Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/c96a32c6-d883-32cc-8734-87cd0112383a.roa
File: c96a32c6-d883-32cc-8734-87cd0112383a.roa (raw, json)
Hash identifier: bHnKgLB5rrRvHXsistbArmWg3eP0YxVzHF8SqnIpB6Q=
Subject key identifier: E1:31:00:5B:BF:2C:78:45:F2:E8:26:CD:99:66:82:EB:6C:5F:B2:DA
Certificate issuer: /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4
Certificate serial: 010D0C9F43285847E094C5CE4037B26D173ADBC0
Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/c96a32c6-d883-32cc-8734-87cd0112383a.roa
Signing time: Thu 14 Nov 2024 14:00:40 +0000
ROA not before: Thu 14 Nov 2024 14:00:40 +0000
ROA not after: Wed 12 Feb 2025 14:00:40 +0000
asID: 198949
IP address blocks: 74.123.180.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e0:94:c5:ce:40:37:b2:6d:17:3a:db:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4
Validity
Not Before: Nov 14 14:00:40 2024 GMT
Not After : Feb 12 14:00:40 2025 GMT
Subject: CN=413f3b2c-090d-49dd-bd09-c29da5b211f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:35:37:2c:f7:65:1e:53:2d:58:08:67:86:df:
59:78:d6:c4:c1:a4:26:88:ba:17:b1:1a:8d:06:33:
da:98:de:2a:7a:01:4c:63:ae:8b:5c:54:c1:c0:1d:
ac:24:df:ad:1e:81:51:48:0a:a0:bc:57:5c:ec:c0:
cd:9d:88:b0:13:d0:72:47:66:5b:ce:bb:49:3f:2e:
38:9c:8e:4a:70:62:85:4e:ee:ce:7e:e6:c8:8a:32:
11:7c:a3:47:90:e0:89:6d:b4:c1:7f:39:18:21:f4:
4e:2d:31:b8:95:27:13:bd:ff:0a:f3:d2:f3:dd:6d:
23:34:d1:36:bc:70:6b:d7:6b:b1:5a:04:e9:41:75:
4a:77:49:05:d6:86:77:35:7e:7f:e9:79:03:3e:7c:
e2:53:26:c1:9e:d9:9f:22:71:8f:72:5a:57:2d:48:
66:3a:f5:3d:db:ea:6f:8e:29:cd:6d:16:07:fb:ae:
cc:23:3d:fd:10:03:eb:f1:76:25:9c:8b:21:ff:3d:
2e:9c:7e:85:63:df:41:dc:7c:c7:8d:1f:a9:55:8c:
25:5f:d7:06:cf:f9:72:6c:52:8b:26:0d:45:63:70:
72:41:21:27:93:fd:fe:ed:9c:ca:e1:7e:b7:5f:4b:
e1:9e:4f:ad:5d:7a:f9:d1:f1:a2:fe:49:21:3a:1a:
56:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:31:00:5B:BF:2C:78:45:F2:E8:26:CD:99:66:82:EB:6C:5F:B2:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/c96a32c6-d883-32cc-8734-87cd0112383a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl
X509v3 Authority Key Identifier:
keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer
sbgp-ipAddrBlock: critical
IPv4:
74.123.180.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:cc:87:73:26:fe:27:9b:6d:60:dd:42:5d:e8:a4:ce:27:23:
17:f9:02:26:07:5e:0d:15:ac:32:fb:60:bc:62:ad:71:0a:84:
62:4f:8d:46:9d:a9:ce:47:f3:03:a2:6c:cd:d1:0b:e4:c9:26:
2b:7c:27:be:c5:14:da:f7:62:be:24:a3:0f:9e:a0:a4:11:fa:
25:77:c6:17:13:8a:1d:4c:46:33:dd:37:a8:e5:44:da:26:f3:
c0:11:f5:dc:9b:41:16:98:2a:31:51:79:cf:95:03:49:ba:53:
bb:d2:67:81:fb:e0:84:57:f6:35:17:ca:a3:30:e9:eb:f0:20:
fe:f2:c6:7c:6e:64:5c:71:d9:b0:7d:4d:c9:69:1a:17:21:1e:
6d:19:23:51:ae:13:54:33:df:37:64:3e:37:07:a6:d6:2a:60:
8b:bb:7b:6e:53:0c:94:f8:31:40:c7:bd:8b:ca:1b:76:df:ee:
64:ad:1d:7b:17:f1:95:d2:2a:a7:36:9d:c6:9b:1c:b1:aa:90:
97:4b:fa:87:da:46:33:13:f5:d6:16:f5:be:e4:69:93:e6:64:
3b:b4:3e:6b:e1:58:5b:6e:86:e9:71:81:d2:86:af:8a:45:01:
8f:97:a3:35:d9:c4:75:ac:40:12:34:19:4a:da:c2:ae:3f:cd:
a5:d6:16:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:02:58 2025 by rpki-client