Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/11688d7f-b87c-31c7-916b-df511f83a8b0.roa
File: 11688d7f-b87c-31c7-916b-df511f83a8b0.roa (raw, json)
Hash identifier: ntKJZ8gtL2su0KEixwFiyP4jC3al+V/+2K7FCwaxldc=
Subject key identifier: 49:15:28:90:86:93:DC:96:FC:0F:0F:24:00:A9:ED:05:E7:C4:16:FE
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD20F25F032BF0CC0EC09080
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/11688d7f-b87c-31c7-916b-df511f83a8b0.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 397227
IP address blocks: 204.74.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:20:f2:5f:03:2b:f0:cc:0e:c0:90:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=e9aeaddc-7803-4464-a907-df8e7a21d85c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3a:ad:66:be:58:5c:a0:93:91:60:09:b1:2f:
e6:ec:fc:3d:7f:da:3f:b1:d9:e9:76:a1:4c:34:bf:
92:b7:2a:b5:e6:ff:59:4d:be:72:ae:5a:33:96:03:
31:5b:a5:d5:36:3c:94:b0:ae:70:11:5c:4f:17:7c:
48:8f:9d:8d:f2:67:a1:40:84:6f:5c:b3:63:8b:51:
63:ff:6e:65:d2:a9:1e:75:fa:7d:9c:ee:8d:12:96:
25:94:ae:6f:d1:03:64:ae:ce:cc:89:21:6e:ec:9b:
fe:68:1e:96:9a:78:15:80:f9:7f:61:30:c8:7c:33:
fe:01:26:dc:08:37:0e:6f:14:53:3d:df:70:95:05:
05:fb:2f:f0:39:46:31:d2:d9:26:e2:e7:69:b2:f1:
72:b1:6c:43:7c:2e:d2:68:3f:0f:a7:74:f1:1f:d7:
90:e2:d7:91:d5:c0:5a:fa:86:10:23:ce:b5:ae:49:
31:ce:ba:fe:e6:f1:25:2c:6e:c3:77:aa:87:c2:c4:
cf:66:7d:1d:09:43:af:44:17:44:07:b8:3f:00:83:
3b:02:fc:69:b2:f3:ad:96:e6:f3:39:cb:94:5e:00:
e9:69:d1:cc:da:5c:0e:c0:17:f5:e1:7f:85:67:f3:
9a:b2:ed:ad:60:a5:02:14:a1:be:1d:78:c2:c5:fd:
a7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:15:28:90:86:93:DC:96:FC:0F:0F:24:00:A9:ED:05:E7:C4:16:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/11688d7f-b87c-31c7-916b-df511f83a8b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
204.74.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:54:85:17:61:f2:4c:ac:c1:84:88:f4:7c:62:dc:94:d2:e3:
b7:3e:5c:4e:f2:55:10:e5:7c:27:bf:d9:2c:25:16:42:92:b4:
fa:9e:b4:7c:fb:19:e0:95:2f:3f:b9:7b:65:48:7f:b4:0c:4d:
2c:13:a6:9a:6c:8b:b0:2a:12:9d:c1:36:fa:7f:18:c7:7f:b3:
22:b7:df:e1:42:89:e2:a0:bb:33:08:c5:05:f6:7f:c5:fa:9a:
63:fe:af:00:a7:cd:8e:35:4d:91:19:85:11:f0:b7:46:fd:97:
a6:82:26:6e:8c:3b:b8:ed:fd:c0:9e:9c:4a:40:90:68:f1:b3:
6b:fa:2e:b3:3b:a7:40:3f:ce:38:04:6a:95:77:8f:50:7b:62:
d2:9a:b7:5f:27:b8:d3:7c:c3:15:df:27:eb:e7:ba:e7:66:7d:
30:b9:3f:d4:2b:a6:60:d3:d6:c7:57:29:d9:38:33:8a:da:51:
a4:69:03:3e:03:9a:81:72:e8:04:ad:38:ba:3b:27:3b:5f:b1:
a5:09:18:54:ae:eb:1f:fd:ab:23:86:8a:c8:54:2e:cb:37:82:
ab:a4:05:6a:60:7c:94:9c:32:35:b8:13:a2:e5:69:aa:46:b5:
3c:5a:9e:96:88:d8:f5:6e:10:e2:ff:a9:f4:52:ea:10:40:72:
92:f1:49:7f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IPJfAyvwzA7AkIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk
ZTlhZWFkZGMtNzgwMy00NDY0LWE5MDctZGY4ZTdhMjFkODVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTqtZr5YXKCTkWAJsS/m7Pw9f9o/sdnpdqFM
NL+Styq15v9ZTb5yrlozlgMxW6XVNjyUsK5wEVxPF3xIj52N8mehQIRvXLNji1Fj
/25l0qkedfp9nO6NEpYllK5v0QNkrs7MiSFu7Jv+aB6WmngVgPl/YTDIfDP+ASbc
CDcObxRTPd9wlQUF+y/wOUYx0tkm4udpsvFysWxDfC7SaD8Pp3TxH9eQ4teR1cBa
+oYQI861rkkxzrr+5vElLG7Dd6qHwsTPZn0dCUOvRBdEB7g/AIM7AvxpsvOtlubz
OcuUXgDpadHM2lwOwBf14X+FZ/Oasu2tYKUCFKG+HXjCxf2nTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEkVKJCGk9yW/A8PJACp7QXnxBb+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMTE2ODhkN2YtYjg3Yy0z
MWM3LTkxNmItZGY1MTFmODNhOGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEpvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC9UhRdh8kyswYSI9Hxi3JTS47c+XE7yVRDlfCe/2SwlFkKStPqetHz7
GeCVLz+5e2VIf7QMTSwTpppsi7AqEp3BNvp/GMd/syK33+FCieKguzMIxQX2f8X6
mmP+rwCnzY41TZEZhRHwt0b9l6aCJm6MO7jt/cCenEpAkGjxs2v6LrM7p0A/zjgE
apV3j1B7YtKat18nuNN8wxXfJ+vnuudmfTC5P9QrpmDT1sdXKdk4M4raUaRpAz4D
moFy6AStOLo7JztfsaUJGFSu6x/9qyOGishULss3gqukBWpgfJScMjW4E6LlaapG
tTxanpaI2PVuEOL/qfRS6hBAcpLxSX8=
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:34:44 2025 by rpki-client