Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4fa34d52-943a-3d31-9506-241103603a68.roa
File: 4fa34d52-943a-3d31-9506-241103603a68.roa (raw, json)
Hash identifier: lWIjktRgLbrhYD5Xsog9c/nhn1y5jiIR1s7kNwFHIiM=
Subject key identifier: 1A:14:16:28:B0:15:A8:36:04:AA:55:42:7D:FD:3D:71:2C:CD:C7:E4
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858490B4C367B577F52506DF49418
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4fa34d52-943a-3d31-9506-241103603a68.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 701
IP address blocks: 74.104.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:36:7b:57:7f:52:50:6d:f4:94:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=a3ec28c9-bc2a-4198-97f2-d8375a8be1bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d9:78:fb:ca:4b:1b:84:cc:01:e3:59:36:e1:
87:a9:94:0d:39:41:f6:f0:68:d0:ba:1d:f4:c1:43:
e6:16:9f:10:a7:72:2f:30:bc:90:96:d1:31:8d:7b:
02:06:9d:bd:03:e0:4a:ad:a5:1a:fe:60:2f:91:6b:
25:b8:b2:4f:e0:bc:61:06:49:81:87:fa:3b:9d:ec:
96:92:46:ce:2a:4b:5e:50:2a:e8:fa:9d:a5:a8:8e:
c3:9b:78:af:19:a0:ff:be:4d:51:1b:85:c6:c5:a0:
bd:58:5b:08:ff:e8:9d:d4:7d:01:bc:76:7b:8a:79:
c1:ca:ea:9b:19:65:48:ba:cf:9a:b9:db:e2:7d:2d:
9f:11:34:81:83:e3:59:39:1f:0a:d7:a5:4b:ae:1c:
e8:5d:ae:84:a7:cf:44:80:be:db:a8:09:4f:d1:3c:
0b:5b:f1:69:55:b3:f6:a0:b7:cb:c3:20:57:e1:e2:
4a:a7:5b:9b:53:58:4c:02:49:7e:cb:15:17:88:6c:
28:6c:7c:1b:ce:a2:71:2a:6a:dc:71:2f:a0:7b:1a:
c5:0f:77:a7:70:91:06:3f:26:a3:31:18:6d:d3:8b:
9d:e8:91:26:a0:c8:dd:c5:e1:cb:9d:68:2b:d3:07:
82:90:42:33:a0:8c:85:c4:51:f6:eb:36:d7:b1:bc:
3c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:14:16:28:B0:15:A8:36:04:AA:55:42:7D:FD:3D:71:2C:CD:C7:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4fa34d52-943a-3d31-9506-241103603a68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
74.104.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:83:f3:bd:fe:05:de:b5:16:0c:a5:36:3a:fd:d2:8c:8a:ab:
ea:f6:d5:d2:4e:d0:fb:13:13:a8:10:91:3c:94:99:8d:d3:ef:
7b:d1:6c:c7:4e:f0:80:3e:64:a2:b2:d3:01:4d:10:46:2a:3b:
6b:3c:b9:4b:1a:c1:92:c6:b4:cb:36:84:41:40:e2:4c:d9:20:
53:70:b5:f0:14:bb:cc:e1:98:ef:18:8f:c7:98:c5:a1:c3:24:
ec:e8:53:51:46:f2:59:f7:e9:78:51:66:48:d3:c0:60:b6:ac:
9e:d6:d7:96:2b:8b:b9:fc:7a:66:14:c6:8c:06:19:a2:c9:0e:
e9:b3:b9:71:54:5a:d3:e9:e7:f8:bd:83:6b:1c:f5:c2:1e:38:
8e:2d:1e:dd:31:72:e8:52:54:e0:9d:ac:62:ff:43:e4:e5:80:
15:cd:b9:01:df:f5:83:a2:a2:56:b5:94:fa:76:2f:ab:f1:9c:
c2:aa:4f:a6:ea:47:8f:e0:93:3b:83:ce:29:b1:6d:40:48:2b:
eb:fe:36:12:3b:47:ac:c4:a2:e9:f6:97:74:2a:5f:98:e4:87:
67:2d:fa:4b:39:ea:ff:ca:4e:ba:cf:98:71:69:f0:02:e6:7e:
72:10:ca:d7:cb:b5:60:90:34:b1:c9:04:5b:2b:ba:05:d7:7c:
1d:0b:82:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:50:49 2025 by rpki-client