Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/560494a5-3dff-416d-b8a7-cf5cad5f05f6/38145d5d-b7be-3417-9d20-91b0bd7df2d5.roa
File: 38145d5d-b7be-3417-9d20-91b0bd7df2d5.roa (raw, json)
Hash identifier: uwLao66UHATlsFj0rY19FhIro3IERtNkyyS1Nj1y3Fg=
Subject key identifier: 93:12:A7:B9:EB:30:6D:DF:A3:D3:AD:6B:F2:A6:DB:97:26:C2:88:70
Certificate issuer: /CN=560494a5-3dff-416d-b8a7-cf5cad5f05f6
Certificate serial: 010D0C9F432858489E6B6F549981A7FB3CBA2780
Authority key identifier: 56:98:2D:5F:6F:FD:A8:FB:6C:BE:31:3F:18:06:D8:43:1B:C7:A8:B5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/560494a5-3dff-416d-b8a7-cf5cad5f05f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/560494a5-3dff-416d-b8a7-cf5cad5f05f6/38145d5d-b7be-3417-9d20-91b0bd7df2d5.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 8075
IP address blocks: 74.116.254.0/24 maxlen: 24
74.116.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6b:6f:54:99:81:a7:fb:3c:ba:27:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=560494a5-3dff-416d-b8a7-cf5cad5f05f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=78531685-6825-46a2-ac63-c41db2d8d665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:3a:39:47:73:87:78:88:b1:ec:10:bf:9c:1f:
8e:4f:3d:6c:4a:e2:f8:3b:c0:c2:dd:82:29:24:73:
e7:39:52:29:a0:d2:39:0e:c2:ff:35:22:64:7d:a5:
75:d2:f8:26:d4:95:b6:bc:5e:09:58:77:a3:04:5d:
36:f7:1c:06:43:02:a2:af:71:58:eb:36:97:db:61:
f3:03:7e:5c:8f:6b:a5:5e:a3:99:fe:16:6a:3d:cf:
bf:7b:a9:29:ad:7d:0f:37:af:b8:8d:52:de:a5:80:
d3:32:82:b3:62:b4:d9:01:1e:2b:33:56:44:92:0d:
9c:d8:b5:e7:3b:12:fa:55:23:bc:60:5f:2f:9f:5a:
f5:39:12:05:d3:37:5a:be:fe:1b:a4:9c:4f:f2:c3:
c9:6c:13:10:69:9f:e8:6e:66:91:75:cc:01:ec:8a:
5c:09:a7:89:d4:cf:7e:6f:25:4d:07:2d:4c:3c:3a:
f9:05:9c:92:a7:40:19:2e:c1:78:61:89:cb:95:27:
c3:d4:23:7b:a6:1a:01:de:d9:d1:f1:95:e5:a5:4b:
d5:34:22:ca:bc:61:da:b2:06:6a:c1:a2:0f:94:f3:
98:5a:b6:f3:02:ab:5d:19:66:46:98:51:52:97:d5:
94:f0:5d:c3:52:36:20:77:56:27:53:ea:bb:f5:4a:
63:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:12:A7:B9:EB:30:6D:DF:A3:D3:AD:6B:F2:A6:DB:97:26:C2:88:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/560494a5-3dff-416d-b8a7-cf5cad5f05f6/38145d5d-b7be-3417-9d20-91b0bd7df2d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/560494a5-3dff-416d-b8a7-cf5cad5f05f6/560494a5-3dff-416d-b8a7-cf5cad5f05f6.crl
X509v3 Authority Key Identifier:
keyid:56:98:2D:5F:6F:FD:A8:FB:6C:BE:31:3F:18:06:D8:43:1B:C7:A8:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/560494a5-3dff-416d-b8a7-cf5cad5f05f6.cer
sbgp-ipAddrBlock: critical
IPv4:
74.116.254.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:04:84:0a:e3:45:5a:15:b7:ee:99:d3:06:5a:1a:71:77:b5:
60:fa:d4:27:15:84:b1:cb:19:51:18:e4:21:ba:58:8c:13:fe:
5d:ba:f6:1d:b9:6e:67:1e:ad:ca:f7:79:fa:74:4f:fa:c1:22:
a2:82:b4:fa:ce:bf:95:84:2c:08:27:68:0d:c5:a4:b5:7a:c2:
7e:c9:45:43:0f:99:d8:5e:62:6c:f6:9d:d6:79:91:7d:4c:d5:
db:ce:8d:2f:c0:82:1d:69:d6:65:1c:10:a5:37:50:80:2c:71:
b7:72:14:b4:ee:be:da:5d:4a:46:fc:fa:2b:cb:1c:3f:e9:06:
f8:f1:21:46:42:fd:2e:2b:0b:7e:68:5f:e7:f6:8e:eb:43:8d:
70:29:d3:84:c8:b3:52:43:a8:03:a0:d9:33:55:f1:5d:8b:14:
79:31:65:ea:11:25:6f:e0:d3:1e:16:5d:81:74:19:1c:ff:db:
07:2d:87:82:e8:79:c4:56:ec:00:3d:c1:a5:6c:24:a2:d5:98:
af:93:84:fd:39:ab:cd:f6:b1:f6:7f:02:44:37:87:ee:c4:e1:
32:94:38:fa:d0:3d:84:ae:a8:76:e2:7d:dc:29:ac:87:6c:ab:
05:58:ac:80:57:52:b1:0a:35:db:7c:ab:e9:94:50:ca:83:d3:
f2:99:78:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:40:44 2025 by rpki-client