Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/47d3484f-4726-3190-8c44-831e3dafc9f7.roa
File: 47d3484f-4726-3190-8c44-831e3dafc9f7.roa (raw, json)
Hash identifier: LgfkvDO9REG8KdWDO/n8CCYvK4Y8Pibf4QM7G5Ctf1c=
Subject key identifier: 6D:86:48:B6:76:02:0C:06:9C:87:84:2E:B6:55:90:39:A8:65:84:C5
Certificate issuer: /CN=cb01b28a-436d-42dd-8750-5361f2309297
Certificate serial: 010D0C9F432858487FB5DB1C28A5FE08F185D400
Authority key identifier: A0:3F:D7:81:F7:6B:86:20:05:40:B3:B0:F1:5E:57:49:8A:88:1E:C4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/47d3484f-4726-3190-8c44-831e3dafc9f7.roa
Signing time: Fri 10 Jan 2025 14:00:51 +0000
ROA not before: Fri 10 Jan 2025 14:00:51 +0000
ROA not after: Thu 10 Apr 2025 13:00:51 +0000
asID: 6233
IP address blocks: 74.211.120.0/22 maxlen: 22
74.211.124.0/22 maxlen: 22
98.142.132.0/22 maxlen: 22
150.242.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7f:b5:db:1c:28:a5:fe:08:f1:85:d4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb01b28a-436d-42dd-8750-5361f2309297
Validity
Not Before: Jan 10 14:00:51 2025 GMT
Not After : Apr 10 13:00:51 2025 GMT
Subject: CN=acce01c7-afc7-43c3-9b64-cb1bc631178d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:09:e4:85:bb:f6:61:b4:f4:85:3a:37:82:c3:
9c:c0:87:e2:1a:c9:7e:fd:3a:9b:8f:4d:ac:18:a5:
b2:ed:e4:e3:5b:7e:d2:4b:83:9f:93:98:36:7e:3d:
5a:f3:ac:3e:6a:3f:65:d4:d0:43:8e:20:66:f1:97:
70:de:4a:da:bc:02:85:d1:79:ff:49:8a:19:67:23:
61:a5:d4:bc:e1:57:d6:ab:81:fb:83:3d:cf:7a:f4:
a8:65:c8:c5:1c:3f:83:5a:eb:56:32:d7:be:ea:4a:
95:dc:4b:91:57:e3:63:f1:78:6d:53:55:48:2b:d4:
ff:c5:aa:56:42:7c:e5:8b:ab:3c:ae:66:fd:b0:78:
d1:e4:c1:7a:79:17:02:74:cf:38:b4:e0:27:d9:9b:
91:21:a5:a9:c1:2a:21:07:b7:64:2f:07:4f:5e:d5:
16:c3:43:f1:df:e5:a5:8a:f9:88:a5:3d:f3:62:16:
fe:f3:7b:23:6b:a2:5a:22:c0:bb:42:a5:31:39:d3:
c5:50:cd:ed:a9:fd:b9:98:c6:7d:16:66:1f:95:15:
55:10:4d:80:5f:98:5e:f5:b2:ec:5a:c8:d3:d5:6c:
1e:f0:81:1f:73:d3:6b:0f:94:91:c4:3b:3f:b8:1a:
5a:22:89:42:31:66:30:1e:17:f6:e5:8b:4b:cb:98:
3e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:86:48:B6:76:02:0C:06:9C:87:84:2E:B6:55:90:39:A8:65:84:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/47d3484f-4726-3190-8c44-831e3dafc9f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.crl
X509v3 Authority Key Identifier:
keyid:A0:3F:D7:81:F7:6B:86:20:05:40:B3:B0:F1:5E:57:49:8A:88:1E:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer
sbgp-ipAddrBlock: critical
IPv4:
74.211.120.0/21
98.142.132.0/22
150.242.90.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:b3:b4:54:1b:9c:fb:39:1a:a9:01:b4:40:2b:c9:f4:4f:0a:
8b:59:53:2b:6c:8c:d8:91:d4:8e:92:ff:cf:ce:2a:39:38:94:
02:14:2d:cc:f7:4d:e0:4c:a6:05:81:53:14:08:b5:da:53:f5:
09:58:95:3b:37:c9:bd:76:ab:69:e3:99:ca:56:1f:35:12:48:
11:eb:62:30:80:37:b2:fa:01:40:8f:64:a6:5b:36:26:47:5b:
07:8a:0d:31:ef:83:9e:f3:cf:0f:70:8c:0a:47:3f:73:7a:bb:
3a:b9:cd:83:81:b5:5d:3b:64:e1:eb:2c:6e:59:93:a3:c8:78:
1e:7d:8d:97:ca:c8:03:5d:4c:9f:bb:ea:6d:f0:e2:e6:93:cd:
5e:17:f1:02:fe:f1:d5:15:0a:2d:f6:f9:87:6d:50:9e:78:07:
04:27:7d:aa:89:6f:2c:ce:ad:0e:76:9b:5b:dd:08:7c:be:69:
5e:5d:4f:6f:ed:6b:b8:24:17:7c:78:ea:50:6c:40:7b:85:55:
b3:c2:76:0b:0d:1b:34:1e:29:34:3e:14:39:8c:45:ca:88:cd:
43:65:ef:ec:95:ce:fa:cf:18:d2:0b:f7:58:a9:7c:de:f8:2c:
52:c7:18:40:17:ce:76:4a:96:5e:01:2e:d8:03:48:81:28:49:
d6:3d:95:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:54:29 2025 by rpki-client