Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/5a565018-d2c5-3763-8bd3-3af6097c5e66.roa
File: 5a565018-d2c5-3763-8bd3-3af6097c5e66.roa (raw, json)
Hash identifier: OWsWfyIRmNMHwbcuu0zk5GWPDBqmIbTfn0nhnRi0mGU=
Subject key identifier: 49:2E:02:E0:01:ED:AA:79:8C:E1:D2:B7:4B:EB:4C:C0:4A:54:43:B8
Certificate issuer: /CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a
Certificate serial: 010D0C9F432858481C9A6D829337E97DA4DC4EA0
Authority key identifier: BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/5a565018-d2c5-3763-8bd3-3af6097c5e66.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 30294
IP address blocks: 74.119.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:6d:82:93:37:e9:7d:a4:dc:4e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=bed83e63-6798-4feb-8d3a-72ac11475505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:72:e3:01:1b:f3:7d:ca:90:cb:4c:24:b4:c1:
f8:86:8d:38:e4:8d:01:c0:4f:21:3d:85:60:e9:a0:
fb:f4:09:95:72:2e:48:00:bf:7a:dc:bf:22:8d:7a:
54:66:f4:71:cc:bc:74:6a:1a:70:51:84:2d:7b:f0:
c5:d4:6d:17:31:50:bb:8f:fa:ab:f0:43:96:c5:28:
e0:c6:47:8e:29:30:82:ad:ce:45:c0:d4:1e:97:b4:
87:b1:dd:a3:fa:b9:24:c4:85:0c:1a:01:27:e1:85:
8b:0c:ed:23:ed:bc:af:2a:0d:62:92:c9:d9:dd:0e:
c1:62:e0:71:6e:ae:f3:ba:b4:85:95:d4:f3:bc:37:
9c:68:cf:1f:f1:0e:ef:51:33:cf:ae:f2:14:6c:71:
64:a9:12:f8:df:ed:ac:1c:78:4d:ff:72:ed:b2:52:
d9:92:5d:92:bb:70:b7:29:98:08:57:21:a5:ae:81:
cf:b3:4b:86:27:0f:f4:c4:3f:22:7a:8f:a3:04:a8:
a6:c3:8e:0a:b8:85:2c:d7:c5:6a:f5:e0:d9:41:5d:
22:58:d0:a2:8e:21:b4:66:66:c5:36:35:e2:24:49:
4b:ee:5c:b3:35:70:4a:be:ba:67:ea:09:d4:89:43:
72:1a:96:56:41:dd:7a:a2:b9:19:c1:7f:04:43:ae:
8e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:2E:02:E0:01:ED:AA:79:8C:E1:D2:B7:4B:EB:4C:C0:4A:54:43:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/5a565018-d2c5-3763-8bd3-3af6097c5e66.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl
X509v3 Authority Key Identifier:
keyid:BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer
sbgp-ipAddrBlock: critical
IPv4:
74.119.25.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:2e:86:7a:5b:53:3f:96:27:e6:df:22:77:ba:1f:8c:53:2c:
c0:b6:e5:20:52:99:85:7e:0a:8e:91:7b:72:4c:4b:f2:06:49:
20:04:94:e2:7c:91:ad:9a:6c:95:73:7a:55:fb:bd:cf:ee:f7:
cd:dc:aa:e5:71:e5:25:c0:67:99:78:ef:c5:41:62:c8:cc:90:
c4:c9:f1:4b:b7:7f:a8:52:7c:42:96:b1:76:ac:d9:18:b5:4a:
97:8b:e7:06:db:62:57:55:7f:56:9b:be:63:35:3d:f2:79:11:
7d:19:df:3c:5e:46:17:d9:4f:bb:9e:12:f9:ee:78:58:b2:c8:
3f:93:47:95:94:0f:ba:8a:fa:cf:d4:7d:0f:9e:40:72:ed:11:
71:c8:83:a1:29:cb:63:3b:4f:90:2f:b5:ff:2a:cd:3c:8d:d2:
cc:f7:6c:5c:b3:47:f8:b6:14:48:ab:51:00:dd:69:0c:98:00:
c3:1b:ce:c6:90:e5:d1:32:38:f1:50:da:2a:fe:b4:e3:86:48:
d7:88:07:b7:0f:0d:3c:f1:37:24:a1:ef:b0:fe:1b:24:54:06:
70:cc:00:55:3f:76:13:45:78:8e:2b:b3:78:ff:97:7b:d3:9a:
fd:cc:4d:6e:2a:e8:3f:c1:72:70:9e:92:ce:5c:8f:09:1b:21:
be:b2:98:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:20:58 2025 by rpki-client