Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/baf67ee6-c0e0-3bab-b53e-e578478a8176.roa
File: baf67ee6-c0e0-3bab-b53e-e578478a8176.roa (raw, json)
Hash identifier: BOX5iyYQ4Aqu4L6kCAwOIGqZx6+RNBOOZaXVkfSAFgk=
Subject key identifier: 17:74:D3:F9:28:F3:A8:E3:C3:0C:D2:31:B6:D8:5E:AC:58:0D:2D:3D
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858482BF56EAD6F6154EE73F88F00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/baf67ee6-c0e0-3bab-b53e-e578478a8176.roa
Signing time: Wed 11 Dec 2024 14:00:52 +0000
ROA not before: Wed 11 Dec 2024 14:00:52 +0000
ROA not after: Tue 11 Mar 2025 13:00:52 +0000
asID: 701
IP address blocks: 74.105.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:f5:6e:ad:6f:61:54:ee:73:f8:8f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 11 14:00:52 2024 GMT
Not After : Mar 11 13:00:52 2025 GMT
Subject: CN=9e4cb288-a022-4dd0-afcf-bf34fae4afb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:8a:f1:d3:29:bd:3e:e4:c5:af:38:ab:c5:bd:
6f:7a:09:16:b9:0e:03:bb:b3:84:fc:9d:7e:31:50:
b9:bf:db:19:82:78:74:7c:f8:9a:95:f0:30:eb:40:
61:4c:8f:98:68:a7:65:4a:5b:43:ac:99:a5:55:92:
c7:64:40:fb:d3:05:fb:e8:e6:1e:1a:74:2d:5f:81:
ca:78:db:3b:12:26:16:54:c8:c3:3d:a7:91:d3:c2:
c2:f4:1e:76:7a:bc:3f:dd:99:71:ba:85:ca:06:f1:
87:bc:d1:44:ec:44:fd:38:a6:1b:b6:16:7f:ab:26:
63:c8:1a:fb:dc:64:3d:e1:cb:ca:dd:6b:d7:a4:ec:
0c:13:fd:5c:9b:e4:11:1b:b2:80:f7:df:a7:6b:81:
7f:c9:d9:5f:83:65:52:77:b5:52:90:f9:9a:43:02:
2f:01:f5:cd:27:a2:52:f5:3c:76:ff:c9:e0:73:77:
72:12:6f:39:74:4a:f3:04:cb:92:44:86:90:f3:4c:
26:90:cb:22:9e:22:a6:2c:0d:1e:8f:97:47:9e:ee:
2c:bf:be:73:72:25:37:55:d5:a4:bd:68:ab:bd:8f:
0e:fe:7e:04:88:c7:a1:e6:df:06:df:a7:74:dc:f7:
9d:f6:5d:02:b1:2a:65:20:5a:e3:b3:7b:83:56:77:
a0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:74:D3:F9:28:F3:A8:E3:C3:0C:D2:31:B6:D8:5E:AC:58:0D:2D:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/baf67ee6-c0e0-3bab-b53e-e578478a8176.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
74.105.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:85:f1:e2:4d:10:aa:68:55:37:4f:54:85:c8:90:1c:c2:d4:
30:cb:c0:7e:01:2b:a4:ea:32:29:b4:73:6b:ac:36:42:ad:85:
7a:d7:17:30:bd:2d:87:4b:51:6c:1b:57:cb:cc:82:c2:46:fd:
9c:e4:53:c8:ea:55:4d:8c:37:9f:f4:b7:31:df:97:5b:78:72:
bb:6c:74:60:53:fe:5a:47:1b:36:5b:3b:05:d0:96:0e:84:d4:
e0:00:5f:bf:79:cb:2b:24:2c:da:72:57:14:62:b9:c8:46:fc:
aa:35:13:3b:e3:97:8c:16:90:c9:59:97:36:68:9b:a8:d4:f7:
8c:0a:e8:a8:57:9b:ce:62:87:d3:15:16:98:53:ca:6b:d7:89:
bc:51:46:4d:d9:9c:4c:6f:62:d9:9d:8c:58:35:92:2c:bd:a1:
06:3c:6f:85:30:4a:73:93:d1:04:32:9a:07:dd:5c:57:af:e3:
c7:38:c5:1f:fc:6b:f3:d6:d0:00:73:45:ad:4d:da:f0:90:13:
4a:63:de:7a:05:30:b2:29:d4:78:1e:8b:19:34:62:2c:7c:c2:
84:32:48:31:25:3a:02:8f:8d:85:e8:c5:b0:dc:14:51:e8:0e:
a8:a4:e5:47:03:61:a6:29:60:c8:fc:31:5d:3b:eb:66:d0:7b:
15:37:62:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:01:04 2025 by rpki-client