Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1e790ee9-cedf-3cdb-9de5-10dc44e78aa5.roa
File: 1e790ee9-cedf-3cdb-9de5-10dc44e78aa5.roa (raw, json)
Hash identifier: /ZI/8f9i/cqp8jPAcfGngZv6G5CufwSQH8x7bA0MBiw=
Subject key identifier: 13:59:52:E5:BD:7C:4A:4F:CC:0F:63:30:BA:6D:39:81:01:07:A4:2F
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD20F2AB79C21CC7B4EDDF00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1e790ee9-cedf-3cdb-9de5-10dc44e78aa5.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 397231
IP address blocks: 204.74.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:20:f2:ab:79:c2:1c:c7:b4:ed:df:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=a8558417-7340-4a65-8814-926aedfd11d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cf:5e:b7:3a:a8:0e:b7:0f:dd:fa:24:41:76:
5d:3b:e5:5e:91:b9:65:fb:f8:20:cb:b3:96:22:5d:
00:91:6c:42:7b:a2:f0:59:dc:79:0c:96:84:66:e1:
ac:52:61:d2:75:f4:7f:ed:af:9d:a9:04:9a:78:e4:
ed:9f:26:e0:79:9f:27:d3:ca:7e:78:dd:27:a1:31:
65:2a:eb:aa:7e:17:58:50:8f:fb:0c:8e:8b:f8:c8:
bc:0f:b1:84:67:81:b7:ef:f2:7d:c4:eb:cc:c8:b4:
ce:01:ec:69:7b:bf:c5:72:03:56:c6:25:7f:6f:ed:
e2:83:43:4d:dd:1b:4f:f8:de:70:ca:5b:4e:d8:f4:
80:dc:ab:cd:94:64:e7:57:36:cc:3e:9f:c3:e3:0c:
4a:78:4f:e5:1f:32:9c:49:70:11:60:cf:c5:7d:25:
62:3d:7a:7a:f8:53:38:97:55:39:18:65:1d:bd:22:
d0:e7:bf:4e:04:c6:0f:55:4d:f4:08:03:c2:6e:38:
66:ac:78:5b:85:37:e7:5b:4c:5c:2b:12:6c:ab:fd:
0b:d2:94:c7:99:b6:06:c1:b8:dd:6d:9f:e4:ee:e6:
24:73:3c:8e:0f:d1:a3:2c:92:f5:6b:5c:d0:6b:01:
f1:a8:32:2e:e8:49:13:cb:d8:3b:be:c4:f1:71:2d:
c9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:59:52:E5:BD:7C:4A:4F:CC:0F:63:30:BA:6D:39:81:01:07:A4:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1e790ee9-cedf-3cdb-9de5-10dc44e78aa5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
204.74.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:31:c7:fd:61:b9:14:10:6d:8e:66:47:fd:f6:9d:f8:00:99:
26:24:c5:57:43:a3:c1:fa:d9:0d:8f:57:69:85:6e:5c:f9:a1:
4c:f1:33:53:ba:42:25:9e:ef:ea:98:87:7a:14:1a:6b:5a:6c:
a2:08:29:c1:4d:f5:31:15:42:8e:87:46:51:fb:43:2d:ca:e4:
cf:4c:df:68:6d:bf:00:91:98:7d:fe:e9:67:ec:14:56:e9:f0:
f6:f9:27:b3:b6:1b:87:a6:72:5c:fa:a5:2b:49:ae:89:e4:c3:
2d:9a:07:14:09:7a:19:5f:1d:cc:c7:7a:ac:89:d0:b5:19:3e:
f5:85:30:50:cc:09:63:2d:85:d5:f0:ab:a8:e2:a5:dd:54:c3:
91:6d:f8:d2:e6:b7:88:c3:34:52:5a:84:17:3e:1b:2b:59:40:
8f:c0:01:7e:33:e7:01:d9:9d:d4:da:a3:b0:56:d6:17:d1:f4:
82:d6:ff:93:52:c0:dc:40:6c:9b:2b:e0:3c:b3:51:d6:fa:3c:
f1:5b:6d:1c:ae:35:d3:23:27:db:9b:24:7a:7b:9b:3a:8a:6f:
3c:dc:72:72:ed:f4:ca:9e:33:60:2c:da:de:19:7a:72:40:a6:
8a:56:9d:e2:72:98:05:cb:7c:c7:f9:c4:3a:c4:2d:f4:ab:fd:
6b:b3:a8:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:26:26 2025 by rpki-client