Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/23b25779-9467-3190-9525-706145e637c6.roa
File: 23b25779-9467-3190-9525-706145e637c6.roa (raw, json)
Hash identifier: JtKb4woIX2OU4vP3qH7avS0t98pTB65d4aTnBWSZq1Q=
Subject key identifier: BF:10:75:98:BD:2C:14:23:32:D0:3A:19:31:86:99:D0:48:F4:5D:C0
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858489075FFAF0D2542C3431A6D20
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/23b25779-9467-3190-9525-706145e637c6.roa
Signing time: Thu 16 Jan 2025 14:00:50 +0000
ROA not before: Thu 16 Jan 2025 14:00:50 +0000
ROA not after: Wed 16 Apr 2025 13:00:50 +0000
asID: 397215
IP address blocks: 204.74.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:75:ff:af:0d:25:42:c3:43:1a:6d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 16 14:00:50 2025 GMT
Not After : Apr 16 13:00:50 2025 GMT
Subject: CN=9c128464-68e0-4d58-be65-b055fab45385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8f:f3:d0:af:14:1f:40:e3:c8:d1:54:88:bc:
3c:9e:f8:d7:fc:92:6b:42:dc:d8:ee:9f:5e:7a:8f:
e4:e2:09:38:8d:f6:e5:7d:d4:0a:14:1c:1d:50:3c:
0c:9a:65:41:3f:48:45:1e:e1:3b:3d:ce:84:74:85:
db:ca:c6:52:c7:a6:be:e5:37:ba:54:12:c3:55:5e:
41:38:9d:86:ce:53:54:f0:bd:24:a6:a0:43:dd:bb:
92:09:29:e9:95:9f:7a:f4:85:e9:00:9b:c7:66:6e:
31:c3:b5:cf:d9:f8:89:ef:f8:67:4b:51:ed:ee:cb:
b8:e5:2a:f8:a1:88:5b:93:66:ce:cc:54:18:91:8e:
d3:fd:18:b5:54:86:bc:2a:1a:c5:dc:05:16:67:69:
cf:90:ab:18:28:3e:70:6e:26:c9:09:2e:77:8b:d2:
87:97:0c:9b:0b:13:14:5b:81:e3:5b:b6:68:84:a9:
4e:b7:43:77:cc:02:a1:34:65:89:b3:bf:2a:38:18:
c0:7e:b5:9c:38:67:be:aa:bb:fe:7a:b6:ce:9d:88:
fd:1d:b3:32:db:23:16:78:56:26:8b:e6:9e:d9:92:
33:33:b1:c1:81:f2:46:48:30:fd:a9:f9:06:b7:54:
81:e0:db:c6:02:55:76:b3:df:0f:da:34:e5:ed:d2:
80:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:10:75:98:BD:2C:14:23:32:D0:3A:19:31:86:99:D0:48:F4:5D:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/23b25779-9467-3190-9525-706145e637c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
204.74.113.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:bc:ca:bf:a6:d5:6f:ab:20:e8:45:0d:9f:b0:23:40:ab:ac:
86:65:9d:d9:f3:92:5b:f2:8a:b3:62:2e:35:8f:bb:2b:35:ef:
f1:80:21:98:91:2d:33:35:96:2e:43:7e:94:3c:97:00:88:f1:
04:dc:6f:8a:d5:7a:65:67:e4:07:47:4f:74:d1:3f:2c:af:f4:
3d:bf:ee:1e:fa:a5:bd:6b:9d:7b:16:b3:e9:b6:51:0e:fe:34:
41:b1:7d:d1:0f:a6:42:c2:30:40:94:0d:e8:ea:f5:9a:55:29:
24:70:90:43:20:cc:0c:07:84:ec:78:0a:d0:d2:74:3e:ce:be:
99:c3:8e:1f:cc:50:1b:90:a0:4f:fb:53:fc:9c:68:82:c2:c8:
59:35:7e:0e:07:98:9b:b7:a9:e8:96:ed:6b:b2:be:09:27:58:
55:43:63:27:6b:d6:2a:aa:7b:b9:2f:a0:81:5f:3e:9b:20:d4:
e0:21:e4:ec:3c:e7:86:cd:66:f8:43:9c:c7:f7:71:f8:9f:d5:
e2:d8:6e:1c:cb:a9:63:15:3d:23:66:c6:8b:19:fc:04:1e:db:
cc:f8:a1:50:8e:da:fc:86:d2:a1:d0:1b:33:7e:af:cd:dd:54:
e4:c9:cb:78:db:e0:1d:06:be:37:e0:60:2c:10:d2:e9:da:bf:
00:dc:b5:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:56:39 2025 by rpki-client