Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89/23f526c9-4036-38e9-b9d1-dcfd34b53a28.roa
File: 23f526c9-4036-38e9-b9d1-dcfd34b53a28.roa (raw, json)
Hash identifier: 6PFWDciVWbxYZD72dKqpaIpdF4iYIFVyDKOrrk8fGJ4=
Subject key identifier: 23:28:C7:0B:CF:AD:C6:51:5F:A9:C2:39:D4:B7:9A:B0:E9:A4:F7:50
Certificate issuer: /CN=8c1d3b57-4da4-4452-8b5e-9b5248494b89
Certificate serial: 010D0C9F43285848C6E636E983192AFD990EE780
Authority key identifier: 46:EA:F7:B9:84:1B:13:7C:CD:CC:1F:DD:91:4A:23:8D:30:F9:29:FF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89/23f526c9-4036-38e9-b9d1-dcfd34b53a28.roa
Signing time: Wed 05 Feb 2025 02:00:39 +0000
ROA not before: Wed 05 Feb 2025 02:00:39 +0000
ROA not after: Tue 06 May 2025 01:00:39 +0000
asID: 16655
IP address blocks: 74.205.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c6:e6:36:e9:83:19:2a:fd:99:0e:e7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c1d3b57-4da4-4452-8b5e-9b5248494b89
Validity
Not Before: Feb 5 02:00:39 2025 GMT
Not After : May 6 01:00:39 2025 GMT
Subject: CN=6a36b1b2-6974-437b-a305-5414e173352b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:07:c3:02:e0:72:8c:aa:81:8c:24:95:c7:f0:
85:65:cd:53:94:90:0a:8a:5a:52:ea:56:2b:80:eb:
57:3b:1d:45:43:a3:ad:82:89:be:b3:ee:75:02:2a:
dd:a8:dc:10:d5:29:06:6d:bf:e6:cb:bb:4f:0a:8e:
0f:78:49:ca:89:8e:94:1e:af:05:ab:01:e8:4d:04:
8e:79:6e:95:96:36:89:c1:6c:7d:19:bb:85:09:c0:
ec:c4:53:35:e9:45:c9:f2:b3:e5:d7:d1:89:e2:34:
ba:04:97:45:07:f3:10:2c:ed:e4:18:59:34:c9:38:
01:8e:5b:4e:55:85:11:6c:dc:9f:7c:bb:56:4d:4f:
73:a7:9f:20:b9:48:93:e7:97:5e:bc:d4:1c:35:ce:
84:63:b1:af:d2:02:bd:31:49:27:fd:8d:72:f0:2d:
1b:2e:77:09:ab:e5:29:74:f3:83:a6:5d:8a:92:5c:
b6:9c:8d:fd:c8:86:b6:29:74:2c:e8:ae:d4:0d:9e:
ed:e6:f1:ef:9f:0c:81:fa:38:17:66:cd:14:9a:a8:
06:c9:9a:2d:c4:f1:c7:06:96:cd:42:b9:d8:f0:81:
1b:55:eb:69:17:3a:35:32:b3:5a:fe:cd:31:d8:9e:
4c:8b:38:c2:7a:8b:39:44:65:22:45:07:c4:98:c2:
87:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:28:C7:0B:CF:AD:C6:51:5F:A9:C2:39:D4:B7:9A:B0:E9:A4:F7:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89/23f526c9-4036-38e9-b9d1-dcfd34b53a28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89/8c1d3b57-4da4-4452-8b5e-9b5248494b89.crl
X509v3 Authority Key Identifier:
keyid:46:EA:F7:B9:84:1B:13:7C:CD:CC:1F:DD:91:4A:23:8D:30:F9:29:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89.cer
sbgp-ipAddrBlock: critical
IPv4:
74.205.250.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:24:f1:b9:b7:86:88:68:ee:d0:dc:0f:64:60:1f:19:92:6a:
db:3a:6d:31:2b:4e:03:d6:b1:9a:5a:a8:9f:a6:fc:ee:50:ef:
47:a8:53:ba:25:c8:d7:59:6d:10:fc:2f:0d:be:96:9f:ec:aa:
ec:6d:9f:8c:66:8f:6b:3e:09:ce:32:20:a4:49:3b:62:7d:db:
1e:4c:9a:c4:2a:ce:ac:d0:0d:cc:cc:d1:ac:32:9f:74:43:ef:
fb:33:59:3a:c2:c7:99:ce:36:57:25:09:e5:2f:17:f1:e5:88:
74:1b:34:fa:f4:62:1b:4d:74:e1:45:01:26:ef:7b:45:3e:04:
3a:03:fb:cf:4b:9c:3a:0a:90:bd:12:eb:01:3a:0b:7f:c7:7b:
51:94:c9:b2:41:e5:36:c7:d3:b4:73:55:90:49:7d:3c:7f:f1:
15:7c:56:58:89:a2:98:29:b3:59:78:5d:89:a3:e6:59:2b:9a:
a9:af:ea:f5:e4:68:bb:7e:a8:28:a5:ea:03:ac:a5:65:3f:dd:
12:12:80:e6:3f:3c:98:4b:81:a3:2a:a3:89:b6:cd:a0:47:4a:
ff:85:73:1c:84:c6:1b:cb:8e:eb:4e:9e:94:c3:88:9e:6e:9b:
2f:42:e9:7e:fc:31:c7:e2:22:f8:77:22:54:cf:44:9c:6b:fc:
a1:3e:cf:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:40:22 2025 by rpki-client