:e8:7d:5d:ee:6e:f9:7d:
6f:e1:92:df:4e:62:f5:62:b2:60:68:9f:a8:80:7f:
47:93:f8:ef:97:5a:18:00:f4:04:57:83:27:09:55:
d2:4a:f4:8c:72:93:ca:34:66:5b:fa:a0:37:30:55:
94:69:7b:76:7f:20:ee:0d:a6:34:1a:3d:5f:81:1c:
3f:3f:4a:ac:08:3b:bf:4e:ab:0f:a2:41:f5:45:60:
8e:01:00:a0:01:0a:fb:2c:36:f6:f6:28:95:fa:e9:
01:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E8:66:58:37:EC:84:A2:1F:6E:A5:48:05:85:20:03:C3:E9:45:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/d48f88ce-84b8-34c9-b77e-c19ac22e820e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl
X509v3 Authority Key Identifier:
keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer
sbgp-ipAddrBlock: critical
IPv4:
74.112.192.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:82:98:1b:86:ae:92:be:8f:5e:fc:eb:b5:7f:f7:95:1d:c2:
23:a8:9c:69:08:bb:9b:9a:32:86:98:2d:bb:59:bc:b9:89:4b:
69:bf:5a:c3:5f:23:e8:f5:a8:cd:1c:74:c8:60:9f:1f:c8:73:
57:e3:0d:79:34:da:86:0b:e1:d8:7a:97:a6:82:25:41:3a:f1:
40:02:2c:46:b9:49:74:a3:a6:9e:c6:4d:3a:01:c0:f0:a9:3e:
ee:c9:0b:74:68:fd:e1:dc:50:19:c1:37:bf:3f:1a:5c:98:2d:
df:12:26:b7:c6:b2:8b:f5:ba:3e:1e:18:26:17:e7:24:2c:26:
ac:52:d6:11:18:61:0c:90:15:66:72:68:32:b0:19:5d:7f:dd:
83:95:a8:76:64:f5:37:a2:61:a7:74:8d:30:3e:f2:69:64:e5:
5e:a6:00:5b:29:da:7b:64:81:5f:39:43:f4:e0:53:05:40:41:
5e:f4:13:14:31:98:1b:67:c7:89:f4:e5:50:b3:d5:73:37:93:
86:9a:d7:c5:3c:c5:af:57:4d:3b:9a:05:f0:21:f6:70:4d:c1:
75:f8:f4:92:15:f4:29:81:34:8f:16:2f:d9:ef:d8:49:ae:a7:
b0:1b:f0:2d:2e:dc:2e:82:84:8f:32:c8:fa:05:2f:ab:0a:92:
3f:4d:f8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 11:42:55 2025 by rpki-client