Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5d1a4692-3f27-3285-bab7-c115fe3df8b8.roa
File: 5d1a4692-3f27-3285-bab7-c115fe3df8b8.roa (raw, json)
Hash identifier: 0ZDavPbgQ+IlHA0HIQo25wRJXwwS6yjrAWjjlXeKFPw=
Subject key identifier: BC:8C:BF:40:40:FC:66:28:00:05:AA:14:50:09:1D:B4:84:E7:27:30
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858492CB1420BAB5175464AFD8CC0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5d1a4692-3f27-3285-bab7-c115fe3df8b8.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 399154
IP address blocks: 204.74.104.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b1:42:0b:ab:51:75:46:4a:fd:8c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=b5e7d94f-43c8-43e0-907b-7a4802cf29b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d0:52:4b:2b:c4:38:d3:33:1e:b9:0d:4f:3c:
0a:36:0b:32:c4:ea:f4:24:ab:2a:97:95:90:d7:9b:
f2:6e:bc:bf:ec:00:65:28:11:bf:48:37:eb:08:5a:
0e:87:d6:9c:f4:5a:af:82:25:bf:40:e4:d1:75:1b:
f9:c5:e8:95:67:a4:68:e4:6f:3b:37:68:68:28:70:
7b:d4:8a:77:53:78:fc:dc:70:93:9f:6b:84:3b:7d:
36:5b:97:e3:c0:06:69:fa:86:07:60:e8:51:f1:73:
ad:de:23:17:2e:6b:72:2f:ca:19:8f:76:b8:21:80:
0f:62:43:a2:08:45:27:b3:3a:04:ff:0a:4a:6a:56:
c9:f8:c9:15:2b:f9:89:62:10:32:db:67:a4:3e:51:
34:6d:b5:c3:ec:52:65:f2:33:a9:86:c8:69:9c:5b:
b8:4a:cf:2d:64:55:bb:3a:f6:2d:a4:b3:aa:ab:e7:
4c:3d:57:60:0c:fc:8a:bf:2b:0f:2d:fc:a3:a0:77:
9b:0f:04:8f:e8:b5:52:9c:aa:a9:4f:05:d7:79:d4:
24:fe:2d:d5:ab:ec:de:99:b8:19:54:90:73:1d:ac:
d1:d2:7c:0d:2a:6e:2f:f6:cd:a1:05:82:68:a1:3c:
82:86:d1:ae:c2:f9:66:1d:c5:ef:ff:2a:7b:84:62:
2d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:8C:BF:40:40:FC:66:28:00:05:AA:14:50:09:1D:B4:84:E7:27:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5d1a4692-3f27-3285-bab7-c115fe3df8b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
204.74.104.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:c1:85:ad:ef:cc:7e:e5:31:93:d6:1e:1a:e9:70:9d:e3:f3:
15:92:a8:72:58:60:a6:73:96:8d:38:72:b6:34:55:b6:52:8a:
a1:bb:f5:f0:26:bf:a7:ae:a7:75:a3:10:5a:25:2a:b6:bb:d8:
29:16:c1:b0:fe:46:39:94:7d:94:6e:6c:95:13:23:02:6b:ed:
37:ff:8d:da:2a:92:7c:20:13:48:b8:85:fa:b2:a0:6b:c7:40:
97:76:76:e3:cb:e8:0d:04:f9:f1:3f:6b:de:4d:23:62:1f:9d:
99:57:39:dc:18:e6:66:54:31:10:0b:bd:66:2a:78:3d:83:ad:
f7:4a:c1:86:4f:d3:a1:73:b2:8b:e6:be:81:f0:01:2b:f6:33:
6b:7a:58:00:e9:3a:81:27:05:6c:40:f7:d4:50:d6:76:36:f4:
c9:24:06:d1:93:c3:e4:48:b3:ad:5e:38:61:19:bb:66:fe:4c:
ef:27:12:3e:43:f5:a3:c7:de:8f:6c:aa:ab:d9:48:ea:fe:2f:
32:f2:3b:a4:ca:14:a7:6f:8e:2c:aa:05:83:af:ab:a8:df:2d:
6a:da:78:fa:cf:7e:f3:83:66:58:fa:54:30:ba:26:3e:04:78:
b7:db:fe:f5:c4:09:f4:a5:47:ad:10:57:34:be:ab:09:85:89:
f9:92:9d:b9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssUILq1F1Rkr9jMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
YjVlN2Q5NGYtNDNjOC00M2UwLTkwN2ItN2E0ODAyY2YyOWI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9BSSyvEONMzHrkNTzwKNgsyxOr0JKsql5WQ
15vybry/7ABlKBG/SDfrCFoOh9ac9FqvgiW/QOTRdRv5xeiVZ6Ro5G87N2hoKHB7
1Ip3U3j83HCTn2uEO302W5fjwAZp+oYHYOhR8XOt3iMXLmtyL8oZj3a4IYAPYkOi
CEUnszoE/wpKalbJ+MkVK/mJYhAy22ekPlE0bbXD7FJl8jOphshpnFu4Ss8tZFW7
OvYtpLOqq+dMPVdgDPyKvysPLfyjoHebDwSP6LVSnKqpTwXXedQk/i3Vq+zembgZ
VJBzHazR0nwNKm4v9s2hBYJooTyChtGuwvlmHcXv/yp7hGIt6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLyMv0BA/GYoAAWqFFAJHbSE5ycwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNWQxYTQ2OTItM2YyNy0z
Mjg1LWJhYjctYzExNWZlM2RmOGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzEpoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGfBha3vzH7lMZPWHhrpcJ3j8xWSqHJYYKZzlo04crY0VbZSiqG79fAm
v6eup3WjEFolKra72CkWwbD+RjmUfZRubJUTIwJr7Tf/jdoqknwgE0i4hfqyoGvH
QJd2duPL6A0E+fE/a95NI2IfnZlXOdwY5mZUMRALvWYqeD2DrfdKwYZP06Fzsovm
voHwASv2M2t6WADpOoEnBWxA99RQ1nY29MkkBtGTw+RIs61eOGEZu2b+TO8nEj5D
9aPH3o9sqqvZSOr+LzLyO6TKFKdvjiyqBYOvq6jfLWraePrPfvODZlj6VDC6Jj4E
eLfb/vXECfSlR60QVzS+qwmFifmSnbk=
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:11:04 2025 by rpki-client