Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/84e5e7fe-bf1f-31d5-9386-4bcacf5c2084.roa
File: 84e5e7fe-bf1f-31d5-9386-4bcacf5c2084.roa (raw, json)
Hash identifier: Qig9BvdVSOxCmKm6RT4VZ2+UL/uSiPBpcslOADi4cXY=
Subject key identifier: A5:BF:25:B9:B8:BE:C5:FF:8B:E9:E1:88:70:A3:9D:22:2F:7D:0D:53
Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959
Certificate serial: 010D0C9F432858489A3B4AE5B4BC47CCBD4C9B80
Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/84e5e7fe-bf1f-31d5-9386-4bcacf5c2084.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 398420
IP address blocks: 74.126.162.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:4a:e5:b4:bc:47:cc:bd:4c:9b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=ff5f552c-ce79-47a1-b810-b97085595202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8b:04:4c:db:c2:0a:64:13:79:b9:af:26:bc:
37:6e:f7:eb:b5:57:f2:de:ec:f0:15:e2:91:0a:60:
7a:b9:1c:8d:3d:d2:93:fe:31:4c:d6:33:56:ff:cd:
51:0a:46:82:21:1e:48:8b:3f:d8:89:af:22:57:c7:
25:ea:15:17:fe:c6:d2:05:6f:15:7f:8b:c4:62:8b:
d9:0c:5c:2b:d5:8f:28:6e:11:db:e0:77:96:9d:1b:
1e:46:2b:64:df:e0:7d:bc:86:c0:e6:bd:92:41:f2:
55:4c:c3:1a:74:96:11:f0:3f:54:25:e7:78:6c:75:
d7:47:56:89:9d:f5:e9:05:d7:b1:6d:b4:03:db:79:
93:52:6b:bc:57:d6:31:d7:1c:5e:36:07:6f:ec:f0:
ec:fe:64:6e:87:d3:dc:b0:98:2b:97:44:a1:cc:18:
28:d2:7b:1a:15:40:76:b6:fd:92:35:55:05:32:f0:
09:6a:a9:07:85:92:45:a4:38:3b:4a:44:46:17:34:
d9:41:f7:45:45:3b:32:5d:e3:cb:16:6f:ee:a7:7a:
0d:2b:6b:ec:e4:c0:6e:7e:ae:cd:66:50:aa:73:8b:
0a:28:d1:b5:d8:cd:18:01:02:29:bd:ee:3e:4e:e0:
a5:02:6e:bb:d2:52:2a:05:c1:20:c4:5c:5c:d6:c4:
b1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:BF:25:B9:B8:BE:C5:FF:8B:E9:E1:88:70:A3:9D:22:2F:7D:0D:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/84e5e7fe-bf1f-31d5-9386-4bcacf5c2084.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl
X509v3 Authority Key Identifier:
keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer
sbgp-ipAddrBlock: critical
IPv4:
74.126.162.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:33:d6:de:55:93:63:05:9c:f9:f5:b4:3a:47:09:48:3c:23:
8d:cf:29:d0:41:fa:8c:2a:6d:80:6f:66:c8:66:e4:4b:36:b3:
bd:00:18:c9:1d:73:5a:21:d8:6f:d4:01:78:f0:de:8b:d0:39:
22:3f:27:b2:7f:73:bc:d0:35:3b:b8:1a:7d:5d:7e:71:63:11:
0a:6a:4c:51:fe:d3:d2:a3:f4:73:04:6e:27:ef:94:14:02:af:
42:35:b1:fd:81:a8:91:03:9d:81:17:08:41:6e:9f:df:c0:37:
ad:0b:a7:24:5b:5c:45:3f:c4:f1:da:1e:41:d5:59:78:97:37:
ae:d9:0c:03:74:e4:62:50:1d:a7:24:7d:82:ea:38:98:4c:f3:
98:58:c8:06:d3:0f:00:fb:6c:31:28:1e:77:d1:a1:f0:af:a3:
af:92:b6:9c:28:8d:98:f8:43:02:8e:ff:cf:a8:d1:0c:ee:03:
b9:f1:9c:ad:b3:65:17:fc:3e:3e:1a:35:45:55:b0:8f:de:c8:
a1:df:97:8f:e7:4e:3a:4d:e1:07:53:4b:30:6d:df:09:35:ce:
d6:52:e5:b4:6d:b1:25:c8:38:9b:80:fd:b5:00:05:c5:fb:7b:
10:e0:bb:a7:fc:0d:08:dc:87:e1:ce:3a:aa:51:1f:56:d9:d8:
ac:27:09:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:39:41 2025 by rpki-client