Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/011fcd57-9d3e-3017-94cc-ffa6371b7472.roa
File: 011fcd57-9d3e-3017-94cc-ffa6371b7472.roa (raw, json)
Hash identifier: lLTl9oWyUT+Kd2/CAfjGKdvCPB4uYTmF8ICjO/8dKNc=
Subject key identifier: DE:C9:4E:D4:BB:DC:65:66:FC:32:55:48:01:0E:E1:1E:33:3B:21:AC
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848A996413F852939399ABC6F80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/011fcd57-9d3e-3017-94cc-ffa6371b7472.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 397213
IP address blocks: 204.74.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:41:3f:85:29:39:39:9a:bc:6f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=dcb2db9f-eb92-44ea-a102-bc46ccd4664a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e4:21:60:c9:47:d6:54:f6:1d:81:a2:b5:40:
8c:f0:52:15:ba:d4:ce:14:9e:9b:56:9a:f7:8a:c6:
e0:4f:1f:d0:94:33:b2:48:15:fe:d6:26:8a:1b:2e:
80:2e:c6:7b:74:19:ec:29:ce:83:b5:0c:f4:2c:64:
aa:f6:6e:ab:f8:b1:02:73:02:46:7e:03:87:f7:ac:
18:db:d1:a8:19:be:34:78:05:50:9a:cd:39:93:10:
49:4c:c9:27:d8:88:eb:66:16:00:3e:24:f9:f3:00:
fa:8f:47:ba:52:c5:34:ba:22:89:c5:e8:88:a3:d2:
ce:14:97:d8:73:0a:46:92:a6:2f:da:44:7b:ee:42:
33:96:c0:2a:2a:0d:8b:8d:ec:25:2b:77:c3:09:ef:
0c:ce:ce:cc:76:d7:46:03:70:e7:68:27:5a:94:c3:
bb:a6:7e:5f:ef:70:9c:c7:13:7b:c2:67:a3:35:de:
48:f1:e2:d5:3d:99:61:c2:bf:7f:b7:ef:02:2e:de:
22:2a:6b:c2:4a:90:45:06:25:36:e2:01:bc:3d:af:
56:1e:56:ee:00:b6:87:cb:bc:95:df:fb:c0:be:af:
5c:aa:d3:c2:55:e2:f1:74:e6:6d:31:06:1b:d9:87:
eb:bd:be:57:66:e1:da:57:24:f0:23:23:e3:03:3e:
67:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C9:4E:D4:BB:DC:65:66:FC:32:55:48:01:0E:E1:1E:33:3B:21:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/011fcd57-9d3e-3017-94cc-ffa6371b7472.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
204.74.66.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:96:67:38:94:2d:a1:e1:33:72:9d:02:5a:34:13:65:95:b1:
c7:a9:fa:65:40:ac:b2:8e:24:13:43:5d:0f:e0:5a:72:5b:c9:
c4:55:c7:20:68:5b:f3:84:3a:e3:3f:83:dc:dd:28:7f:18:9f:
00:91:86:f2:f6:ca:7c:c5:16:bc:4f:bb:5b:47:4a:27:54:a3:
3c:48:02:11:6f:4c:eb:87:1b:60:2c:e2:79:36:93:2d:70:18:
86:fa:59:6d:be:57:e0:6f:7a:8d:ca:2f:c7:9b:0c:fb:ef:24:
fb:e2:92:74:1a:5a:a2:45:40:0f:04:28:eb:23:45:10:c8:63:
49:b2:63:44:d6:c6:f8:f8:40:6f:82:84:06:b9:3a:7c:40:6b:
fc:db:36:60:e1:61:d8:9c:fd:63:bf:f5:41:60:23:90:1d:50:
b2:b9:f7:49:08:b0:9a:00:a8:b5:aa:2f:5b:07:19:eb:1e:53:
1f:40:09:5d:d5:73:be:94:47:14:8a:bf:e5:60:db:fd:31:9c:
e5:e6:41:bf:f4:e6:0d:bc:2d:ef:82:cd:6d:79:de:5c:67:7b:
e5:60:88:35:7e:c9:7a:ae:30:59:fc:d5:f4:71:b7:87:47:b9:
60:e3:a0:b5:0f:72:89:d3:7b:e0:50:48:c2:55:ec:7d:64:44:
8b:d0:46:0e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplkE/hSk5OZq8b4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk
ZGNiMmRiOWYtZWI5Mi00NGVhLWExMDItYmM0NmNjZDQ2NjRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4eQhYMlH1lT2HYGitUCM8FIVutTOFJ6bVpr3
isbgTx/QlDOySBX+1iaKGy6ALsZ7dBnsKc6DtQz0LGSq9m6r+LECcwJGfgOH96wY
29GoGb40eAVQms05kxBJTMkn2IjrZhYAPiT58wD6j0e6UsU0uiKJxeiIo9LOFJfY
cwpGkqYv2kR77kIzlsAqKg2LjewlK3fDCe8Mzs7MdtdGA3DnaCdalMO7pn5f73Cc
xxN7wmejNd5I8eLVPZlhwr9/t+8CLt4iKmvCSpBFBiU24gG8Pa9WHlbuALaHy7yV
3/vAvq9cqtPCVeLxdOZtMQYb2Yfrvb5XZuHaVyTwIyPjAz5nrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN7JTtS73GVm/DJVSAEO4R4zOyGsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMDExZmNkNTctOWQzZS0z
MDE3LTk0Y2MtZmZhNjM3MWI3NDcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEpCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAGWZziULaHhM3KdAlo0E2WVscep+mVArLKOJBNDXQ/gWnJbycRVxyBo
W/OEOuM/g9zdKH8YnwCRhvL2ynzFFrxPu1tHSidUozxIAhFvTOuHG2As4nk2ky1w
GIb6WW2+V+Bveo3KL8ebDPvvJPviknQaWqJFQA8EKOsjRRDIY0myY0TWxvj4QG+C
hAa5OnxAa/zbNmDhYdic/WO/9UFgI5AdULK590kIsJoAqLWqL1sHGeseUx9ACV3V
c76URxSKv+Vg2/0xnOXmQb/05g28Le+CzW153lxne+VgiDV+yXquMFn81fRxt4dH
uWDjoLUPconTe+BQSMJV7H1kRIvQRg4=
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:09:42 2025 by rpki-client