Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/48cba452-7cfe-336c-bf74-04e2e919f22e.roa
File: 48cba452-7cfe-336c-bf74-04e2e919f22e.roa (raw, json)
Hash identifier: Z2JvF5VybXijPXDh8XJG6EeKxrofcnnCqNWXaVxPCLk=
Subject key identifier: BF:6A:24:94:95:92:A3:E8:DF:E0:14:05:51:FA:76:F5:86:6B:12:65
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848A996425ED300E6A8D33114C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/48cba452-7cfe-336c-bf74-04e2e919f22e.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 397230
IP address blocks: 204.74.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:42:5e:d3:00:e6:a8:d3:31:14:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=57f2f423-ce40-43d5-88d8-b29b5aa95d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f4:e3:82:f4:13:b2:4b:34:36:f2:44:bf:b9:
57:56:3e:e6:71:27:2c:94:6a:73:bb:d0:44:d7:29:
44:02:5a:38:86:53:76:94:0e:db:62:2b:3b:bc:6d:
8d:8e:40:4c:45:91:1a:93:57:69:38:2b:e4:90:29:
fb:09:ba:e0:f8:7b:99:1d:77:37:37:39:4a:85:20:
bf:d8:84:b4:93:8e:70:f0:2b:16:b8:f0:e0:ec:78:
cc:91:fa:7e:16:2f:d7:7f:5b:88:31:50:d3:de:e4:
04:23:54:31:71:ec:92:a7:4c:d0:3c:34:9e:23:8f:
28:c6:26:13:7e:c0:26:76:12:d8:80:6a:76:55:4e:
98:00:71:64:32:46:e9:5c:24:aa:45:6b:61:70:bc:
4d:e5:b2:43:56:69:fa:8e:a8:a5:77:ea:36:f5:78:
8c:df:c8:c3:20:fe:c2:64:dd:64:ac:23:9d:57:4e:
b1:99:f8:c5:db:37:a1:9a:b1:e7:49:c8:44:7f:71:
5e:b7:4d:02:39:e1:cc:5c:8d:ea:23:e8:83:12:c3:
63:94:df:98:2f:86:4a:7f:b8:d7:20:a5:32:64:0b:
71:8d:ff:d1:b9:65:39:7e:e2:b1:8b:a3:00:47:79:
ed:e2:b4:12:52:df:78:fa:2d:44:47:21:e9:52:c8:
25:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:6A:24:94:95:92:A3:E8:DF:E0:14:05:51:FA:76:F5:86:6B:12:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/48cba452-7cfe-336c-bf74-04e2e919f22e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
204.74.66.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:7e:28:77:d0:9d:91:f9:e2:3e:00:50:16:fa:cb:84:a9:6e:
e7:a3:a9:f5:26:c1:f7:92:1f:c4:0f:a2:8a:fb:76:4d:fa:e6:
e1:35:85:c4:a2:b9:8e:53:4d:13:86:21:62:96:c0:78:75:b6:
c4:4a:dd:2d:c0:2f:3f:97:33:d4:ea:99:57:5e:7f:4f:96:b0:
41:a0:f4:7b:32:a4:d8:c6:cd:6c:ce:d2:3b:04:07:a1:19:21:
ea:b2:54:c4:ec:e7:17:82:90:74:d9:ea:87:56:9c:06:15:36:
4d:5e:0f:e2:48:8e:01:27:81:1a:a7:62:a5:4b:ba:df:0b:8f:
45:18:e4:2b:c6:a6:3f:04:29:33:5a:61:db:71:da:97:17:2f:
ba:a7:58:74:96:d7:4f:f3:96:b6:a1:65:40:f2:b8:b0:1d:2a:
9f:5e:13:7f:c9:7b:ca:2e:3f:07:2f:44:b8:66:19:18:30:ef:
cf:68:20:44:c7:43:89:d9:96:9a:2a:76:c8:fc:74:0c:d6:20:
51:97:c6:d9:48:03:b4:fa:97:dd:63:b5:0a:0b:80:32:7f:7c:
90:c3:f6:5b:f3:87:6b:25:a8:dd:31:70:df:59:4e:da:e1:1c:
38:07:a7:bd:7a:89:27:e1:1d:32:22:a7:c3:fb:d0:33:07:f6:
05:9d:24:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:02:52 2025 by rpki-client