Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/c7638a2d-de94-31cd-8168-33b5ac54fb2b.roa
File: c7638a2d-de94-31cd-8168-33b5ac54fb2b.roa (raw, json)
Hash identifier: wxTGy/QHWvgk+VXwLrd9LlGAnXp6Bru3yx114T0bF78=
Subject key identifier: DD:57:F0:21:00:E2:87:A6:28:FC:EF:81:F9:0A:99:D5:45:AC:0E:6B
Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Certificate serial: 010D0C9F43285849552950A2AA80AD01538A3DA0
Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/c7638a2d-de94-31cd-8168-33b5ac54fb2b.roa
Signing time: Fri 28 Mar 2025 01:00:41 +0000
ROA not before: Fri 28 Mar 2025 01:00:41 +0000
ROA not after: Thu 26 Jun 2025 01:00:41 +0000
asID: 4540
IP address blocks: 74.116.112.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:55:29:50:a2:aa:80:ad:01:53:8a:3d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Validity
Not Before: Mar 28 01:00:41 2025 GMT
Not After : Jun 26 01:00:41 2025 GMT
Subject: CN=459f95ea-0ec5-4177-8fd4-c3fed20d77dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d1:5a:c8:2e:f6:9e:09:85:6d:e0:a6:98:c2:
6b:a4:79:ae:a1:a3:ad:ca:c4:a6:43:01:dc:d2:42:
16:de:50:f4:63:81:b5:04:49:f3:c2:f0:95:c8:c0:
ba:54:10:3b:f8:27:5e:9f:00:1d:1d:46:50:5e:a4:
e7:5f:0c:02:44:f0:22:fa:dc:bf:a1:d0:08:93:70:
b9:26:af:d6:52:a9:b4:53:a3:88:27:c8:da:68:b9:
fe:85:bc:df:f6:23:82:6f:64:df:15:86:1d:6c:2b:
fe:2a:3e:10:e0:b3:3c:c3:1b:50:6b:a6:32:30:10:
1c:01:4c:ad:a6:72:83:39:8d:3a:ed:96:4c:be:38:
e4:9c:f1:8e:0a:af:bb:53:a5:f7:e1:bf:2c:fa:9e:
ea:fc:66:e2:5e:67:c6:e2:8f:ef:6f:d0:64:60:4a:
a7:75:dd:62:e7:21:b8:1d:f6:23:73:d6:43:73:0d:
66:40:9e:fc:d7:43:87:73:62:7d:d7:6b:19:32:08:
c7:b1:9c:5b:05:b1:e7:01:12:1b:ed:f7:7e:b1:24:
be:96:8d:bc:2c:33:fd:01:3b:34:c8:22:a5:0f:70:
2e:09:2d:68:b1:00:20:01:ae:d1:7b:63:8d:4e:b9:
c2:9d:73:ec:4a:3b:c8:5f:13:95:f2:82:19:54:1f:
da:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:57:F0:21:00:E2:87:A6:28:FC:EF:81:F9:0A:99:D5:45:AC:0E:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/c7638a2d-de94-31cd-8168-33b5ac54fb2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl
X509v3 Authority Key Identifier:
keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
sbgp-ipAddrBlock: critical
IPv4:
74.116.112.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:0a:ae:1d:ec:f5:17:ac:bb:0f:96:3d:11:49:68:03:f5:2f:
13:9c:3a:b1:e3:bb:0a:b4:40:64:f7:7f:4b:b5:2a:d5:a4:86:
f7:df:f4:f3:c3:ae:6e:9b:1a:b8:ce:d8:93:64:41:0a:dd:bb:
e1:59:af:fa:f1:7e:bd:e2:e9:33:b6:03:36:2f:aa:55:a4:04:
e9:33:c0:fe:97:ba:3c:8f:f1:b8:45:4f:8d:21:b8:47:46:5f:
4d:a2:0f:a2:1d:13:63:e9:60:cf:dc:c8:60:17:e0:63:3e:37:
af:a0:e3:d3:29:b6:c8:48:2b:69:51:da:1e:ef:15:fc:27:26:
f2:bf:d0:4d:b3:fd:82:74:22:48:af:9b:08:e7:cf:b6:cb:60:
24:f0:45:3f:d1:3e:17:ae:3d:bc:4f:7b:d7:90:df:a2:17:70:
7b:c0:99:8d:f6:eb:da:16:b5:17:34:51:50:97:83:99:2d:aa:
ed:21:a6:83:3b:8d:9c:ed:12:71:55:a9:eb:7a:c8:9b:8b:50:
33:29:a2:32:51:0d:4a:4f:7b:af:62:1d:9a:1d:31:e8:76:83:
aa:be:91:ed:6f:2e:0f:23:d3:f0:3c:fc:19:80:6e:40:a0:61:
36:72:f9:f3:9d:e5:38:4e:2d:86:19:25:cf:e1:28:88:f8:a4:
7b:f6:2e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:21:23 2025 by rpki-client