Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c72b5a71-dab2-46cd-a407-5ad1913113de/1c5227bb-0c2e-39a0-93a0-dfc9d50d55a5.roa
File: 1c5227bb-0c2e-39a0-93a0-dfc9d50d55a5.roa (raw, json)
Hash identifier: hQfcK2PGR0/uMO+TPAAJFjRW6ydtXeV1gW+nr6aT0X0=
Subject key identifier: 9E:27:70:86:B8:B1:1C:CB:7C:97:B5:4E:CC:40:E3:F0:93:29:78:61
Certificate issuer: /CN=c72b5a71-dab2-46cd-a407-5ad1913113de
Certificate serial: 010D0C9F43285848D0ABB13A16C3BA4546207600
Authority key identifier: 49:B2:E2:3F:DD:63:75:65:50:C2:05:8E:58:23:51:7F:07:27:4A:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c72b5a71-dab2-46cd-a407-5ad1913113de.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c72b5a71-dab2-46cd-a407-5ad1913113de/1c5227bb-0c2e-39a0-93a0-dfc9d50d55a5.roa
Signing time: Sat 08 Feb 2025 14:00:52 +0000
ROA not before: Sat 08 Feb 2025 14:00:52 +0000
ROA not after: Fri 09 May 2025 13:00:52 +0000
asID: 22335
IP address blocks: 74.114.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d0:ab:b1:3a:16:c3:ba:45:46:20:76:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c72b5a71-dab2-46cd-a407-5ad1913113de
Validity
Not Before: Feb 8 14:00:52 2025 GMT
Not After : May 9 13:00:52 2025 GMT
Subject: CN=d08bad48-2f98-4959-9237-f5a0f4750f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:62:92:28:37:d1:02:25:14:53:56:c4:97:eb:
2f:65:b4:e5:cb:90:95:2c:ad:dc:d3:91:45:84:1d:
c3:27:ff:be:03:6a:49:e1:29:6b:59:c3:ba:34:51:
76:60:07:c2:83:bd:95:a0:74:ae:90:b5:fd:00:96:
2e:d9:5c:39:dd:6f:05:5a:77:10:93:5e:d9:3f:1d:
89:f9:f9:ee:19:65:fe:56:55:db:da:07:dc:70:bc:
79:19:57:e1:79:a6:a7:18:53:78:fa:6f:ba:56:12:
e6:7f:6c:73:19:26:23:72:d8:f0:3c:84:96:0d:47:
47:26:38:11:34:fb:64:1a:78:c0:fd:f9:3d:04:bd:
29:de:90:2b:2d:65:15:86:dd:d6:3d:bb:a3:41:4e:
f8:d5:68:08:91:70:ec:be:ee:e4:e0:bc:ae:46:68:
cc:c6:3e:84:bc:67:b1:1f:14:1e:95:b6:5e:cd:fc:
a2:f9:2d:09:3a:a6:9a:8b:45:5d:78:40:93:1d:b8:
e8:e9:ba:3e:58:c1:7f:7a:35:75:cb:f6:8e:b5:fd:
63:ea:96:02:b4:9c:c8:aa:2d:6e:47:49:2a:cf:20:
df:0a:da:2b:2f:16:3f:22:f3:76:49:41:48:a9:6b:
34:b4:e9:b6:1f:b9:ae:8f:b5:be:c9:70:cb:0d:e0:
b6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:27:70:86:B8:B1:1C:CB:7C:97:B5:4E:CC:40:E3:F0:93:29:78:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c72b5a71-dab2-46cd-a407-5ad1913113de/1c5227bb-0c2e-39a0-93a0-dfc9d50d55a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c72b5a71-dab2-46cd-a407-5ad1913113de/c72b5a71-dab2-46cd-a407-5ad1913113de.crl
X509v3 Authority Key Identifier:
keyid:49:B2:E2:3F:DD:63:75:65:50:C2:05:8E:58:23:51:7F:07:27:4A:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c72b5a71-dab2-46cd-a407-5ad1913113de.cer
sbgp-ipAddrBlock: critical
IPv4:
74.114.96.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:9a:3b:b5:4f:99:30:4a:10:fa:97:d3:63:1c:50:94:e8:2b:
8f:64:6b:71:59:a0:15:70:e4:cc:a4:18:40:1c:e9:61:e7:a6:
cb:2a:77:74:d1:06:05:0a:90:82:35:51:5f:77:81:1d:7f:04:
59:bb:5f:72:78:ff:d4:27:56:76:48:6b:75:aa:56:8c:6e:66:
42:6d:c8:aa:a7:c5:92:28:20:c4:16:31:3c:39:e8:16:c2:34:
ca:20:1b:1c:f8:c7:75:10:37:59:f3:ca:3a:a7:69:bd:29:1a:
4f:df:44:bb:a6:9d:40:2c:5e:86:70:88:61:50:e6:a5:79:74:
9e:4f:c5:85:b7:85:75:06:3b:9b:e8:fa:ca:96:b4:26:37:f7:
e2:17:18:25:f1:de:c7:84:82:7b:47:81:d3:95:2c:35:f5:73:
70:a9:91:54:70:86:e9:10:29:2c:42:a8:9e:3e:5c:a3:9b:f8:
9f:0f:e2:9c:b9:17:37:ec:00:0f:db:4d:d9:35:30:18:d3:60:
a4:ae:a9:24:0e:ae:08:b1:6f:a7:cf:b9:38:db:67:fb:0f:48:
4d:54:07:ca:55:c6:26:5a:df:4f:64:bc:98:d9:4a:b9:74:f7:
9f:b7:b6:02:a3:52:3f:80:b8:24:e6:98:a8:83:9e:7a:ee:24:
4f:cd:6c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:44:27 2025 by rpki-client