Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/16eb5856-e948-3f61-84b6-9e15788427ea.roa
File: 16eb5856-e948-3f61-84b6-9e15788427ea.roa (raw, json)
Hash identifier: b2UCoZ1LbAvv6nVXQO2iiuYHFcbkB/v38l43PqzfdN4=
Subject key identifier: 15:4F:33:BD:64:23:0D:89:0D:87:04:24:69:1E:22:A9:CF:19:09:E2
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD20F6AF481876261E5D34C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/16eb5856-e948-3f61-84b6-9e15788427ea.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 397215
IP address blocks: 204.74.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:20:f6:af:48:18:76:26:1e:5d:34:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=1de04515-68f3-497c-a689-1ac298c02060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:38:63:7a:56:c7:c4:fe:71:98:70:44:0d:a7:
26:37:37:ae:5c:81:c7:3e:37:14:66:dc:d7:14:cc:
36:9d:d2:42:65:14:5a:b2:03:c6:42:a5:ad:15:08:
c7:36:58:f7:c9:e1:78:24:e7:f7:4f:f3:54:49:c2:
ec:ec:a4:9d:e7:84:a1:7d:a3:06:9b:dc:6b:8d:bd:
6e:18:7b:c1:d3:f7:e5:25:8e:0f:3a:09:fe:a2:e1:
cc:e5:c5:bc:9b:60:4c:b4:24:c4:8a:13:06:58:cb:
62:d4:b1:56:99:2b:c3:1f:07:80:eb:24:94:2f:2f:
af:0e:4f:22:43:36:14:15:08:fd:4a:53:10:a4:b8:
9c:27:f9:b3:96:4b:58:58:d4:ac:44:a4:36:00:41:
7f:aa:df:ca:69:b7:25:d1:01:95:09:63:06:42:20:
88:79:48:d2:40:1e:14:38:e0:df:63:58:e3:e7:6d:
c3:cd:b9:8e:70:73:90:1e:9f:bf:36:f6:10:02:82:
41:62:f3:de:82:95:e1:d8:03:60:f2:ff:1b:8b:56:
91:be:53:53:f8:be:f2:56:8f:41:16:3f:50:05:98:
68:13:e2:6c:7e:68:ce:87:f3:48:9f:8d:e9:e6:26:
86:34:5f:e3:d4:d9:af:d4:77:d5:6b:6b:95:53:10:
d1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:4F:33:BD:64:23:0D:89:0D:87:04:24:69:1E:22:A9:CF:19:09:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/16eb5856-e948-3f61-84b6-9e15788427ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
204.74.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:40:6e:80:54:9e:cf:4a:36:c1:e3:21:c9:e7:88:8d:01:8d:
1a:60:12:bb:5e:4e:65:9e:60:65:8f:e5:91:81:c7:37:63:72:
f1:95:14:4e:fc:a5:c0:da:f1:e4:26:81:6b:df:c0:2d:72:6e:
41:48:12:a8:a6:d2:77:a9:bc:8a:f8:83:20:80:f6:a9:17:2d:
f2:7d:aa:ae:47:e4:50:0e:33:c2:a6:d8:1d:f2:9e:a0:c4:bd:
a6:5a:47:d2:73:d6:bc:8b:5a:78:6b:91:31:3c:9b:44:22:c8:
86:9d:f0:ed:c1:71:da:df:2f:28:19:8b:24:38:01:74:07:d6:
f9:d0:1a:23:95:56:79:7d:2a:57:94:73:e8:82:39:7b:46:ae:
7c:a7:e4:39:8f:0d:0b:d8:78:08:85:58:5b:7f:c2:0a:8b:81:
f0:7a:aa:09:39:46:6e:c9:54:c1:06:5f:43:cd:4f:1d:e0:d2:
83:7c:f8:9f:93:2d:4f:9d:5c:15:23:17:88:1d:23:a4:b6:5d:
0f:3d:be:1e:cc:27:fd:13:c4:4c:38:55:ad:7b:ef:fe:80:0d:
ac:31:9c:8e:23:f3:ae:4b:9b:db:5f:32:5b:6a:4d:68:0a:9b:
8c:da:ad:b6:29:3c:3a:8e:f2:4f:a4:1b:c3:07:19:23:2f:2d:
f9:42:d4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:06:14 2025 by rpki-client