Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/640afb76-9129-3f63-ac1d-2a0cd0b70267.roa
File: 640afb76-9129-3f63-ac1d-2a0cd0b70267.roa (raw, json)
Hash identifier: LRe9YfDgeJD90gQQ0G/vmO9i8j2qgXkBjQPI7j6KwqA=
Subject key identifier: 1B:B4:92:4D:8D:01:19:22:A4:E3:42:62:05:72:FC:D1:FB:9E:38:16
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819CFF2438473313D71C75700
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/640afb76-9129-3f63-ac1d-2a0cd0b70267.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 54466
IP address blocks: 74.82.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:f2:43:84:73:31:3d:71:c7:57:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=b1165c7b-1c63-44f3-a0eb-9561c6da487f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:47:3f:20:81:5a:f3:5b:c4:e8:88:fb:b1:f0:
30:fa:ba:e0:5a:34:39:1e:16:e6:53:0c:93:75:4f:
0e:c3:a1:8d:ac:ac:3f:0b:c5:f6:ad:0a:33:15:aa:
8c:54:f5:79:91:f7:80:65:4c:3c:ad:59:7a:ab:ec:
c0:60:a9:50:c1:d1:55:73:9b:6f:3b:0b:79:c6:e3:
a9:36:83:e9:1e:4c:58:8a:d0:c2:00:92:ca:c0:07:
7a:ea:07:89:d4:a6:d6:58:7f:eb:3f:db:3f:5d:a0:
ec:5b:dd:30:ff:81:d8:da:c0:80:ac:e2:70:19:2e:
74:03:90:61:5d:0c:f6:a4:33:32:56:93:57:98:55:
e8:9c:b5:91:23:63:b3:da:a3:24:7a:db:a6:ff:ca:
d1:ac:aa:92:94:2b:81:22:84:f5:39:88:3d:e8:4c:
66:8f:e4:b4:58:35:29:8f:18:ea:5c:b3:cb:97:45:
36:cd:1b:0e:7e:74:5a:a0:1c:d0:15:17:c8:11:8e:
b2:49:ae:fe:b9:75:62:06:c4:1e:e4:c8:ed:12:39:
dc:9d:5e:a7:ce:f0:83:d7:48:d6:05:fa:f7:9b:0d:
15:21:60:85:8f:6f:1d:cd:24:b2:e0:11:ab:b9:f9:
65:6a:ed:65:ec:c9:5c:d0:48:a8:30:63:f6:b5:79:
48:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B4:92:4D:8D:01:19:22:A4:E3:42:62:05:72:FC:D1:FB:9E:38:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/640afb76-9129-3f63-ac1d-2a0cd0b70267.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
74.82.25.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:a6:7d:4c:b5:1e:52:42:14:25:a5:88:2c:64:6f:b9:b7:c9:
48:5f:a9:f2:79:59:65:a5:da:96:a3:bc:38:e7:8d:20:f7:5d:
fa:bd:92:23:b2:5d:7e:09:d3:93:64:4b:f5:5f:a6:b1:88:9d:
78:95:e5:bc:89:5e:c9:78:9a:82:b9:25:46:47:55:ee:1f:c8:
97:c8:c1:13:cb:e0:7d:b2:e2:37:66:ae:da:b2:12:a6:4d:22:
5f:c3:fa:36:51:1c:de:30:c7:de:08:ae:fc:37:fe:06:d3:fd:
de:b7:fd:ed:98:60:fc:16:27:ec:f3:d4:08:38:41:60:78:8f:
6a:30:b1:eb:d7:71:df:cd:6e:fe:09:df:0d:81:84:45:97:7d:
e4:f4:f3:19:17:dc:6a:36:90:9c:d9:04:03:38:2a:a4:0a:3e:
ef:12:e5:fb:bf:33:3d:0b:89:c2:ac:73:3d:4e:90:a0:ae:01:
de:90:b0:5f:2e:d5:4f:c5:bd:fb:9c:8c:bb:f1:51:7a:30:3b:
ca:e2:fb:dc:82:82:26:35:fc:e6:7e:6f:79:85:06:3c:37:b8:
68:da:65:16:d9:51:88:3d:9c:16:73:7c:8d:b5:1a:93:56:af:
b6:53:97:52:03:26:3b:e9:f9:1d:fb:8f:a9:86:39:03:98:88:
60:6b:8b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:33:10 2025 by rpki-client