Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/145a513e-1f0c-3ee8-8dc0-55d53f7e89d0.roa
File: 145a513e-1f0c-3ee8-8dc0-55d53f7e89d0.roa (raw, json)
Hash identifier: Meh5pZkBoIXRJXvUgiyqcfRgqJHVdfgZ8ZU2wR6ri2E=
Subject key identifier: 61:43:CF:FB:40:61:04:D4:0D:97:9A:64:E8:8E:3A:7A:7E:5B:59:34
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848A996427C9F0805E64003ED80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/145a513e-1f0c-3ee8-8dc0-55d53f7e89d0.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 397232
IP address blocks: 204.74.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:42:7c:9f:08:05:e6:40:03:ed:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=b9e19f6f-9f1f-445f-85b7-1bafbcb37a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:16:3f:51:75:d0:f8:9d:9b:c5:54:8b:83:3d:
aa:78:96:88:d6:08:2f:25:fd:a5:98:48:41:19:fc:
91:72:28:35:28:bc:95:69:30:db:ba:a1:c2:41:a2:
c1:09:77:90:d5:0d:a9:e9:ed:08:21:46:c1:37:90:
1b:9f:97:49:53:a4:0d:73:6a:29:cc:cd:38:75:62:
ff:8c:c1:79:50:64:11:76:4b:23:99:48:10:37:6f:
56:c1:5d:c3:b2:dc:d4:47:ce:f7:b5:f1:c4:ac:17:
6e:2d:94:d1:0f:8e:dd:20:d7:4c:3f:b2:53:cb:df:
2d:01:13:e2:ce:f0:45:2c:45:41:84:54:88:78:92:
83:09:fd:99:24:aa:4b:4b:62:93:fc:e8:35:ac:2a:
65:c4:7c:a9:64:1d:30:05:04:b3:64:d4:f0:e0:90:
01:9e:57:e8:f9:9f:25:de:62:15:c8:61:11:d0:c0:
5d:0f:f2:8d:7c:ec:80:4e:4e:51:99:08:db:37:0d:
ce:41:88:d3:c3:48:62:b0:64:1a:17:12:cd:1c:b8:
25:13:b1:91:8e:0f:75:d4:2a:71:d1:32:5e:f2:44:
f4:31:b2:74:1c:6f:d9:53:a2:b3:6f:49:64:f2:ad:
8d:0a:e4:8f:07:33:a3:72:6a:8b:98:43:cd:be:9c:
81:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:43:CF:FB:40:61:04:D4:0D:97:9A:64:E8:8E:3A:7A:7E:5B:59:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/145a513e-1f0c-3ee8-8dc0-55d53f7e89d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
204.74.66.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:b1:ee:84:f7:8e:74:28:b8:5b:67:5e:d8:fb:63:43:a5:5c:
82:db:55:7f:79:16:61:f8:d7:f5:17:a9:50:f2:11:fe:ba:aa:
61:dd:61:f6:e4:7f:6b:c8:69:86:2b:c2:b0:e9:3d:86:16:22:
4d:31:cf:1d:1c:ab:5e:d5:00:97:af:6f:79:13:b3:2c:94:44:
1b:61:c4:14:7e:1c:d4:4a:88:ca:bd:23:99:94:31:83:8c:6b:
5b:aa:ea:10:ca:55:24:db:32:4e:2b:e4:fa:a3:8b:d1:55:3d:
0d:fa:19:34:e7:3e:69:26:06:99:2c:5f:2e:68:0c:68:d3:3d:
43:99:9d:09:18:65:20:43:07:c9:fb:02:2a:1f:a8:89:eb:c6:
69:b3:d3:a0:27:a9:6b:6c:c2:b0:9b:f7:a4:a7:2a:4f:00:af:
c5:95:48:ec:25:ed:d2:21:d3:9f:63:03:ff:6c:d6:52:14:01:
c7:9f:9d:10:d4:42:61:87:38:af:f6:62:33:f3:a9:0e:36:1c:
4a:e3:ab:9a:21:01:dc:ba:27:9e:e2:e2:c9:0c:68:e2:e7:0e:
7c:de:a2:8c:67:54:4e:1c:f0:6f:45:9e:a2:66:57:80:b2:c2:
a7:a2:ba:ed:61:0b:26:56:9b:e7:c2:a3:b0:8e:66:8d:9a:22:
12:ab:bc:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:13:24 2025 by rpki-client