Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0c7955ca-7f5b-3f08-af0e-433cdd33152a.roa
File: 0c7955ca-7f5b-3f08-af0e-433cdd33152a.roa (raw, json)
Hash identifier: l1hrXE6Jhypm0JCTRPo8jlhPavleLQd0pLuvG1pPEDg=
Subject key identifier: 4D:2F:17:A6:70:02:89:5F:27:27:7C:70:9C:B0:4B:A4:34:40:8D:C5
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858494B642B13BAFE5E4567349A80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0c7955ca-7f5b-3f08-af0e-433cdd33152a.roa
Signing time: Mon 24 Mar 2025 13:00:53 +0000
ROA not before: Mon 24 Mar 2025 13:00:53 +0000
ROA not after: Sun 22 Jun 2025 13:00:53 +0000
asID: 397214
IP address blocks: 204.74.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:64:2b:13:ba:fe:5e:45:67:34:9a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 24 13:00:53 2025 GMT
Not After : Jun 22 13:00:53 2025 GMT
Subject: CN=dcadff10-bcc8-4c08-b063-e503ab89638c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:08:02:bf:6d:cf:06:18:94:5c:be:b7:e4:5c:
6b:36:ef:60:82:39:f4:c6:0f:bb:32:ac:08:0d:d9:
5f:c7:ae:82:ca:67:c1:8c:ee:83:72:9f:90:bc:28:
00:0c:95:56:ba:4a:97:c5:2d:a8:2c:69:3e:59:05:
d0:a3:cf:d5:d0:8e:5f:1f:9e:a2:09:96:86:70:be:
4b:de:ae:c7:c8:4e:b3:22:a0:a0:f1:61:17:d5:8b:
73:d2:3f:58:93:d0:a7:01:05:a5:01:b8:0b:f1:a2:
9c:ff:fc:22:cf:32:00:db:e6:04:ed:39:9f:f5:68:
c5:9d:13:70:4c:1c:b9:4b:09:a3:1c:fd:a6:b8:af:
2b:a2:e8:cf:56:f8:3e:2f:51:0f:0a:dd:43:66:cb:
1a:0a:01:1c:42:e4:8a:f3:c2:00:ac:63:35:65:e8:
33:f2:b4:c8:66:7a:da:07:b1:6d:ee:eb:0d:ca:21:
41:e2:09:2b:17:67:8a:89:e0:61:4f:85:e2:cf:30:
b0:8f:14:21:38:43:d7:53:7c:61:b0:fa:e7:3c:c0:
a9:c3:09:03:cc:c2:dd:b8:a3:9b:e8:9a:fc:65:2d:
e9:2e:51:e5:f5:72:9e:33:69:c8:c3:5e:96:65:f3:
94:71:b4:32:b2:cc:4e:45:01:ec:53:09:33:ac:da:
7e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2F:17:A6:70:02:89:5F:27:27:7C:70:9C:B0:4B:A4:34:40:8D:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0c7955ca-7f5b-3f08-af0e-433cdd33152a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
204.74.73.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:d9:82:5a:96:eb:4a:cd:68:14:b2:6c:43:9f:77:9b:4f:01:
2a:25:af:14:ad:08:04:8a:40:ba:7a:1a:aa:ba:08:4f:5b:88:
5f:88:67:08:9a:29:6e:21:34:94:51:56:98:b1:ad:57:7c:cd:
5d:2a:00:19:89:1a:cc:67:33:e2:5b:b4:79:eb:c3:53:aa:9a:
af:98:63:ac:bb:da:08:38:a6:6e:8c:2f:fe:79:02:b8:e7:e5:
93:96:ea:c4:49:b4:f1:26:c5:ab:45:26:82:0d:c4:d4:22:00:
29:13:00:90:98:bb:55:94:87:9d:02:7b:f7:44:74:1d:e0:bc:
38:64:cc:0d:58:90:0a:08:b3:4c:8c:13:fc:f2:38:b2:4b:53:
0a:05:d6:78:5a:c1:f3:d6:0d:ca:00:9c:a4:e3:5f:90:cf:1d:
0f:94:ce:9f:86:20:7b:d7:eb:3e:ec:2a:70:a3:4b:72:08:0b:
8f:2d:3f:21:99:4b:15:d2:8a:0d:b5:e8:41:63:85:69:b4:1b:
6d:9c:78:f2:2b:b9:00:72:65:a2:df:20:36:2b:ba:3d:66:17:
e5:e5:81:8e:1a:20:ad:36:1e:b8:f8:db:ab:18:36:b5:73:c7:
e7:f7:5a:52:4f:54:5e:1e:28:fd:d6:4a:e5:e3:a2:f9:d4:35:
32:cb:4c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:06:58 2025 by rpki-client