Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe/504f5f4a-ed8b-3b0b-a0f9-dbf9213e910e.roa
File: 504f5f4a-ed8b-3b0b-a0f9-dbf9213e910e.roa (raw, json)
Hash identifier: FpTIgfTwOrsIyiiE0jrWVRV9BPJiSvXSz2lRGFjXSD4=
Subject key identifier: B0:59:E0:C5:86:FF:BA:B2:A7:D9:78:69:E9:32:41:92:C3:94:CA:4C
Certificate issuer: /CN=bc515206-ffe6-4baf-9dde-1faa0a2e4dfe
Certificate serial: 010D0C9F432858493C0924B68B87956F99941E80
Authority key identifier: 71:08:68:9B:F2:42:58:CC:3B:BD:94:D6:F8:D7:D5:EB:B6:2F:E5:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe/504f5f4a-ed8b-3b0b-a0f9-dbf9213e910e.roa
Signing time: Wed 19 Mar 2025 01:00:40 +0000
ROA not before: Wed 19 Mar 2025 01:00:40 +0000
ROA not after: Tue 17 Jun 2025 01:00:40 +0000
asID: 36671
IP address blocks: 74.121.208.0/21 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3c:09:24:b6:8b:87:95:6f:99:94:1e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc515206-ffe6-4baf-9dde-1faa0a2e4dfe
Validity
Not Before: Mar 19 01:00:40 2025 GMT
Not After : Jun 17 01:00:40 2025 GMT
Subject: CN=5590367a-6e10-47e5-b704-227ad33247e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:08:c9:b2:8a:6c:5c:ab:8f:72:8d:7a:48:22:
6e:3f:1a:bb:34:c9:cd:27:94:0d:f7:2e:37:d1:57:
d3:7d:35:e4:13:3f:38:fa:f3:a4:d1:d7:29:68:b5:
4f:e0:38:4c:68:a3:34:90:c5:ad:5e:2c:39:a2:46:
dc:ab:ec:6a:17:2b:8d:d3:83:d6:44:ba:86:68:94:
0a:68:fa:d8:cf:19:af:4e:cb:4f:fe:34:98:9d:ee:
e5:07:02:4a:28:ef:d9:e7:77:07:64:43:44:bb:b5:
a5:37:3b:39:83:97:49:82:08:ba:75:2d:1d:39:1d:
b2:c9:88:f4:d0:d7:9f:b4:e6:13:c8:0c:22:10:ce:
e5:9b:ab:d5:b3:6c:bb:9a:dc:71:b0:1a:53:0b:4e:
1c:3a:6a:96:3a:50:42:a6:73:2b:67:6d:4f:ba:a9:
63:fc:6c:b3:45:64:73:92:29:fb:ff:4c:ae:30:7f:
67:a6:9f:f1:f3:3c:86:32:29:77:c9:7a:f8:56:78:
dd:a5:b5:ce:ea:ba:06:01:40:27:b4:52:ad:4d:e5:
5c:77:25:9f:c5:bb:3c:6d:e4:7d:50:be:9d:78:92:
c7:e0:94:55:48:2c:51:ef:9f:4c:3f:71:a9:e6:1b:
64:db:84:ea:76:f5:cd:27:f2:62:99:86:99:af:35:
82:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:59:E0:C5:86:FF:BA:B2:A7:D9:78:69:E9:32:41:92:C3:94:CA:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe/504f5f4a-ed8b-3b0b-a0f9-dbf9213e910e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe.crl
X509v3 Authority Key Identifier:
keyid:71:08:68:9B:F2:42:58:CC:3B:BD:94:D6:F8:D7:D5:EB:B6:2F:E5:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe.cer
sbgp-ipAddrBlock: critical
IPv4:
74.121.208.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:f0:4c:6e:8c:33:6e:13:77:5b:8c:7a:64:70:f9:b0:5d:26:
35:fd:a0:0c:50:46:4c:25:d8:23:55:26:ac:b5:c9:d8:f1:00:
19:97:eb:2c:bb:21:98:0b:0a:4e:9d:a9:42:6a:e6:1d:e3:38:
7f:c4:12:cd:05:6d:7f:00:f5:ba:84:0a:05:37:5b:46:67:62:
c9:ac:e0:41:79:ab:3e:94:94:3a:fc:ff:1e:04:63:19:8c:a9:
cb:84:1a:84:25:ec:98:c5:2f:f5:42:cc:3e:06:da:e7:c5:19:
97:62:2c:b9:ae:b2:38:83:d0:f5:69:0d:1a:33:63:aa:8e:f3:
1d:d1:da:0c:41:6b:f7:f7:9a:9c:0e:d3:4c:ea:4d:70:81:6c:
19:2a:da:71:f1:8c:4e:31:5b:30:81:03:63:77:ca:22:d8:48:
75:55:fc:3e:82:1d:4b:18:41:47:11:44:cc:69:b1:57:59:76:
8b:fb:da:60:1d:27:bf:1e:c3:d7:50:5c:f6:e8:b3:25:0a:f3:
a0:8a:89:ce:ab:21:2d:00:46:7b:b7:3e:18:88:8b:6e:d1:52:
1e:8c:39:40:85:0c:bf:00:40:5e:3b:83:24:46:0b:f6:88:94:
11:a1:ad:1e:b9:b9:46:fe:ca:04:a8:65:fd:4b:cb:e2:ea:23:
73:7a:71:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:21:25 2025 by rpki-client