Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8f6e58f6-6250-31c7-a192-1a283fac7892.roa
File: 8f6e58f6-6250-31c7-a192-1a283fac7892.roa (raw, json)
Hash identifier: nm6QtwzC8JKfZvMgNdd1ZB40F5wVVtijBWixAIkJXK0=
Subject key identifier: 87:56:3E:17:6A:69:91:61:22:46:AD:09:D3:A0:20:80:53:A0:46:04
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD20F6506A9DFCEC47419880
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8f6e58f6-6250-31c7-a192-1a283fac7892.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 12008
IP address blocks: 204.74.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:20:f6:50:6a:9d:fc:ec:47:41:98:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=e608b226-23f9-41c8-994d-d3e4877837bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ee:44:6b:97:27:58:25:44:ed:98:cc:8d:f3:
ea:74:a7:ee:3b:8d:1d:2c:28:0c:26:f3:a8:9f:f2:
ff:5d:bd:52:98:16:48:d0:e8:84:01:00:f7:41:6d:
03:76:13:85:41:c8:16:9d:af:c6:11:f8:99:31:66:
f3:3b:e7:83:7c:9d:5b:4e:76:e8:0b:ca:a8:98:ca:
94:26:4d:ee:c6:8d:dc:ea:86:ba:3a:d2:ad:2d:99:
c4:3f:4d:71:16:73:1a:45:c4:9c:8f:58:35:c2:ec:
c9:d8:0a:36:1f:fc:c9:92:57:83:dc:7a:2b:55:2f:
fb:9f:9e:0f:5b:35:39:08:a2:d2:0e:27:49:dd:11:
77:4d:7f:41:de:a4:d3:b9:a9:b3:56:42:72:05:a1:
00:2c:ba:6e:d9:58:a2:3a:b9:f3:2d:84:dc:92:c4:
42:db:9b:34:48:4b:a5:1a:e5:5f:51:19:16:66:21:
67:5c:f7:10:b2:bb:14:cb:07:8f:6e:74:06:d3:39:
f0:6f:72:b3:f9:0d:58:c2:e1:92:98:dd:7a:17:3f:
b3:1d:32:a0:01:ce:51:72:f1:ff:10:84:29:22:85:
d6:30:83:c6:d9:ba:60:45:34:3f:15:ad:e9:9f:17:
6c:3b:60:81:30:ba:57:99:b0:eb:cb:a1:e2:69:1c:
24:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:56:3E:17:6A:69:91:61:22:46:AD:09:D3:A0:20:80:53:A0:46:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8f6e58f6-6250-31c7-a192-1a283fac7892.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
204.74.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:78:2d:b7:24:5a:cf:94:11:e0:4e:de:9e:68:42:e1:4c:6f:
66:a8:f4:14:11:ec:00:d6:09:e1:3a:87:30:f3:6e:9f:05:6e:
c2:08:13:a3:d4:b4:e1:03:a8:12:ed:b6:19:b8:ee:e9:f4:5b:
7e:d8:09:cd:ad:8f:9b:1f:ce:6a:70:e4:cc:6e:12:7c:df:27:
da:4a:55:d8:00:8e:48:ee:96:65:c6:c3:70:8e:e5:58:6b:c2:
f0:ec:f1:fb:74:46:6b:8b:a3:c8:80:bd:90:8c:71:e4:ea:81:
dd:14:28:53:30:e2:f2:55:b4:bd:b6:23:c3:bf:6c:8c:4a:d7:
71:b4:40:db:ca:b0:7c:e0:c6:3b:01:5c:06:a7:ed:54:9f:3e:
85:6c:bc:73:63:e7:78:99:d2:4d:dd:7c:51:f5:74:78:06:e2:
6d:b4:75:72:3d:b7:42:c4:59:23:1e:09:4e:43:6b:26:74:b1:
c9:aa:65:38:7e:a6:ae:e4:87:d5:a9:bb:f1:15:36:d4:cb:1b:
9b:6b:76:55:ca:83:7e:62:27:f4:fb:98:b9:6f:71:05:3c:9d:
a4:f7:1e:e3:d7:9d:1d:a8:a8:db:05:08:f4:68:01:ae:5e:59:
d6:a8:06:fe:5e:20:15:99:31:d8:3d:e7:e5:66:8e:04:e8:d4:
22:a9:02:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:11:06 2025 by rpki-client