Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/2b2681df-c6c5-3cf8-b2fa-c5e90358ea9a.roa
File: 2b2681df-c6c5-3cf8-b2fa-c5e90358ea9a.roa (raw, json)
Hash identifier: NI5We7g/Kwu4NJbm79ZPNa5AsIOkFs382g0iAjl5KFs=
Subject key identifier: 83:8D:01:43:5B:D6:2F:D9:65:D6:8C:6E:41:6E:32:E6:66:3A:B4:65
Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959
Certificate serial: 010D0C9F432858489A3B4B2E59CE82D72E612D00
Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/2b2681df-c6c5-3cf8-b2fa-c5e90358ea9a.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 398420
IP address blocks: 74.126.172.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:4b:2e:59:ce:82:d7:2e:61:2d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=884bbf3c-a4f9-47a7-8728-8e64adc9ce9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:93:8f:d9:df:48:c2:62:23:a5:49:04:d2:4e:
77:16:1b:ec:5e:7d:af:aa:89:d7:4a:d3:30:8e:36:
4b:19:ee:8c:e1:f4:18:14:dc:e2:76:51:07:83:fc:
ae:bd:e2:56:b7:3a:4b:7a:60:11:a5:21:a5:c0:70:
94:22:a1:28:ca:50:cd:64:78:31:83:70:02:6e:03:
6a:26:e4:1c:b8:55:a0:60:fa:fc:9f:c3:0c:08:72:
78:1c:fb:0a:f5:57:6b:48:65:23:ef:cc:af:6e:a7:
76:b6:2a:a8:b4:e0:e7:79:66:8f:78:f4:34:bb:3b:
08:c3:0c:7d:62:aa:9a:07:00:1e:8e:b2:93:61:29:
aa:9a:44:e9:9e:df:42:a7:11:49:c0:62:87:45:52:
f6:df:c0:8b:17:02:dc:29:15:d8:f6:a5:d9:da:d0:
85:5b:f3:a2:de:ea:f3:f2:66:1f:dd:dd:06:29:8a:
17:6c:a1:6c:19:f6:14:ee:b8:87:55:7c:53:bc:cc:
b0:15:cc:60:84:2c:bc:00:61:64:8e:b5:46:d3:2b:
d2:33:97:22:9c:07:1e:d9:04:b2:68:48:8f:cd:08:
44:f5:5c:67:c9:4b:11:28:fd:37:99:35:b1:a0:87:
84:d2:c1:20:7d:e6:c8:38:82:54:ef:94:8c:8f:65:
62:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:8D:01:43:5B:D6:2F:D9:65:D6:8C:6E:41:6E:32:E6:66:3A:B4:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/2b2681df-c6c5-3cf8-b2fa-c5e90358ea9a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl
X509v3 Authority Key Identifier:
keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer
sbgp-ipAddrBlock: critical
IPv4:
74.126.172.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:87:c6:b3:36:8f:ae:ee:32:21:ef:a8:74:d2:45:65:a9:04:
31:00:4a:ab:16:1c:cb:3a:55:5d:b3:8c:71:97:e7:32:a3:2f:
ad:3f:ca:06:6e:ac:28:e0:65:a4:fa:3b:a8:8c:81:19:a8:02:
4f:b2:06:61:60:12:b5:11:02:60:f0:da:2f:52:b5:66:cc:fb:
93:ca:8c:e5:18:b1:4d:ec:72:38:4b:79:19:32:1d:59:a9:e1:
ab:4d:20:ab:5b:5c:81:29:d8:91:48:72:7e:f1:64:7b:3e:38:
7e:ff:02:c9:1f:97:3f:a2:99:24:7d:01:26:3b:d3:dd:7a:f6:
01:c0:5a:4a:25:9f:d4:32:8e:a7:3b:9e:4e:e1:5f:64:f9:03:
cb:e5:80:ee:fa:66:51:7e:cd:9c:59:d4:bb:a5:f2:4e:c9:59:
9f:cb:5d:c7:65:f6:cf:ae:bf:de:0b:a1:ba:ec:7d:86:72:05:
8a:eb:0a:46:cd:42:69:7c:3a:eb:9d:85:14:33:07:d6:05:9d:
0e:c6:84:23:4e:8d:e9:8a:ff:f4:47:97:9e:39:41:ed:ba:f0:
b1:58:0b:6c:b6:3e:0a:89:d3:07:99:1f:45:10:06:dd:fb:31:
42:59:42:bb:af:aa:8d:06:91:4c:40:ba:cf:c3:82:5e:98:9d:
f2:dd:a1:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:32:00 2025 by rpki-client