Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4a5479ee-0479-34c6-813d-de1f947cb155.roa
File: 4a5479ee-0479-34c6-813d-de1f947cb155.roa (raw, json)
Hash identifier: GP2O078p7X5z+Vh1sBiMq1AAeeX+yJRtAL9Kwp9Y/qs=
Subject key identifier: 2C:A8:D3:01:2A:D3:8F:4E:3F:EF:9D:79:43:F5:23:DB:3E:D3:12:3D
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848A9964780D9EC4618184A4C10
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4a5479ee-0479-34c6-813d-de1f947cb155.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 397223
IP address blocks: 204.74.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:47:80:d9:ec:46:18:18:4a:4c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=2678ad0d-cacf-4c78-bdc0-b4a423d30423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0f:8e:8e:f6:33:82:01:77:7d:db:69:fb:a5:
5c:ec:0e:09:6a:70:a4:d8:56:9c:ea:79:07:c5:c0:
d0:9b:61:c6:0b:cd:57:8c:24:08:88:9c:7c:8e:0c:
4e:9f:ef:5d:ce:c1:2b:d2:f3:a3:09:0d:66:5e:e8:
de:8f:9b:9f:f1:fa:9e:c9:d7:e3:b8:43:31:9c:bf:
f7:77:6d:9c:fe:e5:4b:6a:50:46:cb:01:5e:3b:38:
88:16:97:bb:a3:5f:2a:17:97:8c:ae:63:61:ee:62:
b5:c5:9f:1b:2b:53:85:fa:f0:55:da:69:f2:2b:08:
a1:17:42:0d:41:44:aa:73:1d:17:a4:aa:6c:b1:7b:
8b:26:e5:6d:ca:c4:3d:3e:51:7f:16:51:c1:e0:fe:
8f:8b:ac:23:ef:3d:82:e3:8f:38:d8:d6:a1:a7:4c:
8d:c9:6f:a7:77:af:88:f0:26:df:7f:ee:45:a3:d0:
8d:11:d4:a3:b5:3d:71:09:19:82:96:59:b0:d9:f5:
4e:5a:bc:d0:e2:f1:aa:3c:69:b9:86:f6:44:b6:38:
06:d2:b0:a3:aa:63:41:35:7e:4f:31:d1:97:d3:8a:
da:a4:8f:4a:b7:3c:1d:d4:b3:f0:5a:68:05:98:30:
0f:ad:6a:80:dd:26:31:68:3b:40:fe:ba:fe:28:45:
1a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A8:D3:01:2A:D3:8F:4E:3F:EF:9D:79:43:F5:23:DB:3E:D3:12:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4a5479ee-0479-34c6-813d-de1f947cb155.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
204.74.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:2e:8f:a5:9d:5c:f7:d1:e4:98:ac:f5:3f:59:0d:09:15:b7:
ab:e9:7d:a4:30:0d:e0:16:de:97:2b:2a:dd:a3:4e:17:f3:01:
da:10:11:4d:7c:3a:9b:85:cd:25:2e:5a:9f:cc:cb:85:fa:53:
a6:fe:66:40:ea:18:3c:68:21:f5:bc:8f:ea:8f:21:97:8f:d4:
78:71:de:41:41:44:ff:21:c1:09:14:04:a4:1a:56:53:c1:0d:
ba:73:a7:c3:5a:44:e6:79:51:e8:0f:09:f7:a7:9f:16:df:00:
b9:c8:9a:86:78:0d:88:46:85:69:03:84:29:96:89:b3:a5:50:
f7:95:30:5d:13:c6:23:4b:dd:ce:eb:75:20:1c:9b:6e:4a:43:
ef:3b:d4:36:8d:b5:68:a3:ef:e9:19:16:63:ce:ac:b8:c2:2d:
32:77:ef:9d:39:e5:37:59:77:96:cd:e9:51:d0:50:0b:dd:97:
de:2d:8b:ec:82:d3:48:a6:2b:1b:47:e8:94:47:dc:ae:c1:3f:
ff:94:fb:0b:f0:ef:0e:b5:e4:99:16:43:4b:7b:3a:65:5c:27:
9e:81:3d:7f:67:26:11:aa:f0:54:94:7a:68:13:20:81:7b:67:
bc:a1:83:65:21:ff:c9:28:20:c5:61:59:40:e3:0b:15:44:99:
3c:7a:81:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 22:12:46 2025 by rpki-client