Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/74f2a10b-925e-38b0-81ad-f1d909f42057.roa
File: 74f2a10b-925e-38b0-81ad-f1d909f42057.roa (raw, json)
Hash identifier: MCq7z8nZ56yfpzN/q5xflsL9BInq6lIp+Yo4tGNOEpA=
Subject key identifier: A6:5F:F1:5F:47:F2:9C:7E:94:F2:FD:CB:2B:7D:9E:AD:1A:7E:7E:36
Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad
Certificate serial: 010D0C9F432858493C092C9F44A355FCC3563A00
Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/74f2a10b-925e-38b0-81ad-f1d909f42057.roa
Signing time: Wed 19 Mar 2025 01:00:40 +0000
ROA not before: Wed 19 Mar 2025 01:00:40 +0000
ROA not after: Tue 17 Jun 2025 01:00:40 +0000
asID: 35908
IP address blocks: 74.222.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3c:09:2c:9f:44:a3:55:fc:c3:56:3a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad
Validity
Not Before: Mar 19 01:00:40 2025 GMT
Not After : Jun 17 01:00:40 2025 GMT
Subject: CN=5f2d39b3-3c2b-4995-8c52-842afa40c9d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1f:d8:20:ae:1c:f3:fe:61:4b:4d:77:d9:07:
24:9c:e1:30:7e:36:09:94:81:63:81:56:d7:e6:05:
73:13:cf:98:97:a0:f4:e1:2d:e2:20:fb:24:ad:a8:
28:39:15:2b:97:ef:d1:9e:2b:86:20:09:ae:4e:cc:
60:1b:85:ee:80:17:57:fc:63:47:46:95:bc:7a:3d:
3b:c8:af:e2:de:29:27:5d:3a:34:b8:32:57:88:8e:
2a:ef:db:4d:5c:be:db:f2:90:3e:1f:43:4c:12:9f:
48:70:c5:c6:0a:4a:af:c2:a9:1f:94:35:fa:0d:42:
c4:c4:2e:c8:ec:db:0c:e5:76:c4:3d:7c:58:f0:70:
33:45:7d:86:7f:42:ee:43:3d:b4:ad:5b:52:9d:d4:
dc:27:a6:7b:78:18:77:2f:89:d5:c3:02:fe:79:5b:
77:05:81:46:85:f8:3a:b1:53:0f:11:c3:d3:b4:74:
38:9b:80:a6:09:66:0c:2f:37:cb:52:8c:d9:3a:18:
f6:28:9f:85:57:fd:59:e7:4b:c8:ab:74:88:97:eb:
64:df:a6:2c:e7:b9:b2:a2:3c:55:69:0e:bd:65:e8:
29:3c:50:82:0f:75:18:9c:b6:ec:87:c4:17:ee:e3:
d1:02:2d:24:19:3c:8e:4a:e4:ef:90:11:7e:51:d9:
ba:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:5F:F1:5F:47:F2:9C:7E:94:F2:FD:CB:2B:7D:9E:AD:1A:7E:7E:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/74f2a10b-925e-38b0-81ad-f1d909f42057.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl
X509v3 Authority Key Identifier:
keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer
sbgp-ipAddrBlock: critical
IPv4:
74.222.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:4b:f4:0a:4f:00:09:e7:38:c1:c8:ec:ee:dc:40:3c:ac:95:
9d:8d:45:e9:63:10:6d:bf:c1:2c:df:4d:01:63:1f:dd:e0:2f:
15:87:21:b6:2b:8d:75:c2:90:df:bb:45:56:8e:ec:68:05:f5:
6d:e9:30:10:2e:fe:87:c8:07:82:54:10:8b:f9:3f:ad:a6:92:
c0:f4:c8:a5:43:7d:68:12:b7:4a:a5:58:c4:84:8c:71:a8:d1:
d9:02:25:40:f7:a1:7d:a5:b4:d4:d2:d3:35:cc:4b:09:21:0c:
0a:f6:69:1e:12:17:be:22:7d:98:31:34:f5:eb:cf:e0:7a:5a:
ec:71:a3:80:e9:fc:09:76:19:2d:6c:16:de:da:2e:44:ae:dc:
67:37:b3:2e:28:8e:58:35:b3:e9:b1:e7:b3:d0:1c:a5:5f:3e:
d2:80:be:ff:f5:d4:e3:97:09:4e:7d:d2:38:5b:85:02:97:50:
83:03:20:87:6d:5d:7f:c6:43:a5:d0:96:fa:e0:31:26:d8:ba:
0c:81:e8:77:6b:14:29:e0:94:14:79:a6:4a:1b:8a:8e:79:24:
9a:23:98:2a:83:4d:7b:c6:a4:3f:f4:67:31:9a:18:50:cc:10:
24:fa:b4:54:bf:af:91:0d:e7:f7:95:10:70:27:ae:5f:c1:d4:
5f:bd:08:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:17:40 2025 by rpki-client