Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/30289bc1-a7cf-3b0e-a29e-3839462dc7c5.roa
File: 30289bc1-a7cf-3b0e-a29e-3839462dc7c5.roa (raw, json)
Hash identifier: zN2j/e8jRQ+HGiOOis7THww3HiugudgtmJ9UHtQrLS8=
Subject key identifier: B8:7E:68:0B:4E:96:DB:C5:44:28:BE:99:98:7B:17:57:6E:03:54:77
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858490B4C2BD387E8DDF2D33DEA00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/30289bc1-a7cf-3b0e-a29e-3839462dc7c5.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 701
IP address blocks: 74.107.0.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:2b:d3:87:e8:dd:f2:d3:3d:ea:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=dd9eccd5-5994-4c0a-923f-800f38767ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0b:bb:ba:99:76:93:84:6b:17:20:ee:89:6c:
3a:0c:03:c4:4d:d7:fb:86:87:6a:d2:1d:fa:1d:0c:
68:60:db:49:70:be:db:1e:1c:36:35:7e:00:17:dd:
cf:d9:cb:06:f6:3f:cf:d8:1d:9a:da:b6:42:55:24:
f5:94:da:af:31:99:06:74:4f:dd:fb:bc:59:e0:37:
f5:37:37:3c:05:d7:98:04:7a:3e:23:3e:b5:bd:bf:
3f:f4:ad:f7:38:2e:37:81:e1:e5:07:46:86:a7:ad:
9e:7f:9c:97:cd:c1:ef:07:6d:85:eb:60:47:76:22:
cb:7a:f6:59:f1:f1:c7:4b:cd:4c:ae:a9:47:21:ea:
a5:7a:a8:96:0b:c6:63:6c:c7:62:a2:b2:b2:f0:74:
39:cf:c6:03:d1:1d:b7:39:47:cf:71:b7:cc:7d:61:
a9:f7:04:00:04:90:3f:22:48:1a:f6:77:e6:74:a1:
36:cd:6b:82:4e:b6:c2:35:5c:9b:b8:2b:ea:ed:9c:
4b:96:1c:3c:14:b0:21:4d:e0:a2:21:1c:56:46:8e:
39:ad:9e:16:61:e6:17:6f:1e:74:a3:c5:51:ca:b7:
c4:f7:d3:cd:41:fe:5a:57:98:54:e5:52:87:78:53:
d2:3d:9a:02:f8:9e:f4:8d:12:f9:36:69:51:0c:92:
b6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:7E:68:0B:4E:96:DB:C5:44:28:BE:99:98:7B:17:57:6E:03:54:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/30289bc1-a7cf-3b0e-a29e-3839462dc7c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
74.107.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:ef:41:93:c8:d4:9a:c3:f5:09:5e:4d:13:c2:b5:6b:91:6a:
6a:22:a0:de:36:8f:72:c7:11:48:66:df:f0:9f:17:1e:68:dd:
7f:af:a0:1e:ee:6b:18:22:79:e3:f3:02:a1:59:65:7f:85:c0:
a9:23:6d:31:36:4a:bf:c9:a5:a4:05:1e:3f:9d:26:bc:9a:6d:
97:00:a7:54:53:b9:23:de:56:34:bd:7c:e7:c7:bb:5f:a8:9a:
36:dc:a2:2f:3b:7f:19:23:2b:22:4a:e6:4d:10:61:5b:c5:e3:
e9:8d:59:8c:ed:34:71:be:50:79:75:f8:fd:65:19:82:de:0c:
4f:f0:64:2c:3a:0c:fe:b4:dc:e0:79:18:e3:c9:9c:49:7c:c8:
eb:65:ed:cb:c6:27:af:92:7a:1b:5a:cd:cb:44:fd:b1:5f:90:
ff:12:9b:60:a0:71:a3:65:7d:12:34:c5:29:01:fd:25:39:23:
9d:83:87:0b:6e:1d:20:6b:2f:dd:35:cb:c4:0d:e9:65:06:82:
31:f1:61:c9:41:36:60:96:84:a6:fb:13:9f:71:60:0e:ba:a5:
c5:2a:77:59:75:c0:71:68:c7:b2:93:25:92:b8:31:b9:b2:48:
5b:78:cf:71:86:92:34:30:66:b3:99:4b:1a:f7:89:8f:90:51:
18:ff:0d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:22:24 2025 by rpki-client