Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b/165066cc-a260-3c35-9129-8e291b962369.roa
File: 165066cc-a260-3c35-9129-8e291b962369.roa (raw, json)
Hash identifier: DLhfnqY78kQUODad5kvlIJQXt/LyiaWbkPLpv7QubZI=
Subject key identifier: 7C:7C:DD:C1:10:39:7E:F2:B1:B2:B3:63:42:53:08:1C:56:3D:36:BA
Certificate issuer: /CN=bb6338e8-3b98-45c0-936a-f7532d14c16b
Certificate serial: 010D0C9F43285848DEA111A89AF0034E299F9A00
Authority key identifier: 34:F6:D7:F6:1D:96:AC:9E:90:42:E7:55:B9:11:10:5E:09:CD:4C:82
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b/165066cc-a260-3c35-9129-8e291b962369.roa
Signing time: Thu 13 Feb 2025 14:00:50 +0000
ROA not before: Thu 13 Feb 2025 14:00:50 +0000
ROA not after: Wed 14 May 2025 13:00:50 +0000
asID: 18484
IP address blocks: 74.220.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:de:a1:11:a8:9a:f0:03:4e:29:9f:9a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb6338e8-3b98-45c0-936a-f7532d14c16b
Validity
Not Before: Feb 13 14:00:50 2025 GMT
Not After : May 14 13:00:50 2025 GMT
Subject: CN=e71d9688-2eec-4509-a4ce-e4ec607a8fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:33:09:cd:94:ed:8e:82:12:31:d2:16:fa:76:
c9:0e:4d:b6:7c:5d:e8:8e:25:e0:9d:57:ec:e9:75:
06:c1:1a:2d:bd:11:29:5d:60:06:91:cd:24:63:2c:
b1:39:b3:e2:68:53:be:ff:87:c1:6a:6a:c1:4f:aa:
c5:66:d0:8d:46:0d:c6:29:17:bf:08:c8:2e:f0:d0:
e0:0b:4d:92:80:54:60:50:30:fc:be:d2:1b:cf:38:
20:84:25:99:b8:8e:7a:6b:95:27:8c:47:41:4e:26:
5f:70:b4:b7:af:ec:55:d0:7d:b0:b1:a6:0d:6d:ad:
2e:c7:9a:00:95:23:05:4a:72:a3:b4:ff:35:30:82:
c1:1c:57:04:25:55:ab:6a:13:f4:b5:8a:06:25:8c:
94:ea:b7:0e:09:02:d9:f1:c4:45:af:ec:c6:df:26:
54:db:c5:c9:60:cc:1d:7a:38:73:9e:c7:e9:b9:8f:
8f:e6:95:6a:b2:59:02:dd:a9:7e:a3:17:4a:8e:04:
e0:39:b0:4c:03:2a:04:7b:49:9a:62:68:7b:9e:b1:
c4:88:09:71:75:d3:39:b8:20:8d:20:ca:94:63:8b:
bb:89:2a:85:10:99:2b:41:89:3d:91:6b:5c:ae:cc:
02:56:b4:8e:0f:44:0c:5b:89:4e:05:b1:2c:fc:96:
99:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:7C:DD:C1:10:39:7E:F2:B1:B2:B3:63:42:53:08:1C:56:3D:36:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b/165066cc-a260-3c35-9129-8e291b962369.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b/bb6338e8-3b98-45c0-936a-f7532d14c16b.crl
X509v3 Authority Key Identifier:
keyid:34:F6:D7:F6:1D:96:AC:9E:90:42:E7:55:B9:11:10:5E:09:CD:4C:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b.cer
sbgp-ipAddrBlock: critical
IPv4:
74.220.119.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:d4:90:a8:51:94:60:d3:0f:a4:6c:c4:56:ae:70:eb:d7:1b:
1b:de:fa:a2:bd:f6:ab:01:eb:72:76:e0:68:a6:f3:70:74:a7:
e6:27:ca:e6:46:1d:d0:ed:5f:91:78:ef:a2:4c:42:2f:0d:3c:
27:d9:da:25:89:37:3c:b4:13:ad:06:93:5d:51:07:1f:18:cf:
d3:6a:b0:a1:17:32:7f:77:bc:7e:32:e1:7c:6a:1e:d2:db:ab:
39:7e:73:43:20:6e:a8:74:aa:e4:ba:5c:36:36:9a:8c:d1:30:
b9:df:91:ab:16:ef:45:8c:4c:d0:91:da:bb:6b:b7:ae:f5:d1:
68:70:3b:4f:8a:12:ff:b9:c2:50:e9:b8:21:3f:18:da:1d:7c:
2b:0a:8a:1a:83:5c:7c:0b:db:95:bf:67:b9:cf:65:9d:43:6f:
36:10:1f:7f:01:9a:1b:ce:25:b5:59:e9:30:6f:41:8e:2d:f0:
0d:11:2a:a7:a5:44:79:ea:64:70:ad:17:ca:6d:2e:57:81:ba:
75:9f:50:55:3d:3e:63:08:e2:31:8d:ae:8d:0e:23:36:0e:9d:
81:1c:ff:43:d6:27:4e:af:17:6b:74:20:8d:bf:69:5a:a1:d7:
0f:93:57:02:52:74:43:bb:eb:81:da:4c:a0:cf:be:2b:a8:34:
b0:d4:fc:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:27:14 2025 by rpki-client