Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3a0c3eb1-73eb-3fe1-a6c4-7b31479721b3.roa
File: 3a0c3eb1-73eb-3fe1-a6c4-7b31479721b3.roa (raw, json)
Hash identifier: 7R/PJ9D+LOPwQkYv11ZWLKoaejXjaD/nWFz8B3UZyro=
Subject key identifier: 9D:F4:A3:83:7E:7D:4E:89:C8:CA:3B:C7:74:D4:6E:54:82:2F:24:02
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858487CEB62245BC5572A7330CC80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3a0c3eb1-73eb-3fe1-a6c4-7b31479721b3.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 397229
IP address blocks: 204.74.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:62:24:5b:c5:57:2a:73:30:cc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=9cb95681-d314-496a-a6ee-32b420abe723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:75:6e:af:63:14:e7:05:a9:2c:82:9c:cc:63:
f9:be:8b:ad:25:d5:bf:0c:dd:be:56:1c:ab:b0:e8:
6a:48:9a:8f:3b:cc:b7:29:f8:21:57:eb:92:80:21:
9f:3b:6b:f7:cf:dd:1d:6b:b2:bf:64:9a:03:91:57:
4d:fb:68:66:cb:44:c9:84:7e:b9:4c:26:ba:c1:2f:
c4:fc:d1:04:6b:60:2e:3f:8c:dc:f7:1f:52:62:fa:
aa:ab:f1:34:f3:52:91:a5:64:6b:f6:df:dc:7e:ce:
03:c0:11:e1:0a:47:4a:30:e2:1b:f2:cc:d0:82:78:
b5:bf:5d:b9:f1:21:df:61:83:03:16:bf:b4:06:8a:
be:85:d2:5b:f5:57:cb:59:e6:2d:09:c9:96:34:1d:
de:8d:3e:1a:e1:90:98:97:53:3d:62:01:87:2e:35:
44:73:53:dc:ff:0f:c3:af:a7:20:6f:af:4c:78:7b:
e2:6c:5e:04:40:30:d8:11:63:0b:1c:bb:49:fd:dd:
96:ca:87:5b:35:b0:b8:a8:dd:c8:d0:11:36:c3:fa:
c3:4f:e1:2f:24:c9:80:8e:55:39:24:2d:c9:34:4e:
ea:ff:f2:64:17:04:bf:13:09:52:d8:d7:01:31:d7:
c0:b3:0a:c6:d7:36:aa:08:19:4d:6d:f2:45:7a:6f:
56:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F4:A3:83:7E:7D:4E:89:C8:CA:3B:C7:74:D4:6E:54:82:2F:24:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3a0c3eb1-73eb-3fe1-a6c4-7b31479721b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
204.74.74.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:c5:63:77:a6:df:a3:56:80:40:ec:a5:83:9f:e7:3d:2b:00:
b9:2b:9d:8f:b7:52:64:c7:0e:ca:48:3b:b5:a9:05:57:5f:46:
c4:8f:4b:e9:9c:6c:bd:7c:85:9c:25:77:59:e1:e9:a9:94:ba:
73:c5:ff:07:91:de:9f:e4:21:3b:aa:9c:fb:e1:4a:ad:5f:19:
8c:32:76:f7:af:e3:86:9a:ca:8e:37:7a:67:e6:d8:28:52:1d:
24:ab:0b:36:c9:e1:2c:46:9a:11:4a:06:88:cc:a3:39:e7:8a:
5b:1b:13:06:b3:08:8f:66:b1:e4:dc:69:c1:cb:80:e0:61:ae:
51:29:10:a9:e2:89:06:99:40:c6:25:73:c8:b9:f0:1d:d9:52:
c8:8e:7a:ab:00:0d:3b:17:93:b8:a5:53:07:c4:67:15:8c:4b:
f0:45:63:4f:91:d3:01:f3:73:d4:e0:67:3a:18:d8:b7:89:f0:
a6:ba:70:d2:35:0e:08:7c:14:80:36:85:16:24:0d:ac:61:49:
d4:c8:05:25:f5:21:ee:37:48:77:88:50:92:23:59:33:a3:e8:
f9:b2:39:09:c7:34:74:be:9d:2b:6d:b9:65:6d:e3:6a:d3:b2:
69:b9:d5:33:4c:6a:37:60:8b:8c:61:00:9e:80:49:19:0e:58:
27:bf:05:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:26:41 2025 by rpki-client