Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c/9e1f7b4a-dd80-30e8-b8d0-6c7f12c3eb02.roa
File: 9e1f7b4a-dd80-30e8-b8d0-6c7f12c3eb02.roa (raw, json)
Hash identifier: 5abveX6q05rCd4+aV3hqfngyHgWGXXUNzDMew2LD6YY=
Subject key identifier: 55:10:9D:92:20:A7:D5:2D:BE:F7:6F:B8:07:02:3A:A8:44:64:83:8E
Certificate issuer: /CN=879f8f15-9dc9-4663-aff8-bf62864b859c
Certificate serial: 010D0C9F432858492B488C36400C0F2DD88F9530
Authority key identifier: 86:B2:CD:FC:31:BA:34:57:EA:64:CB:E1:DE:50:AF:13:98:CF:C9:C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c/9e1f7b4a-dd80-30e8-b8d0-6c7f12c3eb02.roa
Signing time: Thu 13 Mar 2025 00:59:45 +0000
ROA not before: Thu 13 Mar 2025 00:59:45 +0000
ROA not after: Wed 11 Jun 2025 00:59:45 +0000
asID: 398296
IP address blocks: 74.114.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2b:48:8c:36:40:0c:0f:2d:d8:8f:95:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=879f8f15-9dc9-4663-aff8-bf62864b859c
Validity
Not Before: Mar 13 00:59:45 2025 GMT
Not After : Jun 11 00:59:45 2025 GMT
Subject: CN=f64f715e-d1bd-4bb1-b440-096a38b48b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cc:bf:f3:da:a0:08:65:b6:16:47:e5:af:ee:
1b:55:1d:c3:82:02:d4:73:38:b1:1c:5b:0b:37:ff:
77:1b:8d:3e:a7:37:52:d9:ae:7a:35:cf:d1:9b:48:
1b:c1:18:1b:96:a4:59:83:f6:e4:10:8d:43:13:11:
53:57:3b:e8:68:95:5c:f9:9b:d1:b5:13:9e:1b:02:
1a:b3:9d:04:e3:19:a5:de:db:a3:3f:bf:83:8d:cb:
18:c1:90:7e:01:85:0d:04:b6:d5:69:d2:db:5d:6d:
89:79:44:67:c9:52:f2:51:05:e6:21:a9:4e:0d:4c:
6c:dd:fd:99:d3:01:7c:4a:26:e6:98:db:4f:79:1a:
48:0f:3b:e1:a7:c1:94:87:67:6b:35:ad:fd:c2:53:
c8:74:19:83:c3:1d:34:70:43:d4:68:88:38:ca:0c:
88:f0:5f:a2:cf:39:a0:8e:05:86:e7:3b:05:7c:c2:
74:8f:0d:40:ab:55:c2:6f:70:b7:e1:63:99:ba:fc:
e0:07:12:e8:a2:a0:05:25:f7:66:0a:f4:e5:e3:d3:
44:53:e4:3f:34:b9:16:33:39:31:68:3f:55:c4:7b:
39:b5:1a:61:a6:ce:3e:5f:4b:ac:3a:c1:85:01:27:
21:a9:20:bd:d1:e6:5c:84:9b:c0:ed:b8:db:ca:b1:
d8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:10:9D:92:20:A7:D5:2D:BE:F7:6F:B8:07:02:3A:A8:44:64:83:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c/9e1f7b4a-dd80-30e8-b8d0-6c7f12c3eb02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c/879f8f15-9dc9-4663-aff8-bf62864b859c.crl
X509v3 Authority Key Identifier:
keyid:86:B2:CD:FC:31:BA:34:57:EA:64:CB:E1:DE:50:AF:13:98:CF:C9:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c.cer
sbgp-ipAddrBlock: critical
IPv4:
74.114.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:ef:b4:42:c1:d2:fe:aa:46:98:35:84:99:28:ef:5d:88:38:
ba:e2:33:cf:bd:09:45:78:13:84:3d:91:1e:16:39:6e:18:ab:
9a:05:32:ce:5e:72:f7:22:09:53:62:83:d1:f1:f2:e4:5a:71:
f1:49:bb:66:52:84:fb:2c:d6:ce:39:46:39:f8:7d:0c:fd:71:
a4:82:7d:70:da:73:7e:af:58:1c:1f:03:d5:1c:0c:fc:a8:a1:
a1:9f:09:eb:fb:e9:aa:96:ae:55:26:46:44:d9:d5:9a:83:22:
59:db:52:e4:26:a5:8e:67:62:40:40:86:ed:26:20:c5:6e:7a:
28:49:b6:fb:50:14:45:8d:02:02:fe:d1:85:18:47:25:f1:40:
24:88:00:28:94:1e:94:f1:93:13:98:d4:f7:b5:1b:52:c7:e8:
bb:c3:5a:5b:69:80:b9:17:28:1d:63:84:59:2f:09:f0:27:3d:
77:98:5c:0b:86:f7:20:39:ff:27:d1:e4:b8:59:d5:ab:b0:e8:
f7:94:08:05:7e:be:7f:fd:a3:00:1a:3b:af:f4:23:4b:d8:71:
e8:30:9f:a9:31:cc:a1:2b:26:2b:fd:d5:c0:16:3e:ff:a8:c9:
89:3a:56:2b:bb:eb:7b:7e:c6:18:d7:9a:b8:6c:5f:1e:f9:d2:
00:69:72:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:59:27 2025 by rpki-client