Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/391bbefa-9aea-322f-807a-b5b118d3b226.roa
File: 391bbefa-9aea-322f-807a-b5b118d3b226.roa (raw, json)
Hash identifier: ypfWnyFn5ahlgYvgkbbWNr+0B5Whd5cRAH+WolIbK/E=
Subject key identifier: 52:EA:52:91:10:6A:06:BF:BC:EC:AA:0D:0A:CE:2E:98:80:B3:55:0C
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858482BF55CF1E7B16EF7C81F5A00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/391bbefa-9aea-322f-807a-b5b118d3b226.roa
Signing time: Wed 11 Dec 2024 14:00:52 +0000
ROA not before: Wed 11 Dec 2024 14:00:52 +0000
ROA not after: Tue 11 Mar 2025 13:00:52 +0000
asID: 701
IP address blocks: 74.106.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:f5:5c:f1:e7:b1:6e:f7:c8:1f:5a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 11 14:00:52 2024 GMT
Not After : Mar 11 13:00:52 2025 GMT
Subject: CN=38bf0449-2ec3-4d6f-bcb2-bc53c9197c53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e8:c2:d3:ba:8e:b7:ed:2f:e2:1a:36:e9:a1:
1e:0b:88:81:8d:19:e3:b8:36:c8:0f:f8:44:27:23:
49:19:bd:1b:62:6e:19:56:01:a0:5b:4e:46:dd:af:
8b:ff:61:35:4c:4f:95:01:ea:35:e6:07:d6:d8:5c:
b5:a0:b5:c9:f0:29:fc:79:2f:14:f5:9e:1d:a9:a4:
b1:aa:09:e7:33:6c:3c:1d:b3:07:3a:eb:93:66:85:
eb:0d:37:cf:b8:e1:f4:c3:38:5c:ce:1f:6f:34:62:
39:15:9a:81:8f:eb:df:af:c0:37:19:8f:67:68:06:
16:87:30:ad:ca:76:00:3b:4e:d6:94:47:c9:a6:7b:
f8:9a:95:66:c9:da:31:d3:78:b8:d0:f1:1d:ec:55:
a3:37:cd:d6:e6:5b:19:38:81:91:8b:66:8f:82:10:
35:28:9a:34:79:8e:66:92:5e:33:f1:f5:68:e9:68:
72:b8:a6:e6:ed:8a:d8:60:3f:8d:8e:56:9d:87:de:
05:74:e9:67:d5:e5:6a:14:44:74:b0:01:a6:2b:bc:
03:6a:ed:9f:ff:66:d4:75:d5:4d:ca:a3:cc:14:60:
75:4d:8e:44:7a:1d:8e:fa:da:45:dc:fc:32:6c:12:
91:ac:df:bf:67:f9:25:3a:8b:52:0a:18:34:e4:c0:
df:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:EA:52:91:10:6A:06:BF:BC:EC:AA:0D:0A:CE:2E:98:80:B3:55:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/391bbefa-9aea-322f-807a-b5b118d3b226.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
74.106.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:b3:2f:dc:a9:b2:a3:f6:aa:47:1b:54:aa:5d:de:a1:ec:4c:
61:a0:bd:6c:09:55:e8:2d:75:fb:1b:0e:3a:77:1e:ff:c3:be:
62:23:87:93:82:4b:cc:ed:64:96:03:d8:48:06:ad:d9:48:41:
82:ea:65:62:70:3a:a3:4b:44:19:a9:fd:52:17:7d:bf:f1:4f:
97:18:1f:2d:ce:87:d1:0d:6c:32:a8:4b:87:14:25:36:33:a5:
5f:1f:81:ae:f3:f2:58:f5:31:e1:87:7f:ed:74:51:86:e6:b3:
c0:f3:a0:eb:9b:cf:0b:52:22:3e:d1:10:ec:34:5a:35:de:df:
4b:9d:99:a0:d5:19:26:f5:bf:f3:16:19:81:2c:71:ca:f3:cf:
e8:2d:b1:20:01:23:f7:ed:43:35:e9:2e:3b:bf:43:3a:4a:f1:
95:27:a7:fd:7d:5e:39:15:c9:12:5f:e3:61:3e:e9:60:f8:38:
83:0a:b8:e7:f0:dd:de:66:eb:16:b5:81:5e:1f:a9:6f:c5:a7:
4a:cf:15:ff:a2:fc:ee:ec:a3:78:c3:2b:27:0d:a1:42:a2:fd:
00:99:e7:96:17:2c:9b:86:42:a3:e4:b3:fb:60:3a:e5:00:5b:
0b:9f:04:b0:63:96:fb:b2:9b:50:cd:df:51:d0:0a:eb:8b:6c:
ac:45:e8:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:21:12 2025 by rpki-client