Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/19bdc3dd-b82b-35c5-8c54-4a5b444df3f2.roa
File: 19bdc3dd-b82b-35c5-8c54-4a5b444df3f2.roa (raw, json)
Hash identifier: YzAhmTfeKMEDzc67IiVo8M5vGbCHWKPjZ95C+eMUuCY=
Subject key identifier: D1:BD:C3:95:7D:C0:37:A3:9B:F1:CB:2B:82:D7:3D:70:78:6F:E3:55
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584832F04377569A55A98E75A820
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/19bdc3dd-b82b-35c5-8c54-4a5b444df3f2.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 701
IP address blocks: 74.98.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:43:77:56:9a:55:a9:8e:75:a8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=319bcd80-ca56-46f3-973c-dddc43c8a740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:14:43:2f:9a:c3:06:24:4f:f8:27:f6:5b:20:
e6:bb:c8:a5:05:2d:6c:b5:1c:aa:f5:ce:ab:77:fe:
2b:8a:9d:10:5c:f8:b7:16:f2:31:aa:e3:15:6f:79:
d8:7a:06:b0:53:b3:8c:b9:ac:9e:56:41:7f:bc:ba:
d3:86:58:84:38:21:28:6f:44:5d:b8:1a:83:3d:19:
48:c5:41:cc:1f:da:ea:69:4e:02:4d:9f:a1:02:6b:
e0:62:94:19:dd:10:b0:71:a4:3b:44:4f:c8:f3:5b:
82:ca:e2:98:f3:aa:0f:c7:6c:d6:5d:df:32:ff:80:
59:f2:be:24:86:96:39:92:02:85:3c:97:ec:57:6b:
9b:90:5e:69:53:69:d9:db:b0:9d:c9:7a:42:d7:0a:
da:80:12:26:fc:cc:86:33:07:fd:89:9e:87:35:60:
ca:6e:53:4c:f5:b1:82:ec:69:41:ec:2a:23:38:30:
33:c5:b8:6f:a3:50:b4:f8:5a:83:52:3b:64:92:20:
bf:28:ba:aa:c5:88:2f:34:e8:31:d0:12:86:71:7c:
a7:70:b3:be:79:07:0d:eb:95:bc:fa:a2:1b:38:b1:
cf:cf:4d:d1:b4:0c:78:92:9d:9a:42:37:be:a3:4f:
95:8e:99:a8:1e:f0:0a:5d:6f:f8:af:01:1e:40:f1:
f1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:BD:C3:95:7D:C0:37:A3:9B:F1:CB:2B:82:D7:3D:70:78:6F:E3:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/19bdc3dd-b82b-35c5-8c54-4a5b444df3f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
74.98.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:21:09:98:f2:82:7e:04:c8:99:54:d1:64:88:47:33:38:0b:
4a:8a:1b:04:b2:94:89:23:e0:43:c1:4a:c7:e1:cd:75:5f:d0:
62:67:fe:33:eb:8a:1e:87:e5:9e:1f:28:e6:f2:1b:c2:ec:c0:
5b:f8:d7:2f:b0:a6:fb:2c:d7:6b:01:e2:51:93:23:22:7e:68:
63:64:92:f5:44:91:a4:34:45:d7:b6:2b:d0:72:e2:97:12:ec:
26:73:da:02:43:e7:23:d5:bd:58:0e:30:5f:e2:17:3a:73:fa:
57:b6:37:ef:32:16:39:23:35:80:99:76:6a:c8:36:bf:a8:15:
f4:e6:64:44:ea:07:09:6a:54:bd:be:29:8e:3d:a0:98:ea:32:
e3:52:3b:c9:41:68:18:5a:f9:45:dc:cd:ef:39:07:f6:a1:e7:
fa:2f:da:7e:45:15:3d:f9:8b:7d:a7:d5:33:9a:d2:3f:83:77:
37:44:31:06:e7:03:00:1e:20:d1:b6:93:1a:2f:28:87:19:a0:
f0:fd:26:9a:06:4e:50:e5:e5:01:54:84:85:ee:5a:38:0e:57:
f6:db:fa:f1:bd:01:16:fd:b1:c2:bc:eb:93:cb:58:4c:e0:26:
99:d9:78:a8:4f:7b:1d:d9:b4:ec:e5:02:b0:a6:5f:38:45:39:
dc:9d:65:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:37:25 2025 by rpki-client