Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/dcdaaca3-d285-3cd8-a47c-dbbfe4a41dc0.roa
File: dcdaaca3-d285-3cd8-a47c-dbbfe4a41dc0.roa (raw, json)
Hash identifier: aP9gdZMVynZEx0ynGFHsZk6/HV89mntxT9nbmN8hNng=
Subject key identifier: 23:64:89:06:B3:23:A0:F5:FC:A8:7A:1D:52:0C:05:A8:64:84:BF:FD
Certificate issuer: /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial: 010D0C9F4328584870FAE86960FCFA306ECD5BA0
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/dcdaaca3-d285-3cd8-a47c-dbbfe4a41dc0.roa
Signing time: Sun 05 Jan 2025 07:22:58 +0000
ROA not before: Sun 05 Jan 2025 07:22:58 +0000
ROA not after: Sat 05 Apr 2025 06:22:58 +0000
asID: 1288
IP address blocks: 66.185.117.0/24 maxlen: 24
74.80.91.0/24 maxlen: 24
2620:171:4::/48 maxlen: 48
2620:171:e5::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:70:fa:e8:69:60:fc:fa:30:6e:cd:5b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
Validity
Not Before: Jan 5 07:22:58 2025 GMT
Not After : Apr 5 06:22:58 2025 GMT
Subject: CN=b80f6860-72f1-4c7a-8d9d-6330572a172e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:2c:a2:35:33:f0:08:70:08:e7:05:41:2f:c9:
4a:e6:6d:37:8e:88:3a:5a:81:8c:ac:9e:83:ef:fe:
95:70:0c:b3:e4:b4:9d:a3:b7:5e:cb:0c:d4:80:fb:
d8:6f:2e:37:36:1e:ef:5d:a6:4a:03:8b:f4:76:d7:
fe:d5:25:7c:c3:0e:a4:b0:d6:70:17:55:8a:06:d8:
31:bb:6e:9b:36:d6:a9:10:e5:8a:3c:b3:0c:26:04:
5a:37:e5:d6:12:67:b7:3b:89:b7:b8:a2:7c:aa:e4:
78:ed:f4:dd:2f:ed:06:8b:62:7e:38:a0:17:71:80:
80:50:1b:17:18:e8:ca:0b:99:f2:8c:9b:11:c3:6c:
a7:99:2a:9c:b7:e6:68:7b:ca:e0:78:9f:04:b0:38:
79:f8:4e:81:67:75:26:75:3e:77:32:7d:ad:41:1c:
5a:ae:de:3d:9e:e6:1d:09:60:9d:a3:db:81:85:7d:
50:c7:a4:a8:91:7f:e7:bd:0a:aa:20:46:44:66:78:
c4:a3:99:b6:50:35:63:69:28:81:a1:4c:3f:11:4d:
ae:01:26:88:80:fa:ec:3c:55:2e:22:33:46:39:fc:
c7:69:1e:dc:d9:6d:43:c4:3f:5f:45:5f:11:f8:82:
65:dc:b3:9a:7c:1d:79:17:9b:36:10:ad:c6:3b:55:
bb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:64:89:06:B3:23:A0:F5:FC:A8:7A:1D:52:0C:05:A8:64:84:BF:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/dcdaaca3-d285-3cd8-a47c-dbbfe4a41dc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
X509v3 Authority Key Identifier:
keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
sbgp-ipAddrBlock: critical
IPv4:
66.185.117.0/24
74.80.91.0/24
IPv6:
2620:171:4::/48
2620:171:e5::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:77:2d:55:2f:5d:9c:f2:6b:16:6f:a2:19:27:e4:2e:01:36:
ad:0e:fe:2e:f7:8a:63:6a:15:82:f3:e9:5c:fd:ac:23:4a:40:
80:ae:80:60:40:97:b0:b2:69:50:0d:7b:d1:e5:75:41:2e:f9:
43:b8:c1:09:cd:7c:34:34:d4:82:91:fc:c7:06:20:1f:57:84:
8c:f8:3d:45:76:75:90:1f:31:47:c4:f7:c3:22:57:89:8a:78:
64:20:21:88:f5:4f:1d:68:f4:12:11:7d:d5:83:58:71:9e:1f:
cb:54:d8:5c:97:58:c3:57:6e:a7:f6:9d:88:2a:f9:a3:2f:c8:
54:8b:69:94:60:5c:d1:f2:36:47:df:1c:a7:51:ea:51:92:3b:
36:50:d8:6a:4e:bd:0b:19:57:6a:7b:c6:8d:77:de:dc:5e:fd:
97:ad:68:b3:6e:2e:4b:ba:4a:7d:7f:98:5d:b4:ec:e4:c8:56:
75:ec:76:f1:c8:21:14:10:7a:14:17:e9:57:64:31:6e:1c:26:
8c:6d:ea:49:5a:a1:4d:40:77:bb:57:b9:bd:d0:05:73:4d:ed:
40:64:8f:76:c4:0a:02:ac:ea:9e:c7:50:48:d9:91:33:db:c8:
b2:26:8e:f3:75:7d:5c:ba:60:60:89:39:84:57:b1:f4:0e:d4:
5a:73:56:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:45:09 2025 by rpki-client