Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/abf7ba58-34fa-38d0-9ff3-bcfab1cc7ab3.roa
File: abf7ba58-34fa-38d0-9ff3-bcfab1cc7ab3.roa (raw, json)
Hash identifier: U7WKd5tdeLyWV/0tsXHyKngy+S74RzSH89UbZ03IlH0=
Subject key identifier: CD:B6:42:A7:4A:76:AA:59:28:9B:D5:E9:37:7B:D3:36:EF:D8:9F:CA
Certificate issuer: /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial: 010D0C9F43285848FD56C7DA0A47ED96ED777380
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/abf7ba58-34fa-38d0-9ff3-bcfab1cc7ab3.roa
Signing time: Mon 24 Feb 2025 14:00:52 +0000
ROA not before: Mon 24 Feb 2025 14:00:52 +0000
ROA not after: Sun 25 May 2025 13:00:52 +0000
asID: 396982
IP address blocks: 74.221.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:56:c7:da:0a:47:ed:96:ed:77:73:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Validity
Not Before: Feb 24 14:00:52 2025 GMT
Not After : May 25 13:00:52 2025 GMT
Subject: CN=069b3fc3-c6aa-4312-9dac-e6ae34ae4266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a9:52:b0:25:b5:6d:fe:7d:14:2a:76:4d:3b:
30:73:ed:54:9a:aa:65:d4:8f:f6:47:19:27:c9:66:
db:45:79:38:32:18:f4:32:02:29:0b:55:52:96:e1:
62:3a:e1:70:3b:63:17:3b:7a:a6:62:58:7e:0c:f3:
cb:61:e8:d7:cc:b1:78:d3:ae:ac:d0:a9:08:5d:8f:
b5:45:80:b4:5d:bd:88:1f:19:c6:7d:89:50:a8:ea:
6c:5f:3c:33:cc:dc:e2:23:08:09:af:d3:60:0f:6b:
da:75:9b:40:43:63:2c:2a:41:76:75:e2:2f:e9:b7:
7b:ef:0b:d4:72:6c:23:2a:4c:77:12:f5:f1:39:d4:
bf:63:4d:dc:e6:8f:24:df:40:a1:e6:8b:0a:5b:4d:
df:6a:7f:35:ba:a7:23:4a:b1:19:ec:2b:ee:50:7e:
15:29:1a:7a:2e:44:fd:57:08:21:bd:74:e8:6d:5d:
8f:5a:ae:86:c1:ee:25:14:18:2c:8e:77:31:39:02:
69:08:6c:1d:90:a7:42:8d:e5:ad:61:3d:d1:25:da:
a6:dd:c0:d2:cb:80:a0:b2:e2:71:ce:15:68:ca:b0:
ae:e1:d5:8d:59:12:a6:96:56:df:27:da:aa:e7:20:
ab:c7:07:75:f6:4e:83:e7:c1:10:f7:b5:a4:93:29:
bc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B6:42:A7:4A:76:AA:59:28:9B:D5:E9:37:7B:D3:36:EF:D8:9F:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/abf7ba58-34fa-38d0-9ff3-bcfab1cc7ab3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
X509v3 Authority Key Identifier:
keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
sbgp-ipAddrBlock: critical
IPv4:
74.221.134.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:5d:82:2a:0d:af:7f:b2:14:c1:bb:90:52:4c:d9:65:e3:d5:
a0:62:9d:9c:77:46:27:05:19:fc:66:33:58:8d:56:ee:7a:02:
99:b2:f3:66:74:88:fe:54:89:19:31:33:99:ab:ef:9c:9a:a0:
63:b6:38:63:fd:e5:24:d1:e7:7d:1c:6d:34:1b:fd:4a:e9:35:
5c:ef:65:51:9d:0c:77:62:9d:6a:3d:64:53:6a:8a:19:c4:92:
1f:6b:e8:9d:fe:3f:a6:9f:4f:e3:c8:fc:05:4f:92:50:af:78:
76:74:e0:ae:eb:82:ad:d6:0b:48:df:37:46:5e:e3:9d:ac:44:
82:e8:0c:17:ba:a4:a9:ca:ad:75:35:38:31:b6:b1:82:03:3d:
82:c2:07:0d:14:d0:0b:6e:75:dc:1b:4d:b8:6b:b8:e8:10:10:
6d:1f:26:2a:2c:6d:87:32:36:fa:e3:69:80:20:12:1e:c9:a5:
01:d6:7b:c3:79:8d:c7:8e:11:a6:50:49:ce:f3:2a:62:20:8f:
d4:99:b9:ff:34:be:3e:66:7c:98:2f:08:f0:e4:48:b1:e3:ea:
fd:5b:0d:e4:9d:07:c6:90:db:99:37:ab:4e:7f:ed:c2:75:eb:
ae:a2:8e:e6:d8:ee:90:dc:00:7b:40:71:68:22:2e:75:c2:b3:
3d:db:6e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:59:59 2025 by rpki-client