Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/b23fd0b4-c7c9-33af-8ebf-03cbc021ad17.roa
File: b23fd0b4-c7c9-33af-8ebf-03cbc021ad17.roa (raw, json)
Hash identifier: CLreqo0AAhT/OdMxa3K326tzYId2/2o0DRZBcPabPhc=
Subject key identifier: 40:F1:D6:59:BD:BA:65:8E:5B:3E:72:17:32:8D:94:FD:E3:04:AB:11
Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959
Certificate serial: 010D0C9F432858489A3B4EC98C779AF27AD2F580
Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/b23fd0b4-c7c9-33af-8ebf-03cbc021ad17.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 398420
IP address blocks: 74.126.174.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:4e:c9:8c:77:9a:f2:7a:d2:f5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=ae7229c7-52b7-4bc5-ac7f-0513a3b7ff95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:59:c7:63:82:eb:7c:db:19:ab:26:df:ea:0c:
59:ee:34:5a:2a:4b:2e:2b:2a:fe:d6:1c:d3:21:37:
bd:fd:36:7b:74:94:bf:df:0a:bb:29:e8:8b:55:d7:
0f:a8:e1:70:b1:9e:91:35:4b:e0:c3:c5:b8:28:7a:
d9:f1:15:26:b8:b9:e9:68:dd:8d:4a:87:41:69:3a:
42:fd:89:2f:cc:f9:9f:5d:42:c3:9e:cc:6f:78:cc:
79:35:29:19:c5:db:2d:c2:18:1b:bb:e6:54:ff:00:
89:56:2f:e1:4a:5f:9c:a5:bb:b0:cf:90:9f:73:ff:
77:01:45:02:d4:79:74:e6:ef:cf:8c:51:d5:e5:9a:
a0:04:55:0e:de:75:f2:58:3c:43:50:7a:34:6d:b2:
fb:f2:2a:35:23:35:35:af:f7:33:91:11:d5:95:3b:
bb:0a:60:fb:ff:7d:c2:48:4b:e3:a1:85:02:ac:fa:
bd:20:a9:ca:58:01:35:c6:c4:b6:cc:0f:ce:22:9d:
16:11:24:52:ae:5e:bf:79:27:a3:92:6d:fe:9d:12:
e3:a4:5b:33:e5:8a:00:29:6f:cc:3c:22:1d:a0:81:
db:c3:a0:7c:27:2f:dd:06:e6:fa:b7:43:33:ad:e8:
70:2e:3d:64:5c:f3:f6:7d:aa:fd:df:c6:9e:c0:3d:
ff:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F1:D6:59:BD:BA:65:8E:5B:3E:72:17:32:8D:94:FD:E3:04:AB:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/b23fd0b4-c7c9-33af-8ebf-03cbc021ad17.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl
X509v3 Authority Key Identifier:
keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer
sbgp-ipAddrBlock: critical
IPv4:
74.126.174.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:2d:7c:88:ac:ac:b0:50:56:be:28:da:3c:fc:73:56:21:ee:
23:ed:e3:72:71:34:58:a7:4e:2f:f4:c8:c7:52:52:ba:04:c6:
c4:ed:46:6d:d5:04:ec:00:54:8c:0b:1b:0e:05:6b:ae:f0:ae:
c8:89:9d:10:96:7f:28:27:d6:d5:6a:0f:47:75:63:88:d5:b7:
bd:0a:7e:6f:9d:84:81:a2:34:76:a3:c5:7e:3d:a4:f4:87:19:
93:83:3c:fb:d0:d5:2e:52:14:da:ff:2d:ec:3d:42:0b:30:bd:
7b:20:df:c6:3f:07:6c:5f:bd:67:02:19:5e:99:e1:46:87:01:
0d:6c:38:1b:7d:09:23:0a:e1:8a:08:d1:2b:56:11:30:3d:25:
1d:89:51:34:2b:cc:ff:dc:a8:ba:b3:b3:09:00:ec:38:c9:86:
af:65:f6:5a:44:c8:cb:be:f8:08:35:83:12:c8:a1:7b:da:cd:
85:78:8e:aa:d5:00:25:c3:8b:54:d5:04:33:1b:84:bc:6a:a7:
26:9f:bc:90:e6:9f:fe:59:b5:2e:4b:29:c6:fa:8d:e4:77:4d:
23:c2:35:51:78:8d:24:fe:c4:3b:17:75:4b:49:18:63:52:f3:
cb:9d:43:38:a2:a2:83:61:34:56:c2:2a:5a:4c:55:49:36:1c:
e2:6f:cc:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:51:29 2025 by rpki-client