Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1bdfc8b8-832e-37a1-b3bd-018f47b95ac0.roa
File: 1bdfc8b8-832e-37a1-b3bd-018f47b95ac0.roa (raw, json)
Hash identifier: PBVeRAtG1DXy4AvmfOPqLpH8GcIwl9lzkzUrWxOcXzA=
Subject key identifier: 47:35:04:3D:38:D5:9C:13:8C:5E:57:7D:32:BE:D6:4F:50:B8:19:E4
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848F4B50672952CF8E389352838
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1bdfc8b8-832e-37a1-b3bd-018f47b95ac0.roa
Signing time: Fri 21 Feb 2025 11:48:52 +0000
ROA not before: Fri 21 Feb 2025 11:48:52 +0000
ROA not after: Thu 22 May 2025 10:48:52 +0000
asID: 30036
IP address blocks: 74.84.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:b5:06:72:95:2c:f8:e3:89:35:28:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 21 11:48:52 2025 GMT
Not After : May 22 10:48:52 2025 GMT
Subject: CN=f1bb9db4-2761-4184-9c8c-d00ab1c29082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:61:1c:e4:59:14:da:fd:9f:fc:cd:03:7c:87:
55:8e:c0:ef:cb:eb:77:89:c6:18:c2:b0:0d:f3:e7:
69:d9:a0:dc:ef:5f:41:45:30:3a:2a:b3:47:8d:cc:
77:6e:ae:46:8b:ee:a1:6e:c1:8f:f8:ce:59:7a:af:
0f:89:ee:c9:27:87:1c:1e:57:2b:83:56:87:ef:b5:
56:44:bc:24:2a:57:8b:db:0c:c0:d6:08:2c:76:d5:
77:4a:ae:81:b9:ce:f7:cc:0c:37:73:e9:7c:99:44:
1e:7c:ea:2b:d5:f8:32:ca:95:5e:ed:aa:a1:e8:71:
45:86:0f:e5:3d:fa:ce:3a:1f:f1:9e:6a:8b:ec:61:
51:07:90:58:88:94:d4:6f:01:d3:a6:5d:8b:f7:27:
06:99:8f:40:8c:86:5a:ff:65:9b:27:7b:07:be:b8:
79:a6:d3:cf:92:6d:08:47:5c:21:c2:c1:3f:14:7d:
fd:17:99:bf:cd:a2:35:3e:52:71:eb:9a:b6:2c:68:
1a:69:fd:91:e4:be:fa:aa:6a:52:63:a8:e5:78:6d:
e7:3b:f4:8f:9a:63:e2:ee:3b:3b:44:1f:32:57:8f:
d4:58:c9:6e:d2:75:89:dc:28:c6:28:90:c7:e5:07:
2d:ef:2c:bc:fd:68:6f:0b:92:54:1e:90:15:45:a4:
4f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:35:04:3D:38:D5:9C:13:8C:5E:57:7D:32:BE:D6:4F:50:B8:19:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1bdfc8b8-832e-37a1-b3bd-018f47b95ac0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
74.84.124.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:3d:39:84:e4:96:fd:cd:a0:3b:cc:a2:ef:84:f0:de:b2:6d:
90:35:22:e5:d0:56:8a:d0:f4:9d:10:9e:13:21:28:9d:42:25:
51:ae:dc:8c:06:85:31:d7:cb:67:4d:cc:e1:61:80:dc:27:99:
cc:ab:52:62:78:ac:dd:5b:ef:31:93:bd:d2:66:65:b8:c6:e7:
b3:08:bd:e1:34:54:d0:a8:4c:94:f1:37:7f:97:3a:e2:49:b7:
77:3a:e6:3a:3d:b5:ea:15:a4:63:61:5c:86:9f:77:d3:70:7d:
52:96:74:47:24:65:90:a6:9a:dc:1a:e1:2a:6f:8d:3c:f4:87:
13:aa:ce:81:d4:43:ef:db:71:a7:82:7f:b6:48:03:7d:0b:cb:
29:cf:9f:bb:4c:4c:e6:d1:a8:47:48:c9:89:c7:35:78:02:1f:
4d:dd:41:04:ff:6d:73:20:1f:fa:44:c4:67:17:4f:af:4e:cf:
ef:66:46:99:c3:ce:0d:cc:f3:16:a7:db:74:2f:68:35:3f:85:
1b:9e:f2:6f:fb:ce:bc:4d:15:f2:f9:20:2c:cb:88:9e:57:a6:
46:e5:1d:45:14:03:e0:03:48:fb:10:13:9e:3e:fa:7e:11:11:
10:0d:8e:e9:d5:1e:ed:8d:c7:12:11:a4:14:64:a8:85:55:87:
9f:06:62:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:53:47 2025 by rpki-client