Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/ac3fba6e-34d0-3467-9a92-b8b2f0ecd7e9.roa
File: ac3fba6e-34d0-3467-9a92-b8b2f0ecd7e9.roa (raw, json)
Hash identifier: bTbJQO69YNI0fyPOM3/hq5Ic07zcxvpL2XayNEenPbI=
Subject key identifier: 77:D1:E8:36:A0:7D:0C:92:AE:6F:19:E6:10:47:32:3D:12:8E:34:75
Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Certificate serial: 010D0C9F43285849552950B154988DA260095680
Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/ac3fba6e-34d0-3467-9a92-b8b2f0ecd7e9.roa
Signing time: Fri 28 Mar 2025 01:00:41 +0000
ROA not before: Fri 28 Mar 2025 01:00:41 +0000
ROA not after: Thu 26 Jun 2025 01:00:41 +0000
asID: 4540
IP address blocks: 74.126.104.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:55:29:50:b1:54:98:8d:a2:60:09:56:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Validity
Not Before: Mar 28 01:00:41 2025 GMT
Not After : Jun 26 01:00:41 2025 GMT
Subject: CN=1e3c9f5b-2d63-4354-8121-436dc2ba1043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f9:ce:ad:be:79:f3:29:d3:9a:ae:8a:fe:04:
31:c8:12:3d:36:9c:09:95:0e:c6:66:bf:fd:48:ac:
da:ea:66:71:14:6f:c5:11:0d:63:28:90:c2:c4:e8:
f6:f8:7e:31:57:82:0c:54:9f:d0:55:d3:83:5a:4b:
03:58:2b:36:e3:ab:fa:e0:be:7f:53:8d:a4:71:c0:
8b:29:ff:11:27:5e:5e:26:bd:df:09:a7:84:f4:d1:
d4:1d:0c:7b:74:2d:03:f4:8e:cc:4b:a6:5e:7f:f8:
8a:01:3b:79:92:51:89:1e:48:36:a0:cc:10:16:68:
a1:35:c2:18:06:e1:07:24:df:77:ba:63:37:a1:a0:
a5:11:f2:b0:7b:c3:a2:ec:cf:d8:fe:08:b8:65:83:
8b:92:7e:7b:7d:20:13:f0:7e:61:c8:42:ef:6f:f9:
64:d6:12:13:6d:3a:5e:cd:67:e7:7b:de:3c:b7:54:
3c:00:67:c4:44:12:a7:66:c4:75:89:04:ca:f3:62:
f4:44:c7:46:57:c1:dd:cd:3d:f0:f9:71:ab:e3:97:
a6:ce:e3:4f:aa:89:8a:b1:c8:6b:f6:22:4a:0e:3c:
34:f8:b8:b7:bb:88:d4:9c:19:55:d9:29:dc:86:fc:
a3:02:e8:6c:69:54:4b:dc:a7:4f:d3:34:76:54:00:
95:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D1:E8:36:A0:7D:0C:92:AE:6F:19:E6:10:47:32:3D:12:8E:34:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/ac3fba6e-34d0-3467-9a92-b8b2f0ecd7e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl
X509v3 Authority Key Identifier:
keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
sbgp-ipAddrBlock: critical
IPv4:
74.126.104.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:4b:da:a0:0b:0b:9a:d6:d4:f8:5c:e9:00:58:dc:bd:b6:3c:
85:44:6f:4c:97:74:fd:50:dc:c1:e3:09:13:3c:f2:16:15:7c:
9f:7e:a9:33:52:f9:a2:73:3c:ab:f0:28:2f:57:68:ed:7a:b9:
7e:b8:19:ed:e1:51:35:35:ae:96:40:0f:92:c3:d2:ec:af:d7:
5e:3e:08:0f:2e:7d:a5:d1:1c:6b:99:a6:90:64:51:5f:72:b8:
66:b6:69:8b:9b:f5:a6:ac:28:2f:cd:30:2c:04:7c:f1:3b:1a:
79:0f:a2:8f:de:9b:31:f6:2a:30:5e:2e:21:8f:63:4b:3d:87:
96:99:68:79:bf:31:a0:31:f2:5c:7e:25:47:4d:a3:8a:8f:35:
e7:fc:31:33:e0:55:d1:21:8a:f4:90:47:85:8b:83:c4:73:40:
39:90:33:fb:76:11:58:07:d5:96:2b:d9:83:39:31:28:20:95:
ed:f9:a1:14:df:60:cb:9a:3c:a9:38:5e:fe:44:7f:11:a4:2b:
ca:93:e8:0e:d2:48:44:9a:95:83:82:48:8b:a1:9a:3a:3a:8f:
e3:45:27:95:7a:bf:ab:ed:38:40:1e:59:4a:b8:de:6f:32:28:
9c:24:16:d5:05:cb:fe:f8:4f:09:cb:8d:d3:d4:70:22:7d:28:
a8:e1:0c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:03:18 2025 by rpki-client