Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7cf4deaf-617c-3f60-b6d1-ece99b23aa71.roa
File: 7cf4deaf-617c-3f60-b6d1-ece99b23aa71.roa (raw, json)
Hash identifier: 3rCSl9x1C4gvCu4YVHtLjEa+FliqoE1h64BgeIfiGfg=
Subject key identifier: 5B:2D:D6:63:51:F4:66:F7:B3:B9:FC:C4:3C:48:A2:75:41:DF:06:17
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858492CB142A51A17C8F43B90A400
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7cf4deaf-617c-3f60-b6d1-ece99b23aa71.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 399168
IP address blocks: 204.74.104.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b1:42:a5:1a:17:c8:f4:3b:90:a4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=13f00afb-413b-45e7-ad51-fe16ab15ddeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ea:c3:ca:eb:d9:98:42:4a:3c:b0:71:df:f6:
59:cf:9b:55:26:7d:61:31:fd:f0:b0:f7:64:88:75:
75:da:1d:bc:97:00:25:42:39:01:01:67:b6:bf:86:
90:6e:5c:35:ba:b7:c5:56:f8:ce:c9:d1:f7:94:3a:
0f:f6:7f:6e:de:23:d6:81:42:34:74:61:fd:cb:60:
03:89:ce:71:4d:02:ce:eb:f1:12:00:29:5e:dd:9c:
55:62:85:8f:0e:f4:18:b6:64:ac:8a:de:89:8d:c6:
73:2d:66:08:fb:f3:a0:63:75:f0:b3:0b:b2:7d:f9:
aa:23:73:af:61:af:d4:1e:0c:ae:31:8f:96:3a:e2:
0d:fa:8f:13:95:98:b3:38:a2:a8:56:e5:79:02:c7:
60:dc:5b:58:dd:0a:fb:ab:5c:1c:cd:a1:d0:5e:07:
00:3d:05:16:43:4b:6b:24:68:4f:9e:44:66:4c:b5:
9b:3b:97:ef:e1:47:13:47:1b:cd:f1:43:7f:d3:61:
38:8c:b8:a5:1f:4a:bf:9e:8e:05:92:c3:01:71:ed:
c7:02:a0:60:de:9c:c9:e8:68:80:26:6e:85:30:ec:
4b:24:8e:a7:10:4b:90:ee:ae:8f:f2:88:e1:a5:ae:
31:a9:5b:2d:e6:78:90:5b:0c:1c:74:8c:c1:7f:fb:
7e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:2D:D6:63:51:F4:66:F7:B3:B9:FC:C4:3C:48:A2:75:41:DF:06:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7cf4deaf-617c-3f60-b6d1-ece99b23aa71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
204.74.104.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:33:7f:8c:45:47:6c:1d:63:c3:aa:d5:7d:53:86:f7:31:69:
50:7b:cd:3a:ac:ee:42:18:e9:23:dd:e0:18:d5:52:96:20:e9:
2b:16:5e:dd:fb:58:91:75:6c:67:0c:ff:ac:09:2a:92:7d:b2:
81:de:ac:e8:1f:3c:ff:df:45:6d:2d:f6:42:1b:17:89:e6:1d:
3d:4c:fe:57:68:ff:45:04:c2:90:e7:9c:41:95:11:4f:37:21:
f4:ce:18:58:2b:98:a5:34:57:ae:42:41:62:cf:51:49:fa:39:
74:bc:0f:00:2a:79:1e:6a:2b:72:cc:95:eb:80:70:2c:06:7c:
ee:c8:87:39:d3:fc:51:4e:5b:f5:36:e6:5c:d1:36:06:93:f5:
c0:aa:3f:c9:e9:d2:04:4f:a0:a4:7c:9f:c1:1b:91:99:77:b2:
f8:76:6a:a0:b0:e1:57:e1:1f:a3:36:4a:74:9a:3a:39:c2:08:
4c:44:30:a2:70:fd:0b:3d:7f:45:07:28:98:93:40:af:af:b1:
c3:23:65:5e:d4:5c:c6:c5:12:1e:27:d4:f5:77:9d:75:c8:70:
e3:28:fd:dd:4a:04:75:cc:2c:72:69:53:63:4f:67:14:59:70:
2a:c8:9f:b3:47:ad:50:7d:10:18:5b:c6:42:35:a4:93:a1:bd:
69:77:a0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:09:46 2025 by rpki-client