Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015/c9a29383-8363-36e5-827b-b3c653f5ba4b.roa
File: c9a29383-8363-36e5-827b-b3c653f5ba4b.roa (raw, json)
Hash identifier: FYYlMt2do44b+x8YfSd53LAkqBf6iQyHEo76rhPSH1E=
Subject key identifier: F4:0F:F8:63:B2:E8:77:9A:6C:CB:EC:EE:4C:35:CA:B7:29:7E:42:73
Certificate issuer: /CN=44dfb2c2-6b0e-4f2c-956d-497df0881015
Certificate serial: 010D0C9F43285848F65BD5AC48934DDD9890EE40
Authority key identifier: AC:A8:C2:A7:76:8D:C6:BC:D8:B5:7F:0C:F0:FA:BA:89:43:A8:D8:35
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015/c9a29383-8363-36e5-827b-b3c653f5ba4b.roa
Signing time: Sat 22 Feb 2025 02:00:38 +0000
ROA not before: Sat 22 Feb 2025 02:00:38 +0000
ROA not after: Fri 23 May 2025 01:00:38 +0000
asID: 16509
IP address blocks: 74.123.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:5b:d5:ac:48:93:4d:dd:98:90:ee:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44dfb2c2-6b0e-4f2c-956d-497df0881015
Validity
Not Before: Feb 22 02:00:38 2025 GMT
Not After : May 23 01:00:38 2025 GMT
Subject: CN=5e781551-a7d7-4ff5-b527-45f4ff5f1613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:61:69:fe:85:f6:59:cc:ff:3b:ac:95:df:87:
c5:0b:22:a9:73:88:d5:0b:9f:90:66:ec:cb:58:1d:
77:d8:fa:04:c9:e6:db:8f:ec:87:48:01:e6:66:b5:
bb:84:28:d8:0a:d7:7e:a5:a5:d2:27:34:44:6f:5a:
50:91:47:22:10:c2:ec:eb:b9:6e:8c:50:c2:ed:88:
81:fc:45:f1:de:f5:a3:e0:c5:e7:ca:89:0c:cb:26:
85:e8:98:54:1e:3d:cd:7d:56:f8:d3:8f:53:d2:ae:
36:1f:51:c6:f7:8e:97:f3:03:57:14:b3:c4:db:1d:
b8:5d:96:50:d2:05:3c:72:71:85:aa:90:a3:67:0f:
b5:0a:58:56:64:ff:30:d1:2b:7a:48:05:94:09:a0:
a4:cd:8b:83:dd:7c:f8:81:b6:60:6e:f8:c7:97:6b:
e4:c8:72:b6:b2:e6:27:64:c8:b8:8b:25:64:0a:6e:
c1:80:2b:7f:58:00:84:e7:02:40:85:32:72:b0:d5:
61:5d:5c:62:ce:85:fa:33:d5:c4:ce:56:cd:38:46:
97:c0:37:03:5d:83:c2:01:da:7f:93:1a:d8:93:d4:
be:63:f4:06:c2:35:5f:f0:36:d9:30:44:40:73:5c:
0b:e3:8f:a7:4f:5e:65:58:56:3c:20:a8:53:3f:da:
24:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:0F:F8:63:B2:E8:77:9A:6C:CB:EC:EE:4C:35:CA:B7:29:7E:42:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015/c9a29383-8363-36e5-827b-b3c653f5ba4b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015/44dfb2c2-6b0e-4f2c-956d-497df0881015.crl
X509v3 Authority Key Identifier:
keyid:AC:A8:C2:A7:76:8D:C6:BC:D8:B5:7F:0C:F0:FA:BA:89:43:A8:D8:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015.cer
sbgp-ipAddrBlock: critical
IPv4:
74.123.145.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:53:dd:f6:9a:03:74:41:ab:44:4c:67:bf:1f:bb:16:ff:bb:
90:4a:51:48:28:dc:0d:63:e4:91:bd:88:8d:83:3f:ad:62:32:
90:f0:03:a5:f4:42:8b:83:1e:6b:80:35:72:1d:e4:f7:9a:cb:
7b:06:96:1b:e8:e6:9b:e2:43:08:f4:42:27:ce:07:05:df:53:
c5:f6:0a:49:fc:97:53:43:75:04:24:c8:bd:2f:b2:dd:89:5a:
f5:23:f1:93:ed:c3:dd:26:e7:e0:e3:e0:64:7f:68:63:19:24:
ee:c6:81:06:88:4d:0f:e6:14:ac:69:70:37:d2:bb:48:d9:94:
30:42:8c:13:ca:f7:a0:c9:8d:1e:d2:78:a6:4d:91:3a:c5:b0:
e2:4a:6c:6b:a9:06:c4:fe:d8:db:02:cc:92:3d:aa:5d:fa:66:
6e:15:e8:88:d8:50:3d:5e:b6:67:97:7e:1e:1c:06:a2:4a:52:
57:90:44:ab:65:9e:03:bd:9c:21:df:1b:c7:52:0e:92:12:c2:
87:84:fe:26:c5:3d:cc:06:4c:0f:9b:22:48:30:cf:a9:7a:88:
ee:49:b9:83:2d:65:d1:2a:0b:56:cc:51:b8:3c:f4:74:8d:d5:
b8:b5:cf:2e:c2:76:d8:ea:1d:47:59:e2:4b:4b:04:79:d4:83:
b3:a5:60:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:16:53 2025 by rpki-client