Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0c5ada19-ed91-3570-b99c-a3129a52963b.roa
File: 0c5ada19-ed91-3570-b99c-a3129a52963b.roa (raw, json)
Hash identifier: WpfhNXT3syBYfD+BYzAzky9PkDT5XwWIlvavx9gYbwI=
Subject key identifier: F0:B3:7D:61:CD:89:09:85:6A:26:83:F1:1F:C6:99:42:1C:C2:FF:11
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D1B85A591895BB8677C540
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0c5ada19-ed91-3570-b99c-a3129a52963b.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 10796
IP address blocks: 74.87.138.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:b8:5a:59:18:95:bb:86:77:c5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=caf144f3-6c52-44bc-8ea9-f965dc28a500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:01:f2:10:42:72:b9:3a:77:4d:c0:bc:3e:0e:
bd:15:1f:23:e8:df:3c:b4:77:9a:5d:0c:0f:80:33:
d6:53:ab:12:10:46:66:45:0f:fb:84:e2:27:ac:98:
ce:7b:ac:35:99:82:c2:01:58:ad:ae:be:2a:20:d4:
92:8c:01:fe:ca:a2:07:bf:19:c0:32:93:3c:29:30:
b4:e6:b8:cf:20:a4:8e:d1:4e:7d:b2:d5:5f:7d:87:
87:cd:31:9d:20:f7:68:54:a1:f3:a4:50:01:f4:de:
16:df:bf:07:36:70:34:61:7f:06:32:5b:b3:19:2a:
15:56:64:a5:f2:b0:50:78:27:f9:9f:6d:3e:84:5b:
6d:89:bd:77:b3:29:a5:f7:da:f2:11:41:8a:13:06:
86:b3:7e:49:ff:5e:6a:d1:f0:c2:d0:2f:ea:76:d9:
ef:e0:e8:ed:1e:30:2e:7f:2c:d4:02:6c:63:97:a0:
1d:25:0e:aa:5e:a4:5b:ce:a6:93:71:6a:2b:96:30:
d0:29:a6:64:fb:7e:37:c3:18:05:dc:e1:75:38:e6:
9b:37:71:19:ff:38:8c:ed:9b:62:a3:4c:2c:be:43:
75:d1:e3:17:5c:4f:25:1b:35:50:21:f8:3e:80:1b:
b7:5c:c2:82:55:17:68:e2:cd:5c:e2:98:3c:9f:70:
25:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B3:7D:61:CD:89:09:85:6A:26:83:F1:1F:C6:99:42:1C:C2:FF:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0c5ada19-ed91-3570-b99c-a3129a52963b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
74.87.138.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:8f:19:ff:b4:c1:4c:82:c8:17:f7:2d:c7:c4:48:02:a8:30:
13:d5:7d:56:de:ef:0f:82:b8:a5:e0:a0:82:48:7b:b3:49:79:
85:32:ab:29:cc:7e:32:3f:74:f5:22:c5:ce:40:8c:51:40:23:
ab:49:eb:af:df:bd:52:15:7b:98:34:1b:62:05:f2:53:db:2d:
c9:99:69:ae:d9:f7:96:65:80:25:ca:2a:5b:d5:26:9b:a5:6d:
1f:b1:7d:a0:49:b4:f1:d6:e3:84:a0:0b:69:48:58:2e:72:7d:
40:34:70:86:34:61:02:f6:b3:97:45:c6:88:0f:ab:26:09:30:
69:85:4d:a1:45:e4:74:6f:a4:6d:8c:8f:a8:0d:58:dc:7e:07:
db:4b:1b:40:21:8d:58:0b:97:35:81:98:f0:46:05:93:f5:a2:
0d:49:e6:6f:20:cb:63:0a:5a:dd:44:88:81:a4:7c:76:54:ca:
ea:77:b1:e9:93:b9:c0:97:53:5c:85:bc:79:f4:87:62:46:d4:
7b:13:96:5b:24:8c:db:e8:2e:c2:43:5a:d4:ea:0b:11:25:f7:
5b:79:60:29:c5:c8:a6:29:2b:19:c6:64:c0:b1:ea:e2:1e:73:
d5:ae:b5:ed:61:d2:bf:66:0c:25:1a:52:cf:a8:56:bf:c3:ff:
63:dd:cc:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:28:44 2025 by rpki-client