Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/ae09800e-8132-3049-9920-56dcaa8f3da3.roa
File: ae09800e-8132-3049-9920-56dcaa8f3da3.roa (raw, json)
Hash identifier: l4S4WcAA+4dn0I8KBI6aQOXE9wxKm1gZMRcwoXVZR/Q=
Subject key identifier: B0:18:40:C8:32:75:DA:C6:08:4C:96:8D:E9:CD:45:23:C7:1F:14:AD
Certificate issuer: /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Certificate serial: 010D0C9F43285849393E70D4EE1E11FF935B42C0
Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/ae09800e-8132-3049-9920-56dcaa8f3da3.roa
Signing time: Tue 18 Mar 2025 01:00:38 +0000
ROA not before: Tue 18 Mar 2025 01:00:38 +0000
ROA not after: Mon 16 Jun 2025 01:00:38 +0000
asID: 18594
IP address blocks: 74.120.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:39:3e:70:d4:ee:1e:11:ff:93:5b:42:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Validity
Not Before: Mar 18 01:00:38 2025 GMT
Not After : Jun 16 01:00:38 2025 GMT
Subject: CN=b1fc4baf-e19f-499f-99bd-61debda02f24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:cd:0f:4f:f8:b1:a7:5c:65:89:b6:2d:b4:51:
c0:81:ad:7d:f4:d2:0d:ba:17:99:79:e0:98:ae:c8:
fc:4e:6b:f2:4a:d5:d4:40:bb:89:bc:86:0c:73:53:
6c:0f:ba:06:08:f0:be:ef:fe:f1:cb:58:26:9a:9c:
3d:ac:e6:b2:16:eb:cb:c9:37:19:89:e0:a4:d7:03:
8a:34:a4:00:83:8e:ab:98:3d:13:53:34:2a:dd:b9:
d2:39:89:8e:b7:da:29:6e:d8:44:32:d3:3b:72:28:
99:62:e3:fd:72:38:ec:d6:b1:40:80:b9:47:d8:9a:
3f:fc:9c:dc:23:c6:cc:65:b5:e3:69:db:d0:51:6d:
42:b2:7a:11:5b:a8:15:82:35:f7:94:86:4e:e7:10:
0b:f8:56:e1:76:c4:9c:6b:a4:ad:13:78:2b:88:dd:
74:24:e2:ae:05:90:8c:6a:d5:78:69:a0:3d:6f:da:
77:f2:68:a1:69:14:c5:9d:23:a2:f1:0c:ed:fe:7d:
92:9c:d4:7a:c9:9b:aa:06:22:89:4b:a3:c4:22:2a:
81:ff:fe:da:9f:ef:ac:c0:00:9c:5f:f0:a8:22:32:
73:6d:a2:3a:50:01:63:cf:94:b8:4d:60:24:91:3a:
48:0c:4c:77:f7:dc:8e:2e:c6:0b:ae:04:43:47:37:
56:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:18:40:C8:32:75:DA:C6:08:4C:96:8D:E9:CD:45:23:C7:1F:14:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/ae09800e-8132-3049-9920-56dcaa8f3da3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl
X509v3 Authority Key Identifier:
keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
sbgp-ipAddrBlock: critical
IPv4:
74.120.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:9a:46:4a:1b:12:60:36:32:de:7d:b0:d7:a5:d9:2b:23:54:
37:cf:92:77:c0:d7:34:79:44:c4:25:0b:b8:bd:21:74:e8:6b:
a7:7e:49:84:d1:7f:3c:8b:44:aa:8e:63:f6:cf:1e:17:98:2f:
87:cf:c6:71:b7:3e:aa:5d:26:0d:0d:d7:ef:14:e9:24:53:98:
cb:de:28:ba:27:bf:99:b2:84:43:3b:1b:77:7f:e2:36:dd:ca:
ce:d7:f7:e4:1a:45:fd:18:6a:fc:98:d9:21:a3:81:dc:f2:a5:
92:24:d9:06:46:ff:36:3f:3c:81:0c:c2:52:86:21:ae:ba:84:
6c:33:7e:79:c1:c0:62:77:b3:56:fb:9b:0b:3a:c4:96:3c:cd:
7e:f1:cc:e7:02:b6:ba:ad:bd:02:cb:fb:96:14:a8:7c:9f:7c:
e8:13:0d:2b:2f:ea:e1:60:23:40:d0:3f:c9:0f:97:5c:59:2c:
93:29:81:4a:f5:0d:f8:34:33:e2:50:5b:b1:a5:ef:12:3a:b0:
c8:b3:01:d8:72:c3:48:e5:1e:0d:db:be:03:b1:fd:7d:da:58:
86:e5:da:48:46:63:9c:9a:47:78:75:93:9a:a4:df:c5:5e:2d:
ed:96:3d:fc:af:66:45:56:8a:4c:5b:38:e2:04:91:93:21:49:
4c:ec:55:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:25:42 2025 by rpki-client