Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/258a11c7-675b-3756-8c6c-2285f1f024ad.roa
File: 258a11c7-675b-3756-8c6c-2285f1f024ad.roa (raw, json)
Hash identifier: MbIwddlgvzo+OacThEo6m1a4YwDNFIG1K6FNZoMgXQE=
Subject key identifier: FA:BA:40:A5:A8:07:29:43:64:FA:B8:89:C5:00:C4:30:67:3A:77:F5
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD20F7D8E6C9368EFB4FA1C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/258a11c7-675b-3756-8c6c-2285f1f024ad.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 397234
IP address blocks: 204.74.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:20:f7:d8:e6:c9:36:8e:fb:4f:a1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=657a9252-795d-4cd5-a81c-59125a291a2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e0:b8:63:71:41:9f:25:52:c2:19:aa:f9:c8:
fb:46:1a:a6:11:dc:76:9b:bd:80:52:e4:2c:6f:34:
6b:bf:f1:89:1d:2a:6d:8e:bb:87:fe:ec:9a:f5:92:
69:31:b7:ae:d4:6f:3f:38:ff:b1:77:20:5f:b4:c8:
15:fd:63:bb:5a:a3:8e:b4:5e:5e:b9:8a:d3:0f:1e:
a0:34:18:da:bc:ef:ea:72:70:a8:02:d4:36:11:1e:
f6:e7:b6:6d:ae:59:02:ab:32:91:67:fd:31:b3:f2:
42:12:e8:e7:b5:d5:13:09:30:6b:94:26:a3:a9:3b:
4b:37:a8:e2:61:e2:1c:6c:38:49:29:eb:65:b1:cd:
7a:41:88:39:ea:d9:e2:df:9b:e8:62:8e:19:af:74:
5d:40:38:1d:11:75:e8:58:5f:43:d8:78:75:1b:d4:
61:df:d1:08:cf:19:4d:a1:57:ab:fa:b2:6d:4e:a6:
29:19:aa:10:b5:f0:e8:f1:e4:13:c7:c4:4a:b4:a1:
2b:61:4d:28:43:22:6a:da:89:f5:42:17:25:8e:19:
c2:b2:27:cc:c2:cc:39:5f:4b:29:da:d6:4f:5c:c2:
51:0a:e0:7a:b8:13:ba:df:ea:5e:65:e9:6a:ea:39:
ce:0a:ae:74:46:c5:29:ba:63:3a:04:78:dd:d7:ca:
3b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:BA:40:A5:A8:07:29:43:64:FA:B8:89:C5:00:C4:30:67:3A:77:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/258a11c7-675b-3756-8c6c-2285f1f024ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
204.74.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:f9:b7:26:e6:5a:e4:b5:c6:04:98:63:c0:71:44:0b:21:03:
4d:62:81:4e:52:20:c1:de:66:de:e0:4f:f6:1b:26:0b:70:e6:
94:f5:30:3f:da:c4:f2:55:3e:62:f9:65:4c:63:90:b8:94:d0:
75:de:6c:54:eb:a9:69:39:b9:45:64:39:e9:a1:67:e6:bf:c6:
ae:3d:06:57:2a:88:05:23:48:dc:40:a8:a7:38:ec:af:95:16:
99:63:9b:5f:1e:7a:de:64:9d:35:9c:b5:28:67:2d:b4:23:0e:
3c:a6:c8:a7:00:21:16:d2:88:32:57:32:43:a9:f7:bc:98:04:
64:3e:66:35:fc:b5:27:f0:b7:af:e5:54:09:df:ba:bd:25:a6:
30:0c:30:78:5c:09:95:55:2f:8a:77:03:36:2d:17:da:f3:82:
24:df:1c:a4:35:73:c9:fd:e8:ca:1e:69:bb:ec:dc:20:91:4b:
42:1e:97:01:79:63:1e:1d:e6:79:dd:f3:3f:0c:f3:48:a5:b9:
53:a5:f2:26:20:0e:ca:27:73:16:89:d3:f3:78:86:9b:fc:80:
5b:92:81:4b:63:49:2f:3d:6b:7b:c0:77:99:eb:48:6f:1a:a8:
8a:ad:5f:84:08:97:a0:f4:3e:b0:5a:9c:a1:65:9c:4c:ef:d7:
c6:20:5f:cc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IPfY5sk2jvtPocAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk
NjU3YTkyNTItNzk1ZC00Y2Q1LWE4MWMtNTkxMjVhMjkxYTJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOC4Y3FBnyVSwhmq+cj7RhqmEdx2m72AUuQs
bzRrv/GJHSptjruH/uya9ZJpMbeu1G8/OP+xdyBftMgV/WO7WqOOtF5euYrTDx6g
NBjavO/qcnCoAtQ2ER7257ZtrlkCqzKRZ/0xs/JCEujntdUTCTBrlCajqTtLN6ji
YeIcbDhJKetlsc16QYg56tni35voYo4Zr3RdQDgdEXXoWF9D2Hh1G9Rh39EIzxlN
oVer+rJtTqYpGaoQtfDo8eQTx8RKtKErYU0oQyJq2on1QhcljhnCsifMwsw5X0sp
2tZPXMJRCuB6uBO63+peZelq6jnOCq50RsUpumM6BHjd18o7vwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPq6QKWoBylDZPq4icUAxDBnOnf1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMjU4YTExYzctNjc1Yi0z
NzU2LThjNmMtMjI4NWYxZjAyNGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEptMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHf5tybmWuS1xgSYY8BxRAshA01igU5SIMHeZt7gT/YbJgtw5pT1MD/a
xPJVPmL5ZUxjkLiU0HXebFTrqWk5uUVkOemhZ+a/xq49BlcqiAUjSNxAqKc47K+V
Fpljm18eet5knTWctShnLbQjDjymyKcAIRbSiDJXMkOp97yYBGQ+ZjX8tSfwt6/l
VAnfur0lpjAMMHhcCZVVL4p3AzYtF9rzgiTfHKQ1c8n96Moeabvs3CCRS0IelwF5
Yx4d5nnd8z8M80iluVOl8iYgDsoncxaJ0/N4hpv8gFuSgUtjSS89a3vAd5nrSG8a
qIqtX4QIl6D0PrBanKFlnEzv18YgX8w=
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:19:44 2025 by rpki-client