Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd/a3b24945-8ea5-310e-9ec6-a257dcf53f41.roa
File: a3b24945-8ea5-310e-9ec6-a257dcf53f41.roa (raw, json)
Hash identifier: WkHcLo/vLj6Z+jrWaoHxY3Fn509GVGRcCHdExwxQcsY=
Subject key identifier: E7:85:D4:E7:B0:4E:2E:3F:CF:40:22:B9:B0:61:1D:D3:C0:9B:06:2F
Certificate issuer: /CN=ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd
Certificate serial: 010D0C9F4328584900214FB77B9E5402E1C5A300
Authority key identifier: D5:D9:87:C4:51:CF:76:02:76:15:6C:18:DA:C5:C6:0F:CD:C9:FD:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd/a3b24945-8ea5-310e-9ec6-a257dcf53f41.roa
Signing time: Tue 25 Feb 2025 14:00:52 +0000
ROA not before: Tue 25 Feb 2025 14:00:52 +0000
ROA not after: Mon 26 May 2025 13:00:52 +0000
asID: 33465
IP address blocks: 74.51.240.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:00:21:4f:b7:7b:9e:54:02:e1:c5:a3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd
Validity
Not Before: Feb 25 14:00:52 2025 GMT
Not After : May 26 13:00:52 2025 GMT
Subject: CN=75b5ebbd-55fe-4bd7-b150-95e2e37f90d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:48:f8:f7:c5:2e:98:8f:50:4f:9e:62:a1:ee:
b2:02:ed:92:41:bc:8d:23:22:a2:bc:53:62:58:c5:
3c:31:8f:7f:a2:21:34:5f:ae:94:13:f1:0f:ef:49:
9e:d9:9d:e5:32:5c:14:24:9a:50:af:eb:0b:76:43:
e1:68:43:21:c8:2a:2d:79:50:82:28:f4:12:f9:ee:
e0:ed:a7:11:95:9f:3a:4d:ca:d3:fe:db:ce:b6:b8:
f6:a4:37:db:85:aa:f4:62:9f:d5:bc:61:94:a0:4a:
6a:03:48:36:e4:7e:96:44:e1:4a:58:ac:0e:4a:71:
02:b6:20:f5:f2:72:26:c2:04:2f:d0:f5:27:f2:a7:
26:c5:60:23:10:e8:8e:9e:5f:3b:6c:98:35:fb:70:
ae:6f:be:7e:1e:49:23:e0:7c:32:45:4b:7f:02:07:
9b:04:32:8e:15:14:5f:12:24:fb:60:35:5a:f7:a1:
c2:8d:a6:39:bd:91:48:02:a0:52:58:74:92:ed:b5:
b3:8a:1a:5a:64:68:ea:91:31:6d:c9:b0:1b:6e:69:
06:f1:87:9f:c3:b6:07:8d:74:3c:3c:5f:24:d1:86:
96:3a:1d:41:71:75:69:0b:86:24:30:b2:5a:ff:2c:
f0:f1:42:ea:70:c7:af:f7:27:63:20:0e:2e:5d:60:
f2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:85:D4:E7:B0:4E:2E:3F:CF:40:22:B9:B0:61:1D:D3:C0:9B:06:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd/a3b24945-8ea5-310e-9ec6-a257dcf53f41.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd.crl
X509v3 Authority Key Identifier:
keyid:D5:D9:87:C4:51:CF:76:02:76:15:6C:18:DA:C5:C6:0F:CD:C9:FD:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd.cer
sbgp-ipAddrBlock: critical
IPv4:
74.51.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:49:e3:84:a4:e3:c4:b5:ca:c1:7c:10:de:02:b0:c2:cb:dc:
82:3a:5e:fc:5b:4e:77:92:09:43:9e:e4:bd:f8:60:6e:98:4d:
c7:a0:19:12:6f:a2:c9:f5:01:4c:0e:35:e6:ec:83:ae:42:2b:
32:27:d2:e3:45:b4:5d:2c:23:ac:7e:e4:28:4e:df:92:82:38:
57:2e:e7:68:4c:a0:79:56:22:9a:20:60:ba:d5:10:52:c3:58:
4c:55:56:1a:2a:a9:8f:a0:00:0b:17:56:64:5c:ad:06:52:b9:
3e:ac:6f:8b:f4:c6:ba:23:ad:80:76:45:b3:2e:83:68:8b:59:
5a:05:82:b1:54:78:75:d5:38:47:42:e2:01:8a:33:0b:cd:73:
d0:92:3b:49:bd:ba:2d:b4:8a:ea:59:26:9c:ea:96:5d:df:90:
37:28:d7:42:bf:4a:a7:de:cc:49:39:16:07:6e:36:59:32:56:
c1:46:cd:86:fb:6f:9e:51:df:20:4a:aa:b5:5b:89:5a:44:3f:
b0:10:f2:bc:17:eb:21:fe:c9:88:3e:4e:da:06:eb:0e:a9:e6:
fd:9c:f4:3c:6b:c2:e0:41:be:fb:69:99:61:92:17:74:bf:f3:
39:b0:e2:52:93:3c:3e:3f:7a:e5:06:65:d2:bd:2d:82:3d:1b:
28:2c:89:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:12:58 2025 by rpki-client