Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/b540f37e-0ac1-31a5-b742-55a2b75ca88b.roa
File: b540f37e-0ac1-31a5-b742-55a2b75ca88b.roa (raw, json)
Hash identifier: ud7o0tHU/9QnIn9eeLBWXH0gd+fl96jtzlmwlFTTreE=
Subject key identifier: 25:02:9B:07:DE:E7:CC:53:7D:10:63:2D:D8:60:41:33:A5:E4:32:EE
Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial: 010D0C9F432858487755D2569C24F04695DF5300
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/b540f37e-0ac1-31a5-b742-55a2b75ca88b.roa
Signing time: Tue 07 Jan 2025 14:00:53 +0000
ROA not before: Tue 07 Jan 2025 14:00:53 +0000
ROA not after: Mon 07 Apr 2025 13:00:53 +0000
asID: 19795
IP address blocks: 74.112.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:77:55:d2:56:9c:24:f0:46:95:df:53:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
Validity
Not Before: Jan 7 14:00:53 2025 GMT
Not After : Apr 7 13:00:53 2025 GMT
Subject: CN=e8961e38-130b-4f04-9958-f87e9af7417d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:24:b1:6b:bf:1e:52:fc:33:29:78:96:5c:f2:
1f:7d:86:12:3e:e6:04:62:d4:5e:98:7b:f2:98:35:
bd:24:ae:47:e8:b5:2d:f4:3a:1c:29:fe:b8:44:c8:
0f:3d:b5:8f:f1:21:71:1c:b8:d8:d0:10:27:65:7f:
68:e3:4a:82:f9:5d:fd:5f:93:74:b1:f5:55:ec:59:
7e:08:8a:f1:8f:09:da:5c:69:a4:87:a2:a2:32:ef:
d6:3c:af:57:07:16:24:a2:59:6e:c4:a6:00:20:3e:
bd:56:02:f6:46:c2:7f:6e:9e:b6:aa:97:59:e2:ab:
f9:5a:2e:0c:f7:05:ec:08:93:e0:28:2b:e4:8b:2e:
db:80:38:4d:80:82:b3:a5:08:ed:5a:68:0c:1a:20:
40:f1:a4:42:fe:39:78:52:79:4e:0d:17:6d:04:9d:
10:a3:0c:80:b4:8d:45:3f:67:a6:14:55:04:b6:48:
d8:74:10:d6:e5:d7:ae:20:1a:1c:ca:42:87:d3:9b:
06:5d:fe:2c:19:2b:5c:5b:7c:9f:4c:00:e9:de:7c:
f9:56:63:d9:e2:f8:27:65:af:1b:bf:a7:2c:b3:c5:
a0:d2:17:f0:29:34:87:7a:33:5c:06:d5:5b:f0:49:
47:18:09:55:21:4c:05:6c:ec:b3:60:13:a2:82:6d:
0b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:02:9B:07:DE:E7:CC:53:7D:10:63:2D:D8:60:41:33:A5:E4:32:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/b540f37e-0ac1-31a5-b742-55a2b75ca88b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
X509v3 Authority Key Identifier:
keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
sbgp-ipAddrBlock: critical
IPv4:
74.112.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:d4:62:2a:8b:c5:88:35:41:2d:ac:98:ac:7f:ef:3a:90:ae:
47:9f:8c:1c:6a:dd:53:24:b3:a2:50:5c:51:c9:28:dd:f4:0c:
8a:d3:aa:b8:b9:f1:a3:eb:d5:1b:3f:dd:df:2e:d5:30:af:82:
9c:7f:ef:d6:a8:c9:c2:fe:35:36:88:28:00:03:92:1b:c2:62:
13:12:27:b5:85:b2:ff:d6:11:26:55:46:51:79:ff:61:78:d2:
70:3e:22:5f:01:c3:4b:c6:a4:2b:bb:95:2c:db:fd:44:aa:a3:
fe:2d:ce:90:c9:0a:80:53:19:e3:f6:e5:6c:9f:53:20:8d:08:
6e:02:db:4a:21:2b:fd:13:02:1b:bd:69:89:0e:8a:f6:93:f5:
2b:11:47:88:95:09:4d:cd:ab:19:f6:ca:e8:17:01:6d:a0:23:
9d:7e:e4:59:6e:63:02:37:ed:12:6b:3a:42:d3:cc:62:be:e9:
54:42:a4:9a:dc:9e:ee:a6:d5:f1:89:3b:b8:5d:ef:49:9d:f4:
76:c5:f5:89:96:e6:01:92:b9:4d:ad:2c:7b:b3:0a:23:72:80:
e0:38:56:10:47:c5:93:8b:26:6c:f7:8e:c8:05:81:1c:a6:5a:
23:cb:19:4f:7b:8f:73:1b:27:d8:3f:db:08:f5:0d:f9:35:55:
26:a9:b8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:22:50 2025 by rpki-client