Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5c29a343-4733-3872-a6f7-266dc59d2c6a.roa
File: 5c29a343-4733-3872-a6f7-266dc59d2c6a.roa (raw, json)
Hash identifier: k+5wtT3vzojyFsb5RNzGd8YqlOuHIXSMFV7usTB2za0=
Subject key identifier: 11:37:9E:E0:0D:0A:00:59:60:FF:14:3A:33:13:F7:37:5E:E9:C4:CA
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819D01A43CC64CA9F5C685A00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5c29a343-4733-3872-a6f7-266dc59d2c6a.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 200184
IP address blocks: 74.82.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:d0:1a:43:cc:64:ca:9f:5c:68:5a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=bc28df72-4dbe-42ec-a0da-860548c8d120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:8f:11:c5:7d:b1:4c:ef:ab:3e:1a:86:6d:2b:
38:12:31:58:03:ae:18:93:c1:e6:bb:61:9e:43:2c:
7d:79:e3:ab:c4:96:ff:6d:15:d9:57:3e:5e:dc:4f:
1a:fd:e3:ef:81:95:22:bc:24:d6:97:70:a7:95:bd:
bd:e7:85:19:d7:5b:48:8e:0f:99:3c:3a:80:cf:74:
30:e7:3c:68:4c:c3:68:98:fc:f1:40:ea:e7:94:30:
9f:01:f1:f8:51:8b:32:d3:9a:8a:65:49:a6:45:56:
6f:e5:d0:32:6c:2c:5b:85:1a:78:83:4d:c7:ed:ad:
63:cd:f4:ea:09:1e:7a:b5:4d:19:6b:55:50:31:69:
dd:4c:20:72:f7:7a:6c:66:f0:5f:47:8a:c3:b9:84:
fe:86:5d:eb:be:99:07:53:6a:62:3a:92:72:fc:91:
fd:ce:e2:04:38:ff:bf:a4:ec:97:1b:63:4f:46:bb:
ea:a7:f6:1f:b4:05:1f:04:e6:f4:b1:b5:b8:b6:10:
31:45:f9:ac:d3:9d:66:09:0e:f0:b0:04:51:cc:5e:
06:e2:b2:c0:5c:81:2a:6f:57:68:33:78:3e:c4:44:
35:0a:e1:60:10:72:19:80:13:b9:4c:14:b3:e5:31:
09:0e:20:26:fa:74:61:11:d9:11:6f:24:29:d0:84:
b5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:37:9E:E0:0D:0A:00:59:60:FF:14:3A:33:13:F7:37:5E:E9:C4:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5c29a343-4733-3872-a6f7-266dc59d2c6a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
74.82.58.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:f7:89:d1:b9:7e:b6:9e:e7:53:57:46:7e:76:64:e5:b2:9b:
37:a7:b3:d2:90:a8:d0:ef:5d:ac:e7:4c:56:77:07:5b:23:fc:
c6:64:71:bb:74:ca:39:c4:5c:b1:ae:97:1e:8d:81:42:df:7c:
ac:ea:d8:e0:ad:ed:c9:41:2a:67:7b:f5:59:07:dc:01:c9:5d:
2d:7d:bb:86:69:00:7e:d5:e3:88:53:37:60:bb:66:44:8f:41:
78:6b:2a:72:56:08:35:2d:ad:28:d6:10:41:2f:5e:0b:7d:04:
6f:5a:07:25:94:99:98:05:e7:71:58:b4:01:c0:cc:ca:e6:75:
58:7c:68:b4:09:b5:57:ac:75:07:7d:4e:66:97:08:13:6e:00:
42:0a:0a:f0:88:44:6a:23:62:60:7a:87:a7:5c:c4:c2:50:c1:
e7:ec:9c:85:b8:57:56:07:08:5e:37:3e:19:16:56:3c:5c:42:
45:f8:10:95:85:f7:eb:d9:a7:59:d9:d2:17:46:46:bd:0e:86:
89:54:19:ab:7e:3b:6a:ef:18:df:b8:0b:41:0c:ae:8e:93:f9:
98:4a:3a:9c:34:18:79:01:99:65:7d:b2:b8:f6:5d:f5:67:39:
af:89:78:47:20:79:54:80:71:26:98:cd:62:f1:1c:66:be:b5:
9d:8d:49:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:33:21 2025 by rpki-client