Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/96cfbcf1-b432-3689-8421-0dc518512723.roa
File: 96cfbcf1-b432-3689-8421-0dc518512723.roa (raw, json)
Hash identifier: HMcsW3cSm837vhdWGFJRhrh02mgRvMjV+bZZduG0qqk=
Subject key identifier: 42:C7:DC:13:89:5A:60:51:8C:13:00:CC:E5:50:17:B5:19:94:6C:12
Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial: 010D0C9F4328584957F40850D20FFADE18216100
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/96cfbcf1-b432-3689-8421-0dc518512723.roa
Signing time: Sat 29 Mar 2025 01:00:39 +0000
ROA not before: Sat 29 Mar 2025 01:00:39 +0000
ROA not after: Fri 27 Jun 2025 01:00:39 +0000
asID: 11290
IP address blocks: 74.210.224.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:57:f4:08:50:d2:0f:fa:de:18:21:61:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Validity
Not Before: Mar 29 01:00:39 2025 GMT
Not After : Jun 27 01:00:39 2025 GMT
Subject: CN=ce27182e-2b4d-4b56-9790-e32201fc8a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3d:b5:4f:f0:16:06:71:4f:40:d6:27:46:72:
51:8d:7c:3a:ae:61:cb:48:ed:c5:19:6a:d4:25:c8:
a1:a1:d8:7e:7b:c7:d4:a0:d0:f1:9d:85:b0:7f:65:
e4:ca:e0:15:c1:9c:24:be:7c:49:61:9b:7a:de:5c:
5d:16:0f:af:e1:05:f3:9c:75:96:4f:a2:59:a5:75:
e4:54:29:6e:ce:46:ba:c6:e6:1a:6d:6f:85:07:46:
d9:96:5d:7c:bb:46:0e:0c:88:8a:37:88:13:d1:95:
9c:8a:97:d9:6d:d4:65:3c:2e:55:de:28:85:0d:a8:
2f:66:0e:7c:c9:20:61:30:f1:95:06:3f:89:31:69:
f7:bd:da:10:b8:63:53:d7:4e:7d:96:29:8e:73:b1:
c3:9c:6d:01:77:9e:35:1f:63:f4:27:55:b2:8b:5d:
40:da:b8:52:13:fc:69:ea:f3:3f:c0:ee:dd:4d:98:
a8:a2:26:db:27:07:ff:92:05:6f:13:97:81:8e:b5:
ad:94:f2:d7:3b:d3:01:b5:16:86:64:01:b0:bb:e2:
19:d2:24:f3:9a:d7:fe:9c:b4:90:bf:70:48:a8:c8:
67:f2:4c:1c:dd:09:4d:74:ba:1f:7e:f9:30:db:5b:
8f:78:a6:a4:11:27:7b:86:7e:d1:da:55:9e:cc:3e:
60:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C7:DC:13:89:5A:60:51:8C:13:00:CC:E5:50:17:B5:19:94:6C:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/96cfbcf1-b432-3689-8421-0dc518512723.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
X509v3 Authority Key Identifier:
keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
sbgp-ipAddrBlock: critical
IPv4:
74.210.224.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:f9:8b:52:7d:74:d2:fe:af:22:0e:eb:06:8d:dc:94:a4:4d:
fe:cb:8f:44:2c:52:8c:30:a9:16:93:7c:93:43:b5:60:1d:65:
98:c2:f4:4b:01:a8:0e:cf:5a:60:77:f3:45:c1:22:bc:7a:a8:
d9:50:d7:86:22:d0:42:9d:f2:74:10:49:fa:af:9d:6a:c7:04:
54:db:61:5a:71:0e:f6:23:d3:dd:fd:ad:29:9b:98:35:42:03:
e0:a9:4f:2f:0c:95:37:75:65:48:46:23:ab:64:9b:a9:3a:3c:
5e:11:c9:49:2e:3e:e1:a3:fd:66:97:36:2c:73:9a:84:4c:1f:
9c:91:13:98:44:9f:95:5d:2f:b5:14:ca:94:27:04:eb:f0:79:
50:94:7b:f3:bf:ce:10:5c:3d:24:b9:20:9c:7b:e1:14:92:9f:
95:24:df:e9:53:ec:3e:ce:b1:52:93:ac:cf:ba:83:0b:36:31:
8c:89:7b:97:d0:49:de:4b:f4:47:50:47:2c:fa:5d:38:e0:6f:
0d:69:cf:66:3a:b8:d2:a5:41:4a:26:4b:d4:3e:ee:2f:a7:a6:
6a:ab:ca:17:38:64:5d:f5:63:ec:b4:4f:df:be:11:2c:a1:f7:
a4:db:d5:c8:9c:1b:d1:17:f0:bb:f0:86:6d:c5:f9:92:e1:c3:
18:60:42:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:49 2025 by rpki-client on console.sobornost.net