Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a5ce4d98-4dd2-3646-aa6b-6bab41722dd9.roa
File: a5ce4d98-4dd2-3646-aa6b-6bab41722dd9.roa (raw, json)
Hash identifier: sko25t9n7IjlWCJnygdTC0i6+c9eOkEfecJ8OTq+oKU=
Subject key identifier: B3:CC:2A:D4:96:D4:63:A7:1E:77:37:85:29:50:C5:FF:64:C4:98:20
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D1521FDCC759376913B0E0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a5ce4d98-4dd2-3646-aa6b-6bab41722dd9.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20001
IP address blocks: 74.87.0.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:52:1f:dc:c7:59:37:69:13:b0:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=72207578-c15a-4e34-a16f-b6c448504597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5e:0e:b9:95:73:57:7d:3a:d8:94:20:16:e1:
4e:67:fb:b0:4e:c2:77:83:60:46:26:da:23:7d:d4:
b1:6c:13:7a:5d:ea:97:a9:2a:46:07:a0:54:3b:7b:
42:ec:c4:70:bf:89:31:d1:aa:85:54:6e:08:21:5e:
11:92:71:d0:a7:be:a1:d0:3c:15:3c:8c:10:09:6d:
0a:2e:04:17:f9:c7:db:9b:b5:07:60:6e:c0:70:6d:
a8:10:3c:53:d6:81:15:b6:61:f9:18:bd:3e:2f:9f:
0d:64:68:c1:52:74:53:03:39:9b:72:12:6b:eb:f4:
32:c0:60:7f:29:36:80:4a:01:4a:55:98:81:03:7e:
90:8a:41:1a:4b:7f:ee:94:f0:95:fd:cd:3c:50:86:
9d:20:d9:bb:cf:5b:fc:76:d9:41:8e:c1:c1:b3:b4:
5e:03:a8:7b:cc:02:72:a5:44:5f:c4:77:11:3f:5c:
be:4c:86:ae:a2:14:23:80:8a:02:ad:a5:ce:e1:45:
f4:dd:a0:0c:db:2e:e6:f8:64:78:d8:a9:14:7e:f4:
af:96:fa:58:42:b9:b6:4a:47:13:90:0d:1d:36:3e:
f3:fe:73:be:5d:c8:ac:1c:c3:86:d0:95:0f:59:94:
6a:0c:30:8c:07:e2:5a:99:3b:dc:3f:80:7d:3a:3b:
9f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:CC:2A:D4:96:D4:63:A7:1E:77:37:85:29:50:C5:FF:64:C4:98:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a5ce4d98-4dd2-3646-aa6b-6bab41722dd9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
74.87.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:93:d6:85:0d:c7:14:0a:d9:2f:63:51:69:50:41:66:32:ad:
35:7c:29:d3:9f:5a:1b:2f:f8:89:cb:3b:51:82:83:62:23:65:
26:dc:c2:09:26:4c:b2:b3:af:53:f5:27:be:89:8f:7a:6a:dc:
a3:6b:05:8b:b1:a9:f7:69:09:7c:29:d1:8b:f2:8c:8a:c3:4a:
73:20:84:37:3d:62:ee:9e:ca:73:c6:21:46:0a:ca:c5:d8:41:
e8:1c:42:40:af:62:2e:31:d8:31:37:b9:c1:88:93:58:d2:ed:
77:48:ae:4f:55:64:58:45:75:06:2e:9f:d8:aa:7c:7f:d0:a4:
51:f9:0d:71:82:9c:ca:2e:17:53:e3:50:8d:6b:9c:47:53:56:
d2:50:8a:f4:ac:ca:f8:e8:19:41:39:0b:fd:5c:26:4d:e5:5b:
96:e9:28:ab:ec:f5:87:45:39:f9:27:af:d5:6b:4a:3c:8c:10:
f8:55:ac:d2:96:53:a5:3f:1b:ad:61:d1:75:35:c4:7e:a2:74:
fd:77:2f:38:4a:71:6c:c9:37:3f:ea:65:a3:cc:b5:47:df:b5:
94:88:0a:e1:a5:22:e2:61:6b:31:dc:ef:2a:32:7a:9e:79:7a:
a6:ab:cc:1c:bc:f3:30:37:92:6e:4f:fd:b5:c3:98:4e:a6:9d:
4f:20:59:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:45:34 2025 by rpki-client