Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3e2cc64b-bc1d-38a6-91bd-76a18b27ab11.roa
File: 3e2cc64b-bc1d-38a6-91bd-76a18b27ab11.roa (raw, json)
Hash identifier: T9Nj/TbPg3iRa+ONpNIY10Vx4qTA52napjEfl+6vdac=
Subject key identifier: 6F:26:16:57:53:40:7C:2E:E9:42:AE:AF:12:1D:DB:03:41:7F:97:09
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858494B642B74308F337753F2AD80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3e2cc64b-bc1d-38a6-91bd-76a18b27ab11.roa
Signing time: Mon 24 Mar 2025 13:00:53 +0000
ROA not before: Mon 24 Mar 2025 13:00:53 +0000
ROA not after: Sun 22 Jun 2025 13:00:53 +0000
asID: 397222
IP address blocks: 204.74.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:64:2b:74:30:8f:33:77:53:f2:ad:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 24 13:00:53 2025 GMT
Not After : Jun 22 13:00:53 2025 GMT
Subject: CN=55d46bb8-2eb7-44f6-8ea2-ab5678dedc95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:a4:5c:f3:64:45:5e:72:f8:b1:bd:bd:1e:4e:
4d:1b:0f:b2:db:5d:6c:ef:21:92:ca:3e:e5:e5:06:
80:dd:d0:ff:a8:79:1c:83:b4:76:4a:c5:51:92:32:
9c:ff:b5:ff:e3:f8:2a:19:42:e6:64:7e:4f:31:e0:
f0:13:c6:95:5c:82:3f:25:19:1b:e3:5c:a3:97:a2:
80:cd:90:6d:c2:86:be:a2:d2:d6:05:43:ec:54:02:
cb:b0:d2:56:b0:4e:63:39:e4:1e:ea:9c:fe:65:e2:
53:60:ba:c0:4a:c7:ea:11:ee:c7:9f:36:94:46:f9:
53:d6:ed:e0:73:0c:4d:c3:b1:0d:e1:4e:89:62:06:
5b:4b:71:e1:57:1d:90:a4:71:93:69:43:a5:35:db:
33:71:58:17:54:fa:75:eb:03:09:17:d4:d2:d0:d9:
b6:86:5a:31:a7:12:d7:16:cb:07:9b:4d:98:bf:3c:
4d:43:ff:2e:e6:43:28:03:45:ea:29:c5:45:17:37:
63:57:80:c2:aa:fe:83:4b:fb:21:d5:aa:30:70:d0:
ab:78:58:06:4b:fa:fc:b7:37:1d:e6:74:14:39:9d:
3f:4c:d1:8c:6c:46:60:49:86:70:d9:68:03:a6:c5:
33:9e:9b:5d:d8:91:a7:20:a5:d9:f9:6f:eb:a5:86:
bc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:26:16:57:53:40:7C:2E:E9:42:AE:AF:12:1D:DB:03:41:7F:97:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3e2cc64b-bc1d-38a6-91bd-76a18b27ab11.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
204.74.73.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:b8:93:64:cd:a0:4f:a0:f3:cd:8e:a0:63:72:ff:fa:45:3a:
48:e3:f0:c2:ab:58:13:4b:a6:02:4e:04:32:d1:a2:39:b5:fb:
37:96:77:cc:c1:94:15:18:46:4a:75:5c:48:40:8d:b5:8f:df:
e0:9c:2f:e6:16:06:d0:73:aa:3a:ce:a9:26:86:c0:62:95:7d:
2f:28:6e:68:3f:5b:1b:67:02:88:25:b8:65:01:de:ca:84:a0:
6a:21:6f:69:ee:b7:e1:f1:5c:23:16:b2:fd:4c:91:a1:55:43:
6f:55:f6:39:7d:45:2a:87:80:59:5c:c5:73:47:6b:0b:a7:70:
3a:95:eb:a9:dc:20:35:47:73:1d:74:9b:7e:f4:d9:72:53:87:
f9:22:87:90:d9:fa:a8:ba:04:ac:f2:ec:9c:3d:61:fd:71:71:
62:52:cf:f6:87:b6:07:eb:a2:c9:7b:80:d1:ca:1b:a2:5c:d6:
6a:1c:9d:ec:5f:5d:e8:65:58:11:e8:6d:38:34:f0:27:5f:90:
c4:52:66:9a:77:ce:48:26:95:ec:ff:f8:dd:52:12:23:cc:5d:
20:0e:63:dc:4d:36:cb:ed:3a:86:58:73:21:8e:07:54:f5:9d:
03:e3:9a:30:f7:23:29:c5:a1:f0:6b:d6:31:78:f9:e6:30:ac:
bb:0c:bb:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:18:41 2025 by rpki-client