Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/fe27dcfa-a5e4-3d8c-85e7-63ada9831465.roa
File: fe27dcfa-a5e4-3d8c-85e7-63ada9831465.roa (raw, json)
Hash identifier: 6PyTrE+iCN+o1cfZ4CAbDqv8AZFkvNrB4lzI5nQPNao=
Subject key identifier: C2:89:36:38:AE:97:59:B0:2A:3B:54:27:47:4C:5D:63:61:D8:BB:D0
Certificate issuer: /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial: 010D0C9F43285848F4F69EBB5C0EEF95F29441C0
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/fe27dcfa-a5e4-3d8c-85e7-63ada9831465.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 54548
IP address blocks: 74.208.60.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:9e:bb:5c:0e:ef:95:f2:94:41:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=4eac00c9-b5e5-4b45-805e-3965304dd747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:48:d3:65:40:5d:c0:1e:97:db:76:cf:de:3d:
4f:5e:15:33:5f:d4:f2:a8:9e:a7:07:18:6d:6f:00:
06:1c:ad:3c:71:70:15:ba:52:83:8b:5b:23:37:54:
8c:cf:38:39:d2:78:cf:8e:1c:92:1d:08:cd:9d:8f:
d4:75:9f:a4:f6:ed:3e:5d:e2:6f:51:0a:b3:58:71:
f8:d6:c3:ca:38:12:b9:4e:6a:6a:17:1c:3c:cb:91:
5e:ad:76:51:cf:20:ae:4d:fa:73:ec:e8:5b:df:52:
d2:78:e5:3f:14:bf:26:cb:53:ee:d9:83:01:a3:09:
93:73:68:75:fd:d9:7c:ed:a2:2d:a0:17:e0:2d:0e:
df:08:59:dd:6f:95:53:22:b1:ca:03:f0:32:52:bb:
e1:d3:21:30:08:c4:a0:71:9d:a8:3a:6e:82:4f:05:
cc:be:e8:0f:98:90:7e:94:e5:00:1e:4e:5b:9a:95:
74:fa:86:9d:6c:38:13:ee:f2:0a:a2:d9:a7:35:38:
42:bc:7f:38:64:5c:ab:a7:07:3b:6f:d0:1c:d6:bb:
12:0c:c2:c5:9c:40:ed:ad:70:77:a0:74:7f:7f:e3:
90:b2:df:12:73:c3:5f:f1:00:45:49:c1:2f:fe:09:
77:4f:7c:8d:dd:b4:b9:1b:63:64:6f:a6:74:6e:0f:
4c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:89:36:38:AE:97:59:B0:2A:3B:54:27:47:4C:5D:63:61:D8:BB:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/fe27dcfa-a5e4-3d8c-85e7-63ada9831465.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl
X509v3 Authority Key Identifier:
keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
sbgp-ipAddrBlock: critical
IPv4:
74.208.60.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:97:22:14:d2:fa:f1:86:60:da:c5:ab:c7:61:46:6f:fe:da:
bb:d7:3f:d0:5e:54:48:fb:86:8b:f9:43:1b:2d:98:43:79:d2:
a3:c8:0b:48:b1:c2:fe:1a:9c:aa:e3:4c:0c:d7:b7:59:28:f1:
39:c4:0d:bc:4e:1d:17:b3:12:97:e2:a9:a9:6a:7d:58:0f:1a:
6b:71:d6:7a:08:18:75:20:63:42:e6:33:fd:c1:72:62:67:60:
34:39:e6:a6:b7:66:4c:36:94:62:88:dd:b7:7b:e9:2d:4d:23:
8b:53:a0:f9:c3:4e:07:c5:51:6f:14:41:a5:b2:d2:12:cc:af:
0b:29:52:c0:3c:b5:72:34:9f:a2:04:71:af:17:b8:99:6c:97:
17:04:e9:0e:b5:10:33:45:65:c4:30:b5:39:6e:40:94:e2:d5:
c9:f0:22:e9:49:97:27:21:1e:d3:c0:c2:47:c9:8a:e4:52:84:
6c:f2:a9:c2:c8:42:c8:90:4f:b1:c6:7b:da:07:b2:4e:0c:d1:
01:e4:4e:a0:98:98:c6:6b:11:4d:b5:ba:aa:0e:48:c3:d9:d0:
28:4d:2a:46:90:b6:cd:63:36:c9:35:1f:bd:d8:90:47:1d:cc:
4e:67:49:04:db:4a:95:68:a9:08:a5:c0:de:c4:0b:25:fe:56:
48:46:4a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:25:19 2025 by rpki-client