Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d10c169a-ae70-3a68-9f57-5160dba5487d.roa
File: d10c169a-ae70-3a68-9f57-5160dba5487d.roa (raw, json)
Hash identifier: sQlXtcTXZ7nP3seFj1MPnm6j/MukOowElYDNT8ic4x4=
Subject key identifier: 0A:B2:39:11:95:83:00:31:01:2E:A0:A2:77:C9:7C:45:71:8F:96:BC
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858490B4C333C4DBE1C9932BB2E30
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d10c169a-ae70-3a68-9f57-5160dba5487d.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 701
IP address blocks: 74.98.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:33:3c:4d:be:1c:99:32:bb:2e:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=159a65aa-6ac4-435d-a75b-81486131db51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:65:f9:9f:59:59:e3:64:61:bf:4b:d9:d7:04:
53:e0:54:4f:c1:1f:c1:cf:61:d4:50:cb:a6:ef:65:
59:d2:62:e9:70:08:21:f6:cd:5e:99:86:ba:d4:5e:
09:7b:72:b1:53:1c:a7:a1:b3:ea:9e:30:66:8a:73:
50:ee:1c:f5:3b:c8:c8:5a:4d:40:28:7e:0b:cd:75:
ad:1e:90:f9:35:c0:a5:6b:ad:1e:5e:62:87:44:b5:
26:37:f4:0b:cd:d8:72:69:ac:0b:c4:de:14:ea:7f:
48:b4:7d:9a:25:e9:0f:a1:70:b3:9d:5f:b6:2f:47:
85:e6:43:a2:17:8c:d4:5f:be:a3:86:45:ff:c2:fe:
ea:bb:2b:09:dc:5f:35:94:4a:38:50:99:0e:37:6e:
69:cb:38:d3:cf:5c:7d:c2:ea:f0:cf:27:87:f6:01:
97:6b:44:22:2e:14:43:05:64:32:52:5b:ae:ca:d8:
af:d0:73:d9:63:88:de:df:46:8d:12:bd:d4:bc:7e:
fb:01:bb:38:ac:0f:49:66:63:39:b9:ed:9a:fc:f5:
84:f7:a7:bd:c6:ec:7f:b7:65:12:fa:44:a4:90:3f:
ae:d8:3e:14:e8:c3:26:59:6a:4f:9b:52:69:07:1a:
8c:c4:fb:7e:cb:20:7a:d4:ef:71:c8:63:28:d4:0e:
74:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B2:39:11:95:83:00:31:01:2E:A0:A2:77:C9:7C:45:71:8F:96:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d10c169a-ae70-3a68-9f57-5160dba5487d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
74.98.0.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:c4:78:5f:21:73:01:af:54:0c:1a:7d:1d:d0:f4:b9:36:90:
68:69:b9:76:5c:57:52:ae:51:eb:46:ee:f8:98:0b:9f:0d:f4:
85:c2:43:fc:31:7a:97:5b:e5:36:d5:eb:01:20:16:f5:cc:22:
7a:52:a8:1d:63:fa:7e:0c:0c:0d:4c:1d:d3:d8:38:ed:87:74:
4b:15:b2:99:39:42:ee:27:c6:04:59:21:1a:74:13:42:c6:f8:
90:a5:ac:61:93:a6:a4:7c:c6:99:e7:70:04:7d:a9:55:52:21:
9d:68:dd:3d:e5:15:a5:bd:56:46:03:dd:71:95:73:2c:e8:6f:
c0:55:bf:32:a5:1c:85:a4:84:22:bf:d1:53:85:bf:75:aa:29:
bd:fc:1f:60:0b:92:c3:02:12:f4:ab:e6:af:6d:3a:b3:46:ed:
8a:5d:b8:cc:ff:ae:db:3a:28:c4:39:42:5b:2b:4b:00:ec:9b:
41:ee:6f:7d:ff:2f:90:72:c7:cf:0c:36:f6:70:dc:90:1d:15:
2b:46:43:e3:75:d3:82:e7:bc:84:4a:7c:84:09:48:85:67:6a:
01:fa:7f:1a:4c:a7:78:6d:ca:ad:c1:45:70:2a:5c:03:1a:cb:
71:b4:da:27:51:c0:84:69:fb:00:17:f5:73:c7:8a:06:02:72:
ac:76:5b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:47:56 2025 by rpki-client