Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/a4240d55-2f35-3dda-a744-471c1d2d0487.roa
File: a4240d55-2f35-3dda-a744-471c1d2d0487.roa (raw, json)
Hash identifier: kDr+sU/UR5N6HBttEFmeQIuzHDKryg9GFoBa57chntY=
Subject key identifier: A0:58:74:7B:92:F7:AE:05:1D:8B:68:62:7E:5C:3D:3C:4E:3C:74:54
Certificate issuer: /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial: 010D0C9F43285848F4F69F4FE7B84B7AB3416980
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/a4240d55-2f35-3dda-a744-471c1d2d0487.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 54548
IP address blocks: 74.208.110.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:9f:4f:e7:b8:4b:7a:b3:41:69:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=675d2481-1499-462b-baae-704d0e92241c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9d:db:38:40:16:be:9d:fe:66:73:20:18:6a:
f2:1a:72:fd:6f:01:d6:41:87:c4:b4:9e:0a:a6:b0:
bf:ca:8c:c3:97:79:26:e1:08:3d:2a:16:61:40:8f:
f4:32:16:62:fc:91:d1:a3:67:ab:c7:e3:7b:7c:9c:
85:df:8b:1e:c9:11:1e:85:b4:a4:3b:7a:1b:c7:d0:
59:cc:2c:13:af:98:30:38:5d:41:54:18:e2:74:15:
c0:7a:a8:94:96:a7:5e:d2:2d:33:8b:68:57:1a:fa:
d5:17:c8:15:f3:8b:13:01:47:9b:b5:99:9b:bb:ff:
e5:dd:b2:3a:3f:ba:96:9f:f4:1d:21:4a:b1:30:23:
bd:bd:fb:05:0d:af:8d:d8:ea:a3:5d:89:29:12:be:
ec:84:df:d5:9c:55:66:cb:06:a8:50:21:64:84:0e:
4d:4c:33:c7:6c:4d:ef:66:d1:04:f5:83:f7:1b:7c:
8d:ac:6e:5a:be:45:ce:97:64:88:a8:e5:3b:c3:71:
f5:28:d2:a5:b9:f7:cb:56:4e:5b:c9:0b:78:83:f5:
21:80:5a:7d:c8:bd:63:8a:f2:4f:07:32:de:52:90:
c4:d7:f7:cd:97:d8:aa:e8:10:25:00:8e:51:6a:35:
7d:bf:70:4a:3d:b3:b7:8f:f9:99:2e:cc:af:ea:6e:
88:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:58:74:7B:92:F7:AE:05:1D:8B:68:62:7E:5C:3D:3C:4E:3C:74:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/a4240d55-2f35-3dda-a744-471c1d2d0487.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl
X509v3 Authority Key Identifier:
keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
sbgp-ipAddrBlock: critical
IPv4:
74.208.110.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:0b:38:6c:7a:f0:7d:01:4c:ed:53:64:aa:44:69:2a:d6:62:
61:ef:53:79:af:a3:26:7a:bb:78:be:01:b3:90:18:91:fc:e6:
47:62:86:08:53:ea:5e:8a:cc:96:57:d7:a4:19:af:13:9c:c2:
76:7c:a3:15:66:b7:26:5e:9b:8d:86:42:a7:68:d2:da:ed:74:
65:36:6a:05:78:ad:43:ec:de:a6:64:10:f1:50:d4:90:c7:3d:
27:d3:aa:ba:1e:48:54:e2:75:bf:e9:5d:4c:21:11:38:56:47:
e4:29:ef:8c:ae:6a:91:48:af:5e:d0:c7:89:95:bb:3f:d3:36:
3d:36:6f:2b:44:b1:c5:bf:ce:e7:dd:25:41:3a:1f:db:58:b0:
a4:5b:a2:73:85:6c:d6:60:2d:41:bb:7a:cc:22:cc:c2:a9:af:
98:6f:55:1b:95:e7:47:a4:91:35:36:86:2e:35:e6:ff:a4:7a:
48:83:3a:19:da:1a:f0:e0:88:35:26:3f:aa:e4:0c:96:5a:cf:
48:df:d0:5f:3f:20:c6:bf:3b:ff:c7:e2:3e:e0:d8:47:11:e0:
d1:72:63:2d:03:00:45:f1:54:a8:2a:fd:04:5e:3a:80:67:2a:
ad:ee:17:9e:8f:4b:1e:5b:4c:f0:4f:4a:c5:fd:e9:77:d8:24:
cb:18:05:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:32:58 2025 by rpki-client