Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/1521e4f6-307d-3780-91e1-04b244bf2ac4.roa
File: 1521e4f6-307d-3780-91e1-04b244bf2ac4.roa (raw, json)
Hash identifier: +S2QNn1YycE9J9YbY2p9lbyVeNHdWbvc9ms60H7ciU0=
Subject key identifier: 69:E8:F2:D7:0F:40:C2:E6:28:9D:91:AF:92:97:57:4C:D5:BA:EB:1F
Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial: 010D0C9F43285848BBBB74291C58CC76FA2826A0
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/1521e4f6-307d-3780-91e1-04b244bf2ac4.roa
Signing time: Sat 01 Feb 2025 02:00:39 +0000
ROA not before: Sat 01 Feb 2025 02:00:39 +0000
ROA not after: Fri 02 May 2025 01:00:39 +0000
asID: 394437
IP address blocks: 74.124.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bb:bb:74:29:1c:58:cc:76:fa:28:26:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Validity
Not Before: Feb 1 02:00:39 2025 GMT
Not After : May 2 01:00:39 2025 GMT
Subject: CN=c761ebdb-b0a5-4a82-b9ef-0d5cdb32b071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:11:07:0b:91:27:8e:66:16:cf:35:42:f7:66:
98:1d:91:fe:d0:30:94:b2:8b:11:1a:8b:38:11:2f:
24:fa:67:a0:c9:3d:73:c7:61:96:d8:6c:46:51:e0:
20:d3:66:79:38:1c:83:72:8a:cf:1a:de:cf:8f:f9:
c5:99:ad:3f:13:9d:bb:d9:06:f5:68:3c:88:34:89:
cb:87:3d:47:e7:8d:1a:ab:18:4e:6d:b7:0c:2b:5e:
8f:26:57:e5:57:22:80:3e:8c:a0:1d:a0:4f:8f:9e:
eb:a2:f6:cf:eb:ed:88:a3:29:88:fc:25:e2:e0:42:
6f:84:14:d1:29:c7:81:6b:67:15:a1:7a:86:f0:52:
14:49:6c:b3:1e:8b:b7:2d:91:4c:bc:06:d3:06:8f:
d1:1a:33:1c:41:9d:cf:35:94:54:33:6a:0e:de:6c:
ab:13:61:86:24:75:d5:82:36:f9:71:14:72:32:c7:
c1:70:07:c3:ee:3a:d5:06:48:72:09:60:29:35:f8:
fd:aa:d8:36:22:cb:44:16:85:77:3c:db:7b:86:f1:
2e:de:45:9b:53:7d:f6:ba:41:c9:f3:97:b1:be:ce:
24:c7:a1:56:35:3e:c6:c0:d3:d4:bb:91:2d:97:db:
34:cb:47:da:d8:ce:16:d4:3c:dc:c0:8e:31:58:6c:
a2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E8:F2:D7:0F:40:C2:E6:28:9D:91:AF:92:97:57:4C:D5:BA:EB:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/1521e4f6-307d-3780-91e1-04b244bf2ac4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
X509v3 Authority Key Identifier:
keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
sbgp-ipAddrBlock: critical
IPv4:
74.124.48.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d2:4b:d4:ab:10:52:ee:8c:bc:a6:53:5f:66:82:5b:26:3b:40:
c2:a7:17:df:d8:9c:94:a3:ff:9a:5b:87:02:85:aa:ef:dc:0e:
2a:d4:42:25:ca:77:9d:7e:36:7a:2d:62:99:6c:c4:e4:a2:bd:
8f:a5:ca:b4:ae:1b:71:51:3e:05:04:ed:1b:85:12:f8:ab:ca:
3e:4a:33:3f:a0:60:36:b0:fc:c6:70:94:65:8a:3b:a5:9c:53:
af:e8:cd:25:ff:91:d0:56:55:28:ba:d0:3c:41:f3:c7:9d:ed:
69:f4:46:05:9c:6f:8b:7e:d2:c1:1f:c1:52:1a:1a:00:bb:4b:
42:01:b9:ca:65:82:f8:06:a2:ff:6c:6e:4e:87:d3:79:b1:9d:
82:72:2f:ce:58:7c:6d:f1:85:1d:59:9e:74:07:90:09:de:eb:
56:2a:2c:de:f0:f5:67:bb:dc:5f:90:ab:52:ab:12:0c:b9:c5:
81:2f:c9:a0:38:a5:9c:4d:95:4f:6e:04:5d:a9:3c:ea:67:d7:
4d:79:75:93:07:7c:d3:75:36:75:52:0c:ce:68:d1:b9:e5:be:
9f:2e:dd:ca:2c:d0:bd:a3:cf:60:94:b1:bd:c8:c3:e0:e5:b2:
51:e6:25:08:82:94:ed:a4:a5:f0:a4:c1:14:4c:54:48:c4:82:
fd:50:17:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:16:36 2025 by rpki-client