Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/2d3d9d9e-410e-3c6e-95a7-bfce66888e1f.roa
File: 2d3d9d9e-410e-3c6e-95a7-bfce66888e1f.roa (raw, json)
Hash identifier: P5HV7k9nBzd6eGBwgpC5+7bneQ5yrSdNT8i8U87o79k=
Subject key identifier: CD:E8:05:8F:56:21:39:67:EE:97:14:1D:C2:71:B3:3E:20:BB:89:11
Certificate issuer: /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial: 010D0C9F43285848ECEB6CD08FEA4F55633E6000
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/2d3d9d9e-410e-3c6e-95a7-bfce66888e1f.roa
Signing time: Tue 18 Feb 2025 16:52:01 +0000
ROA not before: Tue 18 Feb 2025 16:52:01 +0000
ROA not after: Mon 19 May 2025 15:52:01 +0000
asID: 5769
IP address blocks: 74.115.192.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ec:eb:6c:d0:8f:ea:4f:55:63:3e:60:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Validity
Not Before: Feb 18 16:52:01 2025 GMT
Not After : May 19 15:52:01 2025 GMT
Subject: CN=3ce172e6-ae73-4610-90a1-721f1c056623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f0:98:2c:a6:d6:26:e1:0c:0b:e7:c3:df:bc:
7e:c6:99:f7:5d:ce:36:e2:7a:04:d4:dc:50:8a:09:
c9:fc:bc:75:25:96:12:4b:98:9f:34:2e:dc:ec:9a:
87:cb:08:29:17:42:71:5e:e3:83:70:14:bc:1f:a3:
77:a5:c6:fc:55:37:44:a1:af:11:57:cf:02:54:cc:
fa:be:bc:42:4e:c5:64:d1:1d:17:4b:6e:b1:5c:b8:
3b:da:08:f0:50:99:f8:cd:37:0a:95:cb:04:5d:10:
0c:c0:e7:c3:0c:b4:33:77:36:71:55:56:f3:20:84:
ec:76:3b:09:0b:89:77:2f:c4:65:a0:02:78:eb:80:
49:37:5f:78:7b:6f:74:c5:d2:44:6b:46:de:cd:13:
f7:5c:6e:d5:7b:3d:71:de:9c:23:55:bb:31:22:59:
7e:be:8a:d3:3c:20:fc:d8:8a:4e:4b:79:ef:b1:c3:
21:20:57:a2:6d:de:47:55:ee:7f:de:52:81:4d:1c:
ee:60:4e:c5:9d:6a:80:c4:d8:3a:18:96:ca:e3:ac:
92:17:d4:8c:fe:ef:68:28:69:c1:44:df:5c:f6:a7:
84:46:b8:c9:50:62:b1:e2:c1:1a:ef:ad:82:46:14:
57:72:c5:70:0c:6b:07:6f:81:f4:5a:46:81:b6:01:
58:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E8:05:8F:56:21:39:67:EE:97:14:1D:C2:71:B3:3E:20:BB:89:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/2d3d9d9e-410e-3c6e-95a7-bfce66888e1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl
X509v3 Authority Key Identifier:
keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
sbgp-ipAddrBlock: critical
IPv4:
74.115.192.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:71:c5:f5:cc:c5:eb:98:97:52:9c:2c:8f:55:0d:49:3c:a3:
41:96:ce:5c:cd:2c:86:b1:07:56:be:60:1c:c9:2d:77:60:2b:
f3:a8:46:f1:40:6d:e9:e4:aa:03:76:7c:42:4c:e1:d2:2b:f2:
b0:a4:72:ab:b2:48:ef:9b:9c:3b:5f:36:11:c5:41:68:41:a8:
d6:b3:54:81:ea:40:66:a2:5d:19:0c:7c:19:b9:e8:20:34:41:
31:1d:26:e0:cc:fa:c4:cf:d9:2b:f7:39:18:95:10:c1:77:ab:
31:89:66:be:f6:cf:ad:d8:5d:00:a3:27:f6:f9:94:da:eb:2f:
ba:78:3e:50:e3:2f:3c:24:90:f3:03:5b:63:48:cd:82:a7:cc:
79:ca:0f:20:5c:d4:18:4f:79:33:51:76:74:2b:63:58:33:43:
dd:ec:9d:57:be:0f:06:fe:7c:9a:2f:48:03:37:cc:f0:61:af:
08:c5:e3:12:0f:a4:13:44:ab:18:86:a3:9b:b5:17:2b:8f:2e:
dc:56:c3:91:7a:02:7d:d5:38:3a:17:22:2d:e4:40:e3:ba:f2:
c0:f4:8c:dd:20:cf:f3:76:5b:ec:e1:1f:b8:1e:b6:cb:b5:0d:
bb:7d:64:fa:b2:c9:f8:3d:fb:3c:ec:75:fb:d3:d0:74:4a:55:
36:0c:a1:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:30:39 2025 by rpki-client