Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/27d77674-40cc-356c-878d-4dbe9170f65c.roa
File: 27d77674-40cc-356c-878d-4dbe9170f65c.roa (raw, json)
Hash identifier: XO49Kh0HPVuzXNaM2TB1NP4fPkr53SXNMRTNoSL4nPA=
Subject key identifier: 95:84:E9:82:65:AB:C3:54:B4:DF:4D:74:C9:2B:7B:36:95:0C:3D:D5
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819D00B1D0C55F3923CF1C880
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/27d77674-40cc-356c-878d-4dbe9170f65c.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 36103
IP address blocks: 74.82.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:d0:0b:1d:0c:55:f3:92:3c:f1:c8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=bd64508e-7c5a-4a61-99cb-300a7d7f6cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c2:ff:bd:bc:cf:1b:25:34:ea:d8:cf:05:66:
ca:a7:ac:ef:dc:32:8a:c6:af:d9:30:8f:54:0a:95:
77:d5:57:80:ca:0d:40:35:bd:3b:d4:3e:4d:a2:85:
30:96:52:fd:9f:fc:ce:01:6c:e6:ec:a3:40:31:4c:
36:04:02:2a:5e:5b:78:84:dd:3a:47:5d:44:d8:2c:
24:6d:83:fd:bc:f0:2d:52:d0:a3:59:aa:73:34:88:
f6:db:b8:ff:1b:b9:03:ca:21:93:5e:79:6d:43:03:
b8:04:3a:45:71:88:ef:12:cf:75:6d:25:a3:a1:da:
0b:53:23:b8:df:de:4b:d2:ce:67:92:9e:22:29:aa:
cf:d0:f0:df:3d:8e:17:94:06:17:c5:7a:71:57:11:
fd:18:1e:2e:b4:b2:30:d8:87:ae:e4:d4:b1:d0:ca:
9a:93:45:ba:a4:aa:02:6a:ab:37:90:d4:69:40:ef:
10:f0:14:72:d2:4c:c5:8c:70:18:91:ca:f1:6b:61:
3c:4c:4c:ce:8a:e0:e6:ec:da:51:24:3b:a2:a3:84:
30:0e:7f:87:17:27:60:af:bd:36:53:3d:ab:aa:e2:
23:cd:a1:86:83:49:1f:54:17:ae:44:a9:a7:48:dc:
6b:c6:01:e5:7b:18:5c:45:c5:bc:fe:5e:aa:21:3a:
ed:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:84:E9:82:65:AB:C3:54:B4:DF:4D:74:C9:2B:7B:36:95:0C:3D:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/27d77674-40cc-356c-878d-4dbe9170f65c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
74.82.57.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:42:a2:70:ad:95:8f:36:fd:ef:f7:e2:42:41:63:1b:01:1d:
50:f1:f3:2c:fa:f8:e2:ee:78:43:7b:3a:50:6b:78:37:80:d2:
3c:a8:62:4e:86:0b:83:cc:7e:3d:e4:2e:25:60:e2:9d:57:b4:
a1:8b:8d:a6:32:50:b1:eb:a3:a2:8a:6d:96:1a:45:9f:40:2a:
32:61:ba:87:b8:70:11:e3:1e:aa:9c:2d:0b:00:ed:ac:a7:f6:
da:cf:ac:30:d5:7b:50:7d:ab:5b:fb:03:7e:43:6f:0d:86:91:
68:b3:48:53:42:24:36:47:62:77:b7:f8:01:f7:14:1d:e0:66:
1f:c6:b6:83:46:5a:e7:c2:df:df:c4:6b:e8:75:7e:d3:66:5d:
68:29:81:70:cf:5e:43:76:eb:3a:f1:24:3c:e8:c8:58:8c:b9:
bd:72:a6:d4:16:fb:92:76:9e:cf:84:71:68:a1:cd:ee:90:dd:
06:bb:7b:d7:af:32:80:cd:2e:ce:4d:ba:d7:34:be:47:2c:11:
0a:31:38:6e:86:84:83:dd:4b:25:2d:70:96:71:43:9f:4b:57:
bc:bb:ef:78:f1:91:35:57:ce:35:da:1b:42:42:b6:aa:e4:a3:
35:50:9a:fc:b6:41:b9:ef:48:fd:d5:61:77:35:e5:3c:bc:d3:
b3:de:1f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:32:00 2025 by rpki-client