Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/958d41d1-764a-3025-a7b5-83795d79fa0c.roa
File: 958d41d1-764a-3025-a7b5-83795d79fa0c.roa (raw, json)
Hash identifier: ecJ03uPZ8SHIkvgFBtjMZvIqbHz7IJBIEuKWC17KNOs=
Subject key identifier: 88:1D:9E:22:E4:03:BC:FB:5C:71:34:B5:30:E3:AA:04:6E:79:8F:C0
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D1BB9D2B41587EE04D8FF0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/958d41d1-764a-3025-a7b5-83795d79fa0c.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 10838
IP address blocks: 74.87.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:bb:9d:2b:41:58:7e:e0:4d:8f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=b00ce4cf-2619-49bd-9291-4398a1fff6ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:04:6c:22:77:33:fa:61:89:0d:b0:9d:8b:f7:
26:7e:b5:1f:9d:79:a8:be:6c:3e:70:ef:d5:ab:f4:
33:e5:e3:00:c6:f5:fe:eb:41:c3:20:cc:6b:b4:2b:
34:84:5e:61:fc:16:59:72:94:ea:8a:e4:46:e4:4e:
dd:ec:52:da:45:81:cc:91:02:ad:63:c3:05:a3:b3:
d5:10:f6:2e:16:02:54:af:41:ed:12:cd:6c:e0:c5:
de:d4:a4:9a:d6:cd:a3:2e:58:24:50:a1:e4:1f:6e:
8f:dc:9a:93:8c:40:48:3f:96:6f:21:2c:c1:dc:77:
49:fe:e6:25:06:1e:07:47:95:d2:f4:52:50:86:d0:
48:52:0b:71:27:d6:4d:26:66:c1:d6:2a:06:57:60:
4b:ce:95:49:30:23:62:35:ea:f3:7d:5e:ca:6f:c2:
f5:a4:d7:a4:01:3b:60:7b:b0:de:d9:e5:68:a8:86:
3a:61:95:84:5f:44:8c:3b:b9:89:c4:66:cc:13:ab:
69:0d:90:83:63:f2:ea:09:db:2c:79:d1:4f:bf:6c:
52:89:ff:31:50:c5:4b:01:7b:74:44:6b:6a:c0:76:
c1:9e:6a:07:bc:8e:36:8d:de:2a:21:a2:74:e1:95:
8b:96:e7:83:4e:57:77:11:17:b3:fc:a1:a3:9a:2e:
fb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:1D:9E:22:E4:03:BC:FB:5C:71:34:B5:30:E3:AA:04:6E:79:8F:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/958d41d1-764a-3025-a7b5-83795d79fa0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
74.87.135.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:a3:05:2d:04:92:2d:8d:73:ca:8e:d6:49:1a:33:2a:16:6a:
cc:3c:8b:ef:c2:61:02:a7:3e:91:e4:75:14:01:65:8f:ab:32:
b8:29:59:bb:f9:f0:f7:0d:a9:b8:e3:95:6f:48:ca:97:fd:9e:
2e:9a:b4:2a:7e:35:93:ee:22:cf:d9:f3:77:c4:7e:34:fa:3d:
67:95:1e:d0:2c:0d:de:31:e2:75:35:44:61:fb:d5:79:ef:4c:
35:f2:89:09:80:28:00:b2:32:b0:cf:31:b0:60:7d:74:bd:9e:
b2:a9:34:ae:0c:37:a3:b7:73:5c:64:5e:15:81:35:b0:97:61:
83:84:62:53:a9:a5:16:d7:f6:50:eb:7f:51:f0:83:86:b1:c0:
8d:11:96:64:64:35:6c:6a:a1:9a:3d:24:1a:b3:75:fe:3e:6a:
06:8c:68:a4:90:a7:aa:c9:d7:87:af:84:31:17:02:97:81:4c:
7f:22:d7:51:ec:10:57:4a:d9:7c:89:99:60:eb:e5:3b:b9:4b:
b1:46:e7:6e:d0:76:17:da:19:fc:de:b5:20:57:c1:a4:43:f1:
7a:0d:18:56:a6:54:41:ae:1e:17:29:71:46:a3:34:af:92:b6:
26:0c:11:50:04:bf:13:8a:cd:46:ea:f6:49:c2:e8:51:09:17:
b6:fc:ad:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 03:19:15 2025 by rpki-client