Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8f0e5e7c-6880-3f8a-bd77-d1c7f8b46a07.roa
File: 8f0e5e7c-6880-3f8a-bd77-d1c7f8b46a07.roa (raw, json)
Hash identifier: s4A+4VKpSqsrQMDZ7EMyu8DywwgKJyQ/aDHQmJgBPWQ=
Subject key identifier: 63:64:3A:01:47:5D:3B:24:13:02:47:13:F9:7D:BA:4F:2F:A9:A4:06
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD20F805E3301A603E3F9940
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8f0e5e7c-6880-3f8a-bd77-d1c7f8b46a07.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 397237
IP address blocks: 204.74.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:20:f8:05:e3:30:1a:60:3e:3f:99:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=fa1a6e3c-7f84-4d65-a85b-a09f71769b77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ba:ec:b2:d3:7b:4f:9a:44:8f:c7:90:1f:cf:
9a:5f:f2:cd:67:39:c3:1e:9c:fa:ac:fb:bc:1e:e3:
cf:b2:f9:1a:7e:70:d1:3b:25:b4:8e:16:d8:89:f3:
45:a9:4f:21:a0:85:3c:e8:91:22:13:83:8f:16:b9:
04:76:50:0f:71:b3:ae:26:93:8b:3f:02:0e:b3:57:
68:ca:bc:f8:9a:75:28:b7:b5:72:fb:94:55:25:1c:
0f:45:86:42:cd:41:1d:7e:7a:77:97:c8:89:05:b0:
f2:de:e3:f4:d9:0a:84:4b:91:d2:46:72:0d:9e:76:
35:29:a2:04:69:0f:6b:d2:02:b5:fe:25:24:48:6a:
1a:5a:27:58:48:05:11:ac:2f:fd:08:68:4b:76:50:
48:a1:57:1f:b4:79:23:dc:4c:d9:9d:b5:ed:b3:01:
85:83:a6:1c:84:c0:21:da:72:1e:ac:b9:86:ac:ff:
35:c4:03:0a:dc:77:d3:b5:b4:bb:aa:d6:98:09:21:
73:db:d9:34:6a:09:9b:71:b7:c8:da:60:24:e9:aa:
34:a8:1b:1a:85:23:54:ba:4f:4e:62:16:f0:6b:17:
04:28:16:87:e2:e5:1e:fd:2f:9b:39:b1:1e:07:9b:
8b:87:fc:19:18:8f:8d:1f:3b:83:92:03:24:f9:17:
c2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:64:3A:01:47:5D:3B:24:13:02:47:13:F9:7D:BA:4F:2F:A9:A4:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8f0e5e7c-6880-3f8a-bd77-d1c7f8b46a07.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
204.74.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:27:23:f5:ee:27:01:db:82:b7:d6:2d:fb:2a:ee:14:f0:97:
e3:d4:53:48:40:29:46:c2:b2:44:66:6f:d6:7c:40:ac:18:53:
c3:d6:99:56:2e:78:11:7e:2d:00:2e:f9:cf:a9:35:21:46:b9:
d4:8c:5e:79:62:2a:71:6a:4b:03:76:e2:94:b1:95:3e:1e:c4:
1e:8c:1f:8f:bd:3f:8d:8a:fc:ac:8b:33:ec:63:9c:54:bf:db:
4f:2d:3f:e4:d0:17:2b:91:8a:7a:c5:00:20:f7:76:46:84:a8:
74:1e:2a:3b:2b:36:86:fe:79:b3:63:0d:8b:a9:44:da:4b:a1:
02:85:73:b4:28:56:2d:e6:7e:7f:14:0f:55:93:56:d2:4f:5c:
e2:b3:6e:22:dd:ab:db:b7:4e:b3:d4:4f:16:bf:55:1a:87:74:
6d:78:06:d4:33:58:b1:64:b1:39:6f:a2:39:7f:d8:a6:fd:d5:
79:25:34:49:83:85:92:09:7d:74:5b:33:fe:f0:27:e0:e8:f2:
21:dd:9e:af:eb:23:92:79:a0:0a:f8:05:b3:61:0d:3b:08:8a:
0e:1f:ba:c2:a4:47:32:e0:7d:e5:17:79:c7:af:43:9b:bb:0f:
ed:66:cb:bc:fb:95:2f:d5:9b:8c:07:7f:ae:2e:22:d1:77:d9:
84:10:47:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:52:34 2025 by rpki-client