Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/ab9c6e27-2259-3728-942d-d425d281a435.roa
File: ab9c6e27-2259-3728-942d-d425d281a435.roa (raw, json)
Hash identifier: ldOCp3/qhNOhgTcB5qas5X1q60B+/v59As7mTwE0dyg=
Subject key identifier: C6:F3:20:02:32:D4:E8:14:5F:68:56:FC:A7:67:A1:5C:1A:C6:FD:3F
Certificate issuer: /CN=97e60b77-17e3-4250-9bc8-b5e7664a320a
Certificate serial: 010D0C9F43285848573ACBB3BEDD56682C79C780
Authority key identifier: B8:3C:8A:BE:AA:A4:F3:7E:DF:5D:15:2A:04:3A:ED:6C:A1:84:B6:53
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/ab9c6e27-2259-3728-942d-d425d281a435.roa
Signing time: Fri 27 Dec 2024 02:00:40 +0000
ROA not before: Fri 27 Dec 2024 02:00:40 +0000
ROA not after: Thu 27 Mar 2025 01:00:40 +0000
asID: 31799
IP address blocks: 74.123.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:57:3a:cb:b3:be:dd:56:68:2c:79:c7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97e60b77-17e3-4250-9bc8-b5e7664a320a
Validity
Not Before: Dec 27 02:00:40 2024 GMT
Not After : Mar 27 01:00:40 2025 GMT
Subject: CN=0ec77a64-4d42-40c7-ae2d-c927ad04d36c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ba:3b:24:67:32:80:88:26:ec:0a:44:5f:ff:
33:bf:b5:3f:0f:43:8c:53:74:8d:5e:e7:0c:ac:2e:
3e:1f:32:af:d0:8e:59:5a:6f:05:a9:92:96:d5:61:
15:c4:dc:c8:73:b3:02:ae:76:f7:2e:a8:c9:3e:49:
d2:6e:50:b8:e8:32:29:23:43:eb:46:31:a6:46:6e:
b7:2f:2f:72:54:7b:37:4c:4d:6f:c4:05:b2:6b:57:
5a:e0:a1:0e:55:1f:ab:b9:10:84:a2:50:82:1f:9d:
69:ef:59:3f:95:7a:a3:0b:aa:88:9b:ed:ee:ac:ab:
65:46:f1:e1:eb:36:f4:b8:7a:40:0d:74:24:9a:31:
9b:5d:99:28:86:b5:5d:8b:f3:e2:52:a2:14:80:5b:
54:83:7d:24:00:4f:72:6f:b7:20:87:96:08:85:e0:
0a:ad:e8:e6:9a:94:e2:57:dd:c9:1c:5a:b2:24:69:
f9:3c:ef:03:e5:e4:e2:3c:79:2c:99:96:78:9b:92:
2c:52:43:c5:3f:d7:20:5e:c5:99:25:e4:4f:89:6c:
22:dc:46:4a:1a:f9:a5:ec:ea:50:fd:7c:8c:8b:75:
3c:bd:f1:39:66:e3:de:65:6d:d7:dc:6c:27:df:4e:
c7:97:82:0d:94:af:b8:72:df:8d:75:07:55:44:59:
2e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F3:20:02:32:D4:E8:14:5F:68:56:FC:A7:67:A1:5C:1A:C6:FD:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/ab9c6e27-2259-3728-942d-d425d281a435.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/97e60b77-17e3-4250-9bc8-b5e7664a320a.crl
X509v3 Authority Key Identifier:
keyid:B8:3C:8A:BE:AA:A4:F3:7E:DF:5D:15:2A:04:3A:ED:6C:A1:84:B6:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a.cer
sbgp-ipAddrBlock: critical
IPv4:
74.123.116.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:8e:f7:a7:46:17:38:8a:2e:79:b5:85:c5:8f:a0:cf:87:01:
e5:18:6e:74:11:46:1b:be:dc:5b:56:ce:b2:46:a3:e1:a0:b5:
41:9a:e4:07:f1:fa:2a:9e:0a:58:e2:af:75:48:69:99:52:e2:
a1:77:81:bc:45:b8:1b:2d:c1:d3:1e:a3:d6:ed:2f:dd:87:f4:
f3:35:c5:ad:5b:48:ea:d0:9c:15:90:eb:94:73:25:49:4d:ac:
a7:72:63:79:40:c4:87:50:9e:05:b1:54:61:4d:16:d4:96:1f:
32:14:f7:06:ac:61:eb:87:3c:45:62:77:53:97:11:d0:0f:45:
80:48:46:8e:eb:60:8c:ba:67:12:5b:8f:0d:04:91:bd:aa:39:
d7:9f:cf:72:2b:fe:38:31:92:f9:44:c8:0f:d9:57:a8:3a:80:
e8:44:65:dc:e0:2f:c7:e0:a4:1e:b3:5b:79:b1:62:88:85:e3:
81:da:e2:49:98:00:9c:b8:9c:f0:0f:91:0b:da:d6:57:38:21:
dc:63:a1:f9:f2:6e:4d:a8:ef:20:12:ec:80:de:f8:5b:a6:4c:
2d:80:eb:fa:f6:55:c4:bc:b9:10:74:d9:b7:5f:70:b7:26:90:
57:e5:34:94:5d:c4:0d:a5:34:1a:99:b5:35:4a:8a:a0:cc:8f:
85:8c:98:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:43:59 2025 by rpki-client