Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd/b84aedd6-f81f-327a-9ea2-d6c488a03d44.roa
File: b84aedd6-f81f-327a-9ea2-d6c488a03d44.roa (raw, json)
Hash identifier: Sd5RMxr+PlIRrcwSxBIqLu8/jNZq5gHO/r4X2/6z2iM=
Subject key identifier: CC:C8:74:7A:06:7A:76:6D:4D:8B:34:DF:21:9F:AD:D9:E9:08:55:8C
Certificate issuer: /CN=ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd
Certificate serial: 010D0C9F432858492184038A72EA127B6FF7533A
Authority key identifier: D5:D9:87:C4:51:CF:76:02:76:15:6C:18:DA:C5:C6:0F:CD:C9:FD:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd/b84aedd6-f81f-327a-9ea2-d6c488a03d44.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 26395
IP address blocks: 74.51.240.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:84:03:8a:72:ea:12:7b:6f:f7:53:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=99407e4c-3af0-44d5-8658-26ea9c5fd0ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f9:91:1c:f6:5f:b1:d9:d0:b9:b3:fe:c0:c5:
96:a6:0c:c3:73:48:e3:7c:c8:64:88:73:dc:4c:5a:
97:49:92:57:82:34:a1:55:b1:7f:23:04:dc:1e:fe:
03:69:22:d6:79:cf:ae:31:7e:90:56:c3:de:df:b7:
46:42:bf:a1:47:01:2e:87:b7:f8:44:91:d5:c3:65:
16:06:39:94:d5:57:b3:ed:17:2c:49:cf:47:41:0f:
cf:6a:8d:6e:37:a5:f9:fb:bb:6a:db:07:2b:e1:6d:
81:06:62:33:9f:2d:99:c9:0e:a2:8c:6e:9c:3d:4b:
e3:6d:9b:15:31:ae:1d:2f:2c:a3:d0:60:a1:0c:e0:
ea:6b:f2:af:95:09:ce:37:72:b7:6d:f1:9f:ba:95:
58:7d:5f:0c:d3:a3:8b:1a:01:f6:d0:ed:8b:1a:ad:
1d:56:18:a9:20:eb:76:e5:04:7b:20:83:4b:91:8d:
c7:ee:0b:6c:8e:ba:0b:f5:69:80:76:0e:4a:66:6f:
4b:39:7f:d4:63:59:e5:b5:97:15:e0:d9:2f:f7:aa:
5a:a6:c1:93:39:4d:c7:91:18:07:21:ef:2b:b6:cd:
4e:cd:2a:33:25:6e:86:e3:ac:f2:38:df:d7:6b:25:
f8:b8:31:42:cb:94:6b:56:81:ca:f0:f1:b0:88:f5:
4c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C8:74:7A:06:7A:76:6D:4D:8B:34:DF:21:9F:AD:D9:E9:08:55:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd/b84aedd6-f81f-327a-9ea2-d6c488a03d44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd.crl
X509v3 Authority Key Identifier:
keyid:D5:D9:87:C4:51:CF:76:02:76:15:6C:18:DA:C5:C6:0F:CD:C9:FD:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd.cer
sbgp-ipAddrBlock: critical
IPv4:
74.51.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:2a:00:a5:5d:cb:95:76:ea:b8:1a:7e:9a:a0:2a:e3:35:48:
e1:b4:7e:58:b4:dd:f8:6a:1e:55:35:23:9c:8f:89:27:03:68:
60:90:fe:97:41:93:f5:65:a8:d9:42:d5:3c:ba:2b:d1:2b:91:
28:87:79:12:bf:24:ec:ef:4a:1e:56:7f:88:1b:d6:0f:6a:18:
1d:e6:38:7a:78:fa:af:e1:84:7a:74:f3:bb:ea:e2:25:f4:fd:
5c:39:1a:b3:2c:4f:8b:42:a0:79:97:fb:eb:80:4f:19:30:e1:
a4:c0:40:f0:97:85:36:9e:92:50:c8:a7:a0:e0:a5:03:43:5f:
e3:a7:6b:cb:e7:c3:87:75:6f:6e:38:b6:36:a9:f8:c7:c0:fa:
5f:a9:da:2c:a4:a6:c2:93:96:9b:a2:20:d4:db:c2:ed:9a:3f:
53:f5:e6:ba:b4:40:a9:81:0e:ac:5d:e7:35:c4:ba:57:ff:60:
ac:d2:0d:46:ec:e4:5b:ab:00:21:11:92:51:29:b3:d1:2e:c6:
8d:cf:92:b1:71:16:88:9d:92:ab:63:bf:f6:31:e1:b4:8c:2e:
50:0f:4a:5c:7e:0c:17:30:31:76:28:92:e0:df:0c:7e:01:25:
50:62:78:a5:15:21:9d:2d:f1:fe:78:73:19:99:5b:26:ae:11:
e0:5e:bf:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:10:33 2025 by rpki-client