Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087/de9a14da-eb21-3df9-88a3-a094282ec012.roa
File: de9a14da-eb21-3df9-88a3-a094282ec012.roa (raw, json)
Hash identifier: qrn2LTYCPnSgQBfFImf9bH20jkCZl/Wut1nzIG+OAfI=
Subject key identifier: 67:CF:77:F0:4B:7F:8D:11:00:E2:EC:47:D6:68:A6:74:86:B4:F3:C6
Certificate issuer: /CN=d7a960e2-9fa8-4b77-8609-5ee424f44087
Certificate serial: 010D0C9F432858494B640687048680637F7C33A0
Authority key identifier: A2:A6:EF:CB:44:3A:94:85:33:05:1B:25:CC:81:A8:4A:7E:34:5B:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087/de9a14da-eb21-3df9-88a3-a094282ec012.roa
Signing time: Mon 24 Mar 2025 13:00:53 +0000
ROA not before: Mon 24 Mar 2025 13:00:53 +0000
ROA not after: Sun 22 Jun 2025 13:00:53 +0000
asID: 19318
IP address blocks: 74.50.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:64:06:87:04:86:80:63:7f:7c:33:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7a960e2-9fa8-4b77-8609-5ee424f44087
Validity
Not Before: Mar 24 13:00:53 2025 GMT
Not After : Jun 22 13:00:53 2025 GMT
Subject: CN=11cd2bd0-1c06-4ea1-9a56-42224773c106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7f:f9:91:21:38:1f:82:b8:cc:5b:c9:c6:d6:
d1:3b:c5:8e:db:85:ee:cd:2d:c1:6c:c7:f6:63:04:
a2:b3:50:4a:66:fe:ba:8b:71:5f:29:1a:9c:a0:dc:
28:4b:18:36:42:5e:73:01:78:a7:83:36:d5:31:c9:
74:a5:b4:ac:0b:fb:55:b9:60:7a:e1:d1:89:f9:0a:
28:c6:fe:2f:4e:61:d2:1e:ea:39:27:2b:92:2d:3a:
17:a8:66:4f:06:d1:6c:b9:67:ff:6d:0c:d1:a5:f7:
0c:eb:26:d4:fc:4b:0a:da:9f:2c:69:0f:69:7f:57:
2b:5c:98:43:8d:30:ba:a4:7c:3a:0d:34:1a:b6:bd:
af:f4:22:c4:42:2d:fe:9a:d4:d9:95:ec:4d:f3:bc:
65:54:65:22:df:4b:f5:70:0a:78:0a:0d:c5:17:7e:
9d:55:57:92:0d:35:34:15:d5:1a:a5:95:f6:36:d6:
d2:27:9a:63:2f:cf:47:21:4a:91:ff:0f:35:e3:30:
51:e1:e1:64:f0:30:a0:ad:65:e2:3e:64:0b:51:5a:
07:51:6a:e3:a4:44:8d:0e:06:dc:0a:13:da:d3:e8:
c9:76:4f:5c:96:49:ba:0d:e8:24:6c:74:3b:a5:22:
b1:fc:55:d9:d3:fc:74:0e:8f:ca:8d:07:04:35:d6:
67:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:CF:77:F0:4B:7F:8D:11:00:E2:EC:47:D6:68:A6:74:86:B4:F3:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087/de9a14da-eb21-3df9-88a3-a094282ec012.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087/d7a960e2-9fa8-4b77-8609-5ee424f44087.crl
X509v3 Authority Key Identifier:
keyid:A2:A6:EF:CB:44:3A:94:85:33:05:1B:25:CC:81:A8:4A:7E:34:5B:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087.cer
sbgp-ipAddrBlock: critical
IPv4:
74.50.84.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:1c:fc:b1:d4:b9:ca:ce:cc:0f:9c:bc:61:8a:0d:68:a3:12:
59:45:cb:cc:48:38:da:da:72:43:fb:a8:40:5c:f5:fe:cb:ff:
95:49:9e:d0:57:06:ff:a7:f3:96:23:4f:15:66:0f:db:c1:e3:
62:aa:a1:cf:aa:c2:34:63:26:b0:26:91:fe:e6:9a:18:ee:e0:
e1:60:ba:ca:0e:4d:e9:27:39:c1:7f:c5:cd:ad:63:15:3a:ae:
9c:7e:ae:cf:52:c6:75:81:0e:c6:75:20:22:f4:95:94:2b:4d:
0a:8b:05:18:48:82:86:87:a0:80:52:f0:a2:22:df:d2:83:ef:
02:cb:4c:4a:c9:05:6d:91:75:57:2e:ad:ac:db:55:d3:b9:91:
33:a9:ba:53:1e:9b:b0:88:c0:1a:6d:48:96:6a:89:56:09:fd:
00:20:1e:5e:9d:44:b3:b0:aa:ba:27:26:c4:52:bc:ff:a1:21:
d9:d5:49:2d:51:98:05:39:d5:dd:4c:33:7d:23:7d:f4:f0:22:
33:bd:c7:dc:54:29:71:50:ff:65:25:09:fe:6d:79:ef:3a:0f:
ba:7d:44:a0:e2:27:68:06:89:a0:e6:88:cd:84:0a:ac:46:30:
9a:b1:84:2a:34:fe:c1:d2:e2:e5:38:00:f2:a5:d9:cd:67:d9:
66:53:29:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:58 2025 by rpki-client on console.sobornost.net