Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/49ab6aa6-96c2-39d8-b5eb-7729fd8675ad.roa
File: 49ab6aa6-96c2-39d8-b5eb-7729fd8675ad.roa (raw, json)
Hash identifier: rssS1gL/nLVCMbtPNlYZLSOZQAFLf5dKsGaYUh3K+3E=
Subject key identifier: 5B:A0:3A:36:DC:47:0E:93:ED:10:41:C9:1F:6A:9F:2D:F2:3D:7D:F0
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858487CEB61635DA2539C04275DC0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/49ab6aa6-96c2-39d8-b5eb-7729fd8675ad.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 397215
IP address blocks: 204.74.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:61:63:5d:a2:53:9c:04:27:5d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=40e884f3-e390-4da1-8268-ca6c97503f59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5c:25:c8:97:72:af:eb:eb:18:a1:3f:87:10:
66:7b:e1:13:c0:b2:13:62:90:3b:1c:77:f2:8c:03:
0f:c8:2e:71:2b:e0:59:83:3d:ce:76:12:18:bf:27:
cc:f7:c2:c8:af:f6:69:2b:f5:87:eb:ae:36:6b:41:
f4:11:40:8f:19:52:6c:cd:f7:9b:4f:c2:20:03:4b:
e8:a1:7f:6f:66:d0:c9:77:90:c2:bc:00:51:24:20:
52:b2:c7:50:11:72:d6:6b:d5:40:10:1d:29:a9:07:
b3:38:d8:53:b7:df:9f:6a:9e:6a:07:e1:42:f7:98:
71:12:82:2b:a1:40:bb:eb:3b:a9:16:47:13:e7:36:
ea:59:db:42:99:e5:33:d7:72:0f:2a:56:ab:49:b4:
2f:ec:4c:10:45:a4:5a:83:29:70:1f:70:81:d2:18:
57:bd:bf:34:8f:f0:30:53:4a:9c:04:bb:f1:38:22:
26:52:f3:bb:0c:cb:3c:db:4e:42:7e:3a:15:44:8c:
f5:69:ab:d7:2a:87:65:83:49:fc:a2:22:05:76:70:
c7:af:03:24:96:8e:98:79:2d:e3:4a:4d:b4:39:3b:
b4:8c:81:2a:ee:4f:46:31:36:fc:81:02:0c:30:da:
03:28:ea:6c:89:8c:41:91:c5:9d:b8:37:c2:b2:ab:
44:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A0:3A:36:DC:47:0E:93:ED:10:41:C9:1F:6A:9F:2D:F2:3D:7D:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/49ab6aa6-96c2-39d8-b5eb-7729fd8675ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
204.74.74.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:73:60:60:cf:24:b7:d7:f8:39:71:aa:b3:33:6c:15:a8:d6:
d6:a2:bd:bb:4b:31:7e:7f:19:2e:0f:f7:fb:e4:fc:64:70:f0:
76:f9:44:0a:be:38:a6:1c:d9:a7:fa:7f:25:28:a8:cd:eb:36:
2c:d2:b3:72:f9:f4:6f:29:26:41:8a:de:b6:ba:18:0a:b8:7c:
06:c6:7f:fb:5d:3c:76:64:4c:74:5c:bf:83:20:dc:40:2a:98:
d8:f5:81:36:16:15:2c:b7:e1:11:5e:22:95:7f:d1:cf:0d:ff:
0c:4c:42:41:f8:fb:eb:c9:3a:33:d3:f4:d7:58:01:40:d5:56:
ca:a2:58:54:de:21:ff:b5:94:a6:6b:62:fa:9c:c6:72:1f:f4:
10:f2:90:28:93:6b:5a:d3:0f:04:28:9d:d6:67:f4:eb:4f:47:
44:4c:34:05:28:d4:a3:12:4b:18:19:a2:17:ed:e5:d4:a4:32:
a3:86:9e:2e:a9:f5:db:e7:fc:30:c0:25:0a:a2:e6:6a:31:4c:
d2:06:16:10:9d:cc:7a:3d:c6:d6:a7:e7:0b:55:11:b6:81:3c:
24:8a:4e:52:f1:f4:56:75:e7:c0:a8:eb:f1:2e:63:67:06:f4:
ea:fd:54:13:d9:0b:36:e7:08:83:e1:2b:83:0f:22:03:4b:fe:
70:6d:76:24
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh862FjXaJTnAQnXcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDEwOTE0MDA1MloXDTI1MDQwOTEzMDA1MlowLzEtMCsGA1UEAxMk
NDBlODg0ZjMtZTM5MC00ZGExLTgyNjgtY2E2Yzk3NTAzZjU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplwlyJdyr+vrGKE/hxBme+ETwLITYpA7HHfy
jAMPyC5xK+BZgz3OdhIYvyfM98LIr/ZpK/WH6642a0H0EUCPGVJszfebT8IgA0vo
oX9vZtDJd5DCvABRJCBSssdQEXLWa9VAEB0pqQezONhTt9+fap5qB+FC95hxEoIr
oUC76zupFkcT5zbqWdtCmeUz13IPKlarSbQv7EwQRaRagylwH3CB0hhXvb80j/Aw
U0qcBLvxOCImUvO7DMs8205CfjoVRIz1aavXKodlg0n8oiIFdnDHrwMklo6YeS3j
Sk20OTu0jIEq7k9GMTb8gQIMMNoDKOpsiYxBkcWduDfCsqtEZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFugOjbcRw6T7RBByR9qny3yPX3wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNDlhYjZhYTYtOTZjMi0z
OWQ4LWI1ZWItNzcyOWZkODY3NWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEpKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADxzYGDPJLfX+DlxqrMzbBWo1taivbtLMX5/GS4P9/vk/GRw8Hb5RAq+
OKYc2af6fyUoqM3rNizSs3L59G8pJkGK3ra6GAq4fAbGf/tdPHZkTHRcv4Mg3EAq
mNj1gTYWFSy34RFeIpV/0c8N/wxMQkH4++vJOjPT9NdYAUDVVsqiWFTeIf+1lKZr
YvqcxnIf9BDykCiTa1rTDwQondZn9OtPR0RMNAUo1KMSSxgZohft5dSkMqOGni6p
9dvn/DDAJQqi5moxTNIGFhCdzHo9xtan5wtVEbaBPCSKTlLx9FZ158Co6/EuY2cG
9Or9VBPZCzbnCIPhK4MPIgNL/nBtdiQ=
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:46:41 2025 by rpki-client