Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/07792df2-9809-3254-94e8-5ff0afcb594f.roa
File: 07792df2-9809-3254-94e8-5ff0afcb594f.roa (raw, json)
Hash identifier: 7NdTL8CzN6OLZGCHKw0rCREAdw2SnWrwPbm/GQSwddU=
Subject key identifier: 41:FE:DB:F4:4A:FB:B0:71:9C:7C:0E:C4:96:99:A9:AC:03:D7:DE:9E
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C84C0CBA216447C1C1108280
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/07792df2-9809-3254-94e8-5ff0afcb594f.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 15169
IP address blocks: 74.125.72.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4c:0c:ba:21:64:47:c1:c1:10:82:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=1401afa0-ac26-4f55-95df-9f820935e02b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b3:94:75:e8:33:9f:d5:24:19:74:37:ab:e5:
e6:64:77:41:fb:84:ee:be:c8:50:8e:b4:bf:68:03:
e7:b8:2f:21:91:ab:c0:3e:71:22:a2:39:3f:1b:32:
76:cd:80:61:b5:05:67:11:ef:1c:73:92:ca:71:49:
60:ce:39:22:ae:20:21:a8:a0:50:59:60:dc:0f:c8:
e4:5a:f7:2b:2b:24:7e:88:e9:77:24:03:67:67:0b:
06:90:59:8a:fc:52:3e:b8:f9:ab:2c:00:1c:9d:90:
b3:37:f6:b0:7a:5e:c4:fb:71:f5:77:e0:93:e3:90:
15:8e:22:18:3f:b1:7d:62:c1:0a:d3:5a:40:09:a2:
02:8c:e3:65:60:33:8d:d5:1d:ec:0c:79:8e:2a:21:
10:66:ad:79:e9:62:5a:c6:c2:b3:c8:5f:02:a5:74:
35:50:e5:8e:2a:48:d7:89:7e:40:d4:b1:52:18:f5:
58:4c:6e:2f:96:6c:c3:c3:25:7b:03:f5:9f:d5:11:
86:ad:09:59:df:c7:ff:6b:ce:50:24:14:75:9a:98:
db:d2:92:d4:00:33:ee:b7:78:d8:9b:f2:4d:f5:53:
25:fc:c3:f5:ee:3d:c6:e0:65:e9:4f:86:05:1b:db:
75:33:5a:11:a5:dd:c8:b7:ce:c3:32:a5:ea:ad:64:
c7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:FE:DB:F4:4A:FB:B0:71:9C:7C:0E:C4:96:99:A9:AC:03:D7:DE:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/07792df2-9809-3254-94e8-5ff0afcb594f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
74.125.72.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b8:2f:c0:c1:91:12:f9:7a:e0:a4:97:33:ee:1d:70:15:07:99:
b3:a3:cf:b4:0c:15:32:90:fc:63:16:df:19:64:58:61:69:dc:
d6:03:87:a3:44:2e:70:d0:ee:8f:51:31:fa:b4:7d:2f:ff:41:
9b:35:52:e0:99:86:76:78:a5:79:fd:01:8d:b8:2a:fc:5d:f3:
64:60:b5:61:0e:ee:97:58:9c:08:a9:76:10:92:02:bd:2f:ef:
ed:87:df:10:92:88:4e:fb:84:46:13:a1:ae:97:db:59:4c:b0:
89:5b:1b:28:8c:7a:cb:68:cb:bb:f8:84:c1:6f:ea:09:89:38:
67:e9:4c:8c:b3:51:16:8f:8b:a2:a7:0a:50:c8:34:08:4d:83:
c1:14:0d:24:7d:b1:07:3a:5d:40:3d:bc:0a:a8:d2:b0:20:e9:
6f:c6:c6:36:c7:4d:ec:85:58:aa:c5:84:0b:6b:74:02:9b:96:
5f:19:a4:84:0f:0a:57:1e:f0:8a:ab:4c:73:cc:a5:ff:b7:d1:
a5:e2:5d:5b:db:5e:66:ec:7a:60:b9:a1:5d:e7:2b:4a:52:25:
86:23:00:e9:56:a9:61:59:73:07:50:fc:6f:cf:d5:15:8a:24:
8c:56:da:a7:88:df:c0:8a:40:ac:cf:8e:30:a4:dc:22:0d:22:
2f:13:b5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:29:29 2025 by rpki-client