Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/1f464f0a-ee05-3d80-926a-ab7d9b411e56.roa
File: 1f464f0a-ee05-3d80-926a-ab7d9b411e56.roa (raw, json)
Hash identifier: BQClKw/cWLuN0S1prpYYS4rct9hNTKjfde5l7fCGY50=
Subject key identifier: 1D:7C:3F:D1:34:A2:78:82:87:4A:61:BF:A1:90:5A:0D:B5:C5:63:FF
Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Certificate serial: 010D0C9F432858491AA6B959B117441D5264C980
Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/1f464f0a-ee05-3d80-926a-ab7d9b411e56.roa
Signing time: Fri 07 Mar 2025 02:00:39 +0000
ROA not before: Fri 07 Mar 2025 02:00:39 +0000
ROA not after: Thu 05 Jun 2025 01:00:39 +0000
asID: 394708
IP address blocks: 74.126.72.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1a:a6:b9:59:b1:17:44:1d:52:64:c9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Validity
Not Before: Mar 7 02:00:39 2025 GMT
Not After : Jun 5 01:00:39 2025 GMT
Subject: CN=0c66a917-174f-4052-a775-6eee70c3e3e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:29:d8:8b:38:38:74:c2:d2:75:b9:c1:df:9f:
f7:11:e1:05:d1:3d:fd:30:33:94:ff:c9:82:c2:e7:
14:98:65:50:42:ca:11:fa:6b:14:02:3f:2b:f5:83:
8d:0c:88:a9:87:d2:e8:e3:5c:1c:ef:aa:c0:a5:1e:
33:67:9a:16:91:be:be:4d:91:99:a9:de:94:51:8e:
97:62:44:1e:26:82:1b:66:fc:2c:68:b3:4e:c9:c4:
2d:39:da:b3:3d:9d:0b:6e:43:fa:06:62:91:4a:dd:
bf:0d:e8:31:9c:3a:37:ed:2b:87:ed:24:6d:01:fa:
ca:00:ea:ae:86:dd:84:46:8e:1b:c1:a2:5f:d8:36:
a7:db:d1:61:a2:a0:0a:ef:39:1f:86:d1:d8:13:2f:
33:ab:06:07:99:24:7a:4e:00:31:bc:fc:e8:b3:58:
c6:33:3b:d5:03:e2:28:f0:91:7b:ec:45:3d:02:9a:
4a:20:9d:fe:fe:ad:7c:d0:d8:c1:57:c6:f0:80:bb:
eb:d3:f0:6c:f6:17:3c:d7:1d:98:8f:cc:6c:3e:8d:
46:e4:91:3d:2b:39:0b:bb:e3:51:3f:9b:80:b2:6b:
6a:bd:95:4e:4c:bf:58:9a:02:fa:67:89:30:59:b6:
e0:29:d1:66:24:66:c8:08:44:aa:93:84:52:6f:cd:
35:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:7C:3F:D1:34:A2:78:82:87:4A:61:BF:A1:90:5A:0D:B5:C5:63:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/1f464f0a-ee05-3d80-926a-ab7d9b411e56.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl
X509v3 Authority Key Identifier:
keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
sbgp-ipAddrBlock: critical
IPv4:
74.126.72.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:dd:1b:ca:e5:c9:89:59:ad:7a:91:f2:c2:a6:db:a4:6e:64:
e6:29:89:3b:28:99:bd:d6:59:fe:47:8b:9c:94:06:90:d0:05:
e7:53:a8:04:21:1a:c5:a1:d7:eb:d2:a0:34:c9:0d:98:8c:8e:
3a:b3:07:2d:5f:d5:d5:25:ba:1d:a7:5f:63:3b:f0:44:dc:0a:
79:21:f1:32:cd:01:e4:6d:e2:2b:32:07:92:13:8c:44:45:63:
5c:39:98:fa:8f:3d:e3:d9:08:a2:24:13:50:c0:64:12:95:12:
a4:7c:d1:1b:6f:08:5b:74:e8:71:ab:97:42:72:d6:83:b8:22:
ae:9c:5a:58:33:b3:df:58:fe:07:97:85:9c:4d:f6:75:58:ec:
43:ee:c9:39:7a:0e:53:5d:08:7b:9c:77:8b:f4:d0:7c:c1:51:
11:85:18:e2:2e:a7:c5:bc:68:29:dd:14:da:06:11:c7:1c:11:
ea:5f:83:7c:b1:14:f2:27:b9:8d:c1:c7:bb:b8:10:ce:28:4e:
f5:ab:33:fd:2a:a2:cc:45:d4:93:55:a7:29:2a:97:60:80:ff:
a7:8a:d5:78:f2:e1:ab:45:4c:51:f1:bb:24:c9:40:37:b4:39:
f4:c3:80:78:86:24:eb:7e:7d:b7:fc:61:28:67:12:5b:91:76:
39:d4:a0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:41:55 2025 by rpki-client