Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/408f67a4-965c-3201-9f19-0975f3af94df.roa
File: 408f67a4-965c-3201-9f19-0975f3af94df.roa (raw, json)
Hash identifier: RZMtoc1Lu+I4lvPOvX+57vUgauQ9RVatAii4BPyv6V8=
Subject key identifier: AF:29:F1:01:62:B8:94:E6:4A:E7:3B:E2:70:4E:0C:63:84:A1:3F:AE
Certificate issuer: /CN=b9ea3438-4142-4de2-a912-7b081a51b42d
Certificate serial: 010D0C9F43285848DEA13405D4D283C59F8BCD00
Authority key identifier: 24:39:62:5E:88:76:78:F6:73:98:11:AD:E4:48:16:6D:39:36:AF:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/408f67a4-965c-3201-9f19-0975f3af94df.roa
Signing time: Thu 13 Feb 2025 14:00:50 +0000
ROA not before: Thu 13 Feb 2025 14:00:50 +0000
ROA not after: Wed 14 May 2025 13:00:50 +0000
asID: 47870
IP address blocks: 74.116.104.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:de:a1:34:05:d4:d2:83:c5:9f:8b:cd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ea3438-4142-4de2-a912-7b081a51b42d
Validity
Not Before: Feb 13 14:00:50 2025 GMT
Not After : May 14 13:00:50 2025 GMT
Subject: CN=406050b6-0c37-4a87-a8ad-bea64e4eccf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:80:9d:ab:a3:96:8a:58:77:43:ce:c4:b1:4d:
67:4b:15:e4:46:87:cf:63:1d:d4:11:f4:73:1a:d8:
ac:7e:6c:38:1e:e0:70:b0:5b:ed:43:8e:ce:6a:88:
22:35:e1:a2:45:4e:d1:56:db:e2:c8:99:16:12:b1:
f0:f1:7e:29:53:31:1f:c4:19:4a:a3:cc:52:a7:9f:
0b:bc:5e:34:7a:74:e5:3d:74:2e:b3:a6:e0:c2:35:
01:ba:df:d9:41:3a:4e:92:c4:9c:9a:b7:e3:94:75:
df:23:33:cd:04:3a:ce:0c:61:f0:1a:d4:b1:3b:bf:
e2:f5:6f:85:c1:47:7a:4f:09:a5:5f:30:1a:02:17:
38:ed:d8:ac:36:53:3b:7c:52:07:65:0e:5f:38:4a:
54:b4:13:90:b7:c5:06:57:3b:33:8a:47:2c:81:10:
b5:88:cd:3b:77:56:62:61:31:7d:07:2e:e3:01:2d:
d2:75:8a:51:e9:64:49:9e:3a:5d:67:3d:5b:97:97:
08:c1:9d:4c:6d:59:d5:c5:b2:58:41:76:dc:5d:ca:
08:47:90:f0:2c:b9:30:2d:c0:09:32:45:70:d6:3c:
2c:f8:40:1d:5f:0f:5c:21:b6:3a:43:ff:40:7e:3e:
dc:ac:ae:43:af:56:2f:23:70:6e:8c:9d:2d:de:28:
3b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:29:F1:01:62:B8:94:E6:4A:E7:3B:E2:70:4E:0C:63:84:A1:3F:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/408f67a4-965c-3201-9f19-0975f3af94df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/b9ea3438-4142-4de2-a912-7b081a51b42d.crl
X509v3 Authority Key Identifier:
keyid:24:39:62:5E:88:76:78:F6:73:98:11:AD:E4:48:16:6D:39:36:AF:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d.cer
sbgp-ipAddrBlock: critical
IPv4:
74.116.104.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:4e:35:62:a2:fc:e9:8b:5e:3e:db:99:1f:3c:ae:1e:b1:26:
62:fd:b8:1c:ea:90:44:51:22:31:02:a2:a9:6d:c7:d7:4a:1b:
53:c6:4a:d5:76:10:e0:2a:8b:9d:c2:cc:1f:46:f4:c6:6d:61:
3b:e9:bd:41:e8:58:6e:23:b6:6d:4c:0e:94:2c:50:38:db:9a:
48:f3:8e:66:f3:0a:9f:46:3f:0f:27:f2:63:15:37:49:bb:c5:
db:b6:9b:44:7b:ff:c0:b3:55:e8:f4:d8:6a:f6:08:78:a7:ee:
3e:52:d4:fa:ae:c4:6f:3d:0a:a9:ce:3c:a9:c8:1d:85:da:99:
ea:8b:6d:37:9c:3d:10:5d:f2:85:5e:98:fb:ff:18:8e:18:5e:
b4:cc:4e:06:06:a9:d7:ec:51:8e:b1:f5:ce:d0:ba:2b:54:c8:
fa:ac:b1:20:89:79:8d:b8:f4:17:71:e6:8e:f9:81:ef:60:3a:
73:18:6c:37:57:a1:65:c1:2d:55:e5:32:51:40:fc:b3:92:88:
ac:df:cd:dd:91:d9:0d:76:a0:ce:9b:5b:88:d0:0b:80:ba:36:
c6:5a:2a:d5:b1:c0:71:b5:83:e3:67:1a:37:b9:97:c4:6f:98:
b2:de:86:7a:0d:17:b6:bf:a1:61:9e:b3:31:14:79:67:6e:22:
cd:64:2b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:50:52 2025 by rpki-client