Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c7b0b5dd-4e85-30e6-905d-d3dba5c8125b.roa
File: c7b0b5dd-4e85-30e6-905d-d3dba5c8125b.roa (raw, json)
Hash identifier: ayf2bqsAhJOsOtke9wFN6tke/f/MsfSMjd7sgYEFlDk=
Subject key identifier: 94:CA:A8:A5:E7:95:72:D9:62:74:B1:A1:A0:DA:02:3B:DC:DA:62:07
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848F4A60DC250D379B392C5E760
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c7b0b5dd-4e85-30e6-905d-d3dba5c8125b.roa
Signing time: Fri 21 Feb 2025 11:18:42 +0000
ROA not before: Fri 21 Feb 2025 11:18:42 +0000
ROA not after: Thu 22 May 2025 10:18:42 +0000
asID: 30036
IP address blocks: 74.84.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:a6:0d:c2:50:d3:79:b3:92:c5:e7:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 21 11:18:42 2025 GMT
Not After : May 22 10:18:42 2025 GMT
Subject: CN=38791c52-af47-4622-921f-679873dc55e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7b:4c:0f:03:2e:29:95:b9:ba:c5:13:b7:a7:
77:64:9d:9a:1d:52:44:9f:dd:9f:dd:82:a2:e8:08:
0f:25:50:00:c4:3b:d5:2f:ff:b9:88:64:90:15:31:
58:2d:b8:79:53:44:70:ec:7c:80:1e:ba:83:b2:54:
05:cc:50:b9:d7:1f:52:30:34:f5:ac:79:4f:82:69:
ca:f9:ee:8e:c0:1f:0d:f6:c1:69:7e:98:bd:cf:a6:
ed:97:66:2c:c2:f6:0d:95:09:6c:5e:32:2a:69:77:
1b:38:f1:89:3c:f4:f7:cc:f0:fa:0b:80:a6:24:ef:
f1:9e:b2:de:7f:d6:49:ef:9f:df:0b:86:93:3b:f4:
ea:11:e4:a0:73:c5:6c:ad:18:ba:ce:e2:e2:f4:5f:
3d:45:7c:4a:53:4d:63:10:96:0d:27:40:51:5e:6a:
3c:ce:55:8e:bd:fe:48:0c:e1:b2:f3:e9:51:f6:14:
04:e4:fc:17:6c:69:08:19:63:fe:ba:77:be:88:b6:
91:cf:87:15:6b:a8:b3:b0:bd:4b:68:c9:9f:d1:8a:
6d:bd:d4:63:20:d8:96:8c:34:43:85:c9:1e:3a:5a:
28:2a:db:f8:63:fc:47:98:4a:5c:be:10:2f:b8:25:
05:69:08:39:9a:c4:7e:54:11:ad:61:06:9d:c0:26:
e8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:CA:A8:A5:E7:95:72:D9:62:74:B1:A1:A0:DA:02:3B:DC:DA:62:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c7b0b5dd-4e85-30e6-905d-d3dba5c8125b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
74.84.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:b1:2b:35:14:11:ce:d6:16:c2:31:16:7d:cc:30:cb:3a:4e:
00:5c:de:8a:7a:a1:bb:82:70:72:39:c6:5b:e0:dc:d2:58:50:
69:f1:0c:0e:b8:74:fc:05:8d:a8:98:49:90:13:14:f3:9b:6d:
48:76:3a:e1:f7:bb:18:6b:6f:cc:cf:01:3e:7f:85:a5:e2:a3:
e4:28:46:6c:86:a2:e5:96:3d:a6:8e:65:d3:7e:6b:6e:b5:84:
e1:26:6a:44:3d:c1:a3:08:0e:aa:30:7d:fb:a3:e5:8f:0d:16:
44:69:62:ec:5b:bf:b2:cf:00:39:8a:14:84:29:9f:7c:75:79:
b0:67:bc:e0:4c:dc:ac:56:66:89:7b:1e:6b:72:df:a5:19:7a:
f4:23:19:8a:24:e9:b9:32:b4:1c:cf:db:3a:94:45:6d:a6:3e:
27:ad:75:12:f8:08:9c:27:d9:ed:4c:1c:53:6d:fb:8d:fe:57:
0b:55:f9:7c:1b:ac:0e:19:fa:3a:7e:22:e5:ca:63:b4:e0:a3:
1d:98:8c:2a:e2:be:2d:9e:0e:dc:75:3a:c1:17:9d:9f:9c:a6:
c4:9e:5a:1d:01:bd:1b:17:71:a7:bf:08:e2:87:cd:22:71:f6:
39:74:dc:06:76:5b:d7:27:87:74:e4:01:5b:4e:3e:56:f9:37:
25:52:ea:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:48:48 2025 by rpki-client