Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4a8834c6-18e5-378a-8096-66e1fef53c8c.roa
File: 4a8834c6-18e5-378a-8096-66e1fef53c8c.roa (raw, json)
Hash identifier: 4xT/s3Mn9nTNErYjY3H/iVrAwe4h8jIm0RfLdvblw3c=
Subject key identifier: 02:AB:6A:57:0C:42:C0:7A:D7:34:70:55:EF:FC:07:51:32:05:4B:EC
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819CFED771EA4F04C6DB19600
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4a8834c6-18e5-378a-8096-66e1fef53c8c.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 394996
IP address blocks: 74.82.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:ed:77:1e:a4:f0:4c:6d:b1:96:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=d9591f5f-1cab-413e-baf5-8c7b0b75f54e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:00:c9:59:84:81:3d:cf:bf:85:55:fe:c1:df:
8e:1e:f4:21:a4:eb:4d:9b:32:d2:a4:b4:26:db:ee:
d7:b5:9d:21:e3:8b:64:d1:d7:3b:75:21:ed:4f:47:
be:98:91:e0:eb:8a:3e:3d:5c:cb:d1:98:ae:ac:68:
43:52:3b:3f:a3:1c:61:f5:65:3c:52:65:eb:2a:0f:
c8:8a:d4:77:1c:02:8d:93:61:b7:5a:ef:ac:62:04:
51:da:4b:b7:92:e8:66:c3:9c:00:b9:4d:a7:d8:93:
c1:97:e8:d2:a2:ab:3a:16:65:dd:92:2d:a2:f3:43:
bc:54:c3:9f:59:77:4b:cc:d5:ea:92:67:f5:bc:d4:
ed:5e:17:7c:a3:59:b1:97:4c:45:8f:3d:6b:c4:3a:
54:f3:0f:ef:04:98:9d:9b:c4:bc:ea:f5:12:21:50:
d6:ed:a4:ea:2e:03:f4:0c:6d:39:df:3b:5f:39:af:
cf:98:81:71:4f:f7:c1:62:2f:92:cf:f4:30:1e:d2:
13:38:7a:4f:2b:76:10:6e:e5:cd:c3:e5:72:4e:45:
24:82:5a:44:14:fe:d5:0b:67:12:4e:5e:1f:96:59:
6f:5c:b0:c0:2b:0f:d7:b0:ef:7b:8b:dc:8a:72:5b:
b8:28:e1:0a:fd:1e:15:ce:ce:3e:15:e4:99:6d:b6:
dc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:AB:6A:57:0C:42:C0:7A:D7:34:70:55:EF:FC:07:51:32:05:4B:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4a8834c6-18e5-378a-8096-66e1fef53c8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
74.82.28.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:a4:e8:3d:40:7c:b6:8b:d1:ac:d0:29:19:eb:20:4a:10:e8:
b2:59:97:dc:6a:36:ba:51:d2:54:aa:4a:a7:a0:ab:9d:75:f1:
1f:a8:3b:d5:95:29:42:59:11:d3:f8:f1:9a:46:55:37:78:34:
a0:58:1e:16:e3:44:c2:80:99:d9:8a:15:5f:f3:6e:79:b3:6c:
2e:6d:55:11:46:52:a8:14:55:5c:4e:71:22:81:82:98:5a:54:
96:ce:56:bd:82:f6:a2:c0:d8:d7:a3:0a:4d:19:14:8f:c8:cb:
89:dd:da:75:8e:f2:77:ba:8a:b3:e0:2c:00:7f:53:a7:40:bb:
f3:50:3a:48:9f:a8:f5:4a:99:89:0f:db:06:d1:5e:c6:54:b4:
1d:2d:ec:c0:78:d5:18:8e:3d:50:fe:af:be:29:28:bc:14:e7:
8b:f0:ef:dd:21:88:64:89:39:21:82:a8:53:41:a3:43:37:a8:
ed:b9:98:bb:4a:a1:19:d7:6e:df:2a:0b:df:8e:e4:b7:61:e0:
7e:bd:e0:07:2a:ff:8f:ce:18:da:f0:ac:3c:73:01:fc:ce:f4:
7f:90:be:45:e1:5f:22:8b:fe:29:69:59:8c:44:1c:dc:ba:00:
3c:2a:a2:64:b0:6d:cd:32:f4:d6:9d:a6:4a:04:86:c9:f6:88:
4b:78:dc:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:47:08 2025 by rpki-client